This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json)
Hash identifier: OpV0W33YU3HL1HWe0J9VgrVyj7oSgVY5CHrgBBIx3/o=
Subject key identifier: 3A:22:D5:E5:ED:16:06:8C:3F:A5:34:8E:99:1B:A5:30:5D:64:1C:DA
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019BF2E1CA9722F248A257A01B9A820E8D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
Manifest number: 117A
Signing time: Sun 25 Jan 2026 02:00:42 +0000
Manifest this update: Sun 25 Jan 2026 02:00:42 +0000
Manifest next update: Mon 26 Jan 2026 02:00:42 +0000
Files and hashes: 1: 1-BjMSdO6iVbOpkDl-BE8qpgDZLg.roa (hash: F+ot0aUOSLbQbycLUgEkSCqZvG9RZcn5sPnsPXjM3Zs=)
2: 3toE35EUITjod3ujsTDiStr_B54.roa (hash: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs=)
3: 8nl2mLa9KaQYd0gtNecXWVE84vs.roa (hash: e0ZLWW8LXQsY4AnPfxVi/bqwxVjXvo2BrP7yTMcokRY=)
4: IyuNOfmUXirly0xEaKEHq8m71oY.roa (hash: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8=)
5: Qn401VjRXKGDOf7NfQhRPs5gtIc.roa (hash: BhSOyAZmERjzTEXW+u/72sABlpWtwlmScG97x0q/RGk=)
6: Rvb_MYoiUHFCOaA-RbHwVikspwQ.roa (hash: u+02TSm2IbZTqUuUBwPekY51BpwcVFSZdhS945AWzxs=)
7: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (hash: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34=)
8: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (hash: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM=)
9: eGy-TWABgnLZkghosaJJHcTee5w.roa (hash: 3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=)
10: g4mhQkZ-W3DH7w32kDilwhWh3UI.roa (hash: cRRI4PBzENvs8YFRc+A7zpv0xEy1CNOhR/QmFc0X8zI=)
11: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: Da3xXRD+Rn/AzAAQbRNmqFTo2QogkIs1XxPk5D+KT34=)
12: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (hash: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4=)
13: sCKbGnkLwgEhS7pIIJjS0biYxrc.roa (hash: I2ey4PW/vo4FB5Fjc9jrXP4LPxpKbbEJ9En7gwlq4XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e1:ca:97:22:f2:48:a2:57:a0:1b:9a:82:0e:8d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 25 02:00:42 2026 GMT
Not After : Jan 26 02:00:42 2026 GMT
Subject: CN=3a22d5e5ed16068c3fa5348e991ba5305d641cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:ba:b6:67:c2:df:55:19:05:d2:00:16:3a:
dc:fa:e1:3c:5a:14:24:3c:0d:90:1d:bc:fa:f3:2c:
61:f2:f1:21:da:ec:68:df:9a:c6:ab:e8:82:b2:75:
40:d4:74:98:d6:8b:f0:14:be:27:bf:0e:ed:94:14:
57:20:9d:05:73:69:78:d0:25:bb:75:a3:8a:be:22:
18:cf:18:2b:9f:cd:8b:c9:1b:a1:87:64:0a:8c:ff:
00:09:82:53:f8:f8:67:74:bc:4d:47:69:d2:56:39:
92:25:48:73:5d:82:be:cb:af:2b:0e:c4:80:86:63:
c8:73:61:3f:d2:9f:d4:40:2e:6e:ca:90:07:fb:e6:
9e:34:9d:6e:c2:35:42:e1:fb:da:a3:df:31:28:37:
be:b6:46:ac:d3:63:9f:93:5c:97:46:11:0d:79:ce:
59:c7:28:59:02:28:ef:59:8f:b7:1d:42:e9:e8:2e:
d4:45:7d:1f:fb:d1:59:77:3b:d8:81:ff:61:74:52:
bc:59:05:bd:86:64:69:97:13:bc:3f:a5:7e:04:83:
ed:ad:a8:c0:69:63:0d:5d:74:4f:4a:94:5e:00:a6:
06:58:9f:15:d1:5a:d2:16:aa:65:4c:8f:2b:b4:cb:
5c:1c:ce:de:4b:0e:21:6d:c6:a8:00:34:e9:0d:dc:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:22:D5:E5:ED:16:06:8C:3F:A5:34:8E:99:1B:A5:30:5D:64:1C:DA
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1a:59:9c:36:7a:94:b0:49:10:e7:75:75:88:0c:6a:35:25:
12:9a:ea:82:97:85:de:57:00:e9:cd:4e:74:e1:31:4d:dc:58:
dc:d4:06:64:67:63:e6:e2:ef:fa:89:7f:a7:f9:88:b2:f5:e6:
e6:1d:bb:95:c3:b8:c1:04:9b:ea:fc:f2:76:17:bc:d5:2e:52:
82:ce:9a:1a:fb:dc:ba:cb:49:42:c8:4b:8f:33:ca:29:7b:57:
c3:9f:bb:cd:7d:3a:3a:70:ef:17:25:8e:2f:b7:99:dd:fa:c3:
62:c4:35:62:0e:98:f2:66:08:c5:4b:7d:65:44:20:f5:9b:66:
fd:60:1c:0b:1a:93:b5:80:65:73:8e:3e:bc:4d:be:cc:8a:11:
e0:fa:7a:9c:13:74:d9:07:c9:87:e4:dc:40:fa:36:7a:42:5f:
c3:10:93:96:14:59:0f:d5:16:7c:14:40:61:ae:2b:cb:c0:98:
04:0d:6c:55:f2:21:0b:4e:8e:d6:c8:6f:fa:bf:f2:0b:06:f0:
61:4f:33:bb:09:cf:8f:b7:4b:23:3f:cf:39:8e:46:0e:2e:14:
e7:f8:96:18:d6:08:43:21:4a:28:fd:31:75:75:de:01:6b:27:
de:65:cf:38:4d:3a:52:85:2d:b5:4d:fd:91:6f:da:cf:cf:50:
a5:17:6e:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvy4cqXIvJIolegG5qCDo1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjYwMTI1MDIwMDQyWhcNMjYwMTI2MDIwMDQyWjAzMTEwLwYDVQQD
EygzYTIyZDVlNWVkMTYwNjhjM2ZhNTM0OGU5OTFiYTUzMDVkNjQxY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtO6tmfC31UZBdIAFjrc+uE8WhQk
PA2QHbz68yxh8vEh2uxo35rGq+iCsnVA1HSY1ovwFL4nvw7tlBRXIJ0Fc2l40CW7
daOKviIYzxgrn82LyRuhh2QKjP8ACYJT+PhndLxNR2nSVjmSJUhzXYK+y68rDsSA
hmPIc2E/0p/UQC5uypAH++aeNJ1uwjVC4fvao98xKDe+tkas02Ofk1yXRhENec5Z
xyhZAijvWY+3HULp6C7URX0f+9FZdzvYgf9hdFK8WQW9hmRplxO8P6V+BIPtrajA
aWMNXXRPSpReAKYGWJ8V0VrSFqplTI8rtMtcHM7eSw4hbcaoADTpDdwXowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoi1eXtFgaMP6U0jpkbpTBdZBzaMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxpZnDZ6
lLBJEOd1dYgMajUlEprqgpeF3lcA6c1OdOExTdxY3NQGZGdj5uLv+ol/p/mIsvXm
5h27lcO4wQSb6vzydhe81S5Sgs6aGvvcustJQshLjzPKKXtXw5+7zX06OnDvFyWO
L7eZ3frDYsQ1Yg6Y8mYIxUt9ZUQg9Ztm/WAcCxqTtYBlc44+vE2+zIoR4Pp6nBN0
2QfJh+TcQPo2ekJfwxCTlhRZD9UWfBRAYa4ry8CYBA1sVfIhC06O1shv+r/yCwbw
YU8zuwnPj7dLIz/POY5GDi4U5/iWGNYIQyFKKP0xdXXeAWsn3mXPOE06UoUttU39
kW/az89QpRduOA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:02 2026 by rpki-client