This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: EqEPs/i7avEVOTif7rFz8hP+4qLoQqJXBg9Bsnf3MLQ=
Subject key identifier: 9B:1B:B8:50:4C:AF:CE:31:58:ED:D6:4F:41:D3:D5:03:E9:38:6D:BC
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 019AF1D1F70932FC02DC7FAB4C3096066048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 04:01:00 +0000
Manifest this update: Sat 06 Dec 2025 04:01:00 +0000
Manifest next update: Sun 07 Dec 2025 04:01:00 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: gOVSxEzeWvuVRsLqtMYdIcobya3CwBx/MhZN4wgJGeA=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:f7:09:32:fc:02:dc:7f:ab:4c:30:96:06:60:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Dec 6 04:01:00 2025 GMT
Not After : Dec 7 04:01:00 2025 GMT
Subject: CN=9b1bb8504cafce3158edd64f41d3d503e9386dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:67:ed:0b:6d:35:f5:94:ca:56:a8:e9:33:
2a:11:b9:a7:ad:f3:5a:23:c2:2c:6a:8d:ed:5c:dc:
0b:e8:e3:5e:17:1a:8c:47:26:28:85:22:4d:4d:e0:
88:9d:fa:dd:1d:6a:38:e7:90:a8:55:e2:e8:fd:e9:
ae:5c:bc:5e:84:8f:0c:57:5b:62:7b:57:60:55:27:
a1:5e:5b:bc:45:e5:1f:19:a8:b1:54:1a:49:0d:eb:
c9:6e:8d:40:eb:fd:d2:2a:f4:3b:5a:a2:85:e4:ca:
04:a5:6b:49:ac:0a:2d:b6:9a:1a:ab:4b:43:c2:66:
98:ae:3b:f8:40:07:79:1e:07:e0:39:e7:cb:e9:7c:
9a:95:52:5e:18:24:98:e0:cb:06:a7:59:06:7c:3b:
06:a9:2a:20:f3:5f:b7:9a:f4:e1:61:fd:9a:3a:0e:
cb:7d:cd:9a:46:71:02:03:f1:50:e9:40:04:54:10:
0e:11:04:73:71:d0:3b:57:ab:3d:42:25:24:81:ad:
97:d9:48:49:ff:e0:f9:4a:d2:59:c2:9f:1e:b9:e0:
f8:3a:0f:56:ab:4d:1e:95:d6:a9:ca:d9:61:b8:7e:
0a:fc:58:51:ce:c8:68:2e:49:69:a5:d0:5e:ab:f3:
17:1e:5c:e9:75:3b:1d:c1:70:a1:9d:36:6c:3a:a6:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1B:B8:50:4C:AF:CE:31:58:ED:D6:4F:41:D3:D5:03:E9:38:6D:BC
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d2:b0:9c:a7:16:89:1e:7c:72:a4:7c:07:e4:6f:da:0e:e9:
4d:56:63:a7:67:9b:f1:a7:ba:10:e9:3c:f9:db:00:34:80:d6:
2f:82:73:24:f3:ee:57:b6:54:ff:cc:14:20:25:a5:4c:7a:f1:
ba:f7:28:cd:d4:6c:96:50:4a:1a:b7:d0:81:76:fd:24:df:6f:
8e:2b:0e:1f:fc:ac:4b:a5:a1:dc:57:10:89:aa:be:0f:b7:2c:
7a:f0:2d:03:78:52:fb:a3:54:74:48:f4:d5:e2:7e:b5:b1:6e:
b5:ac:91:87:6d:a3:2c:ff:2f:a8:bf:b8:4a:22:7e:eb:ec:81:
98:ef:11:94:6f:9f:20:fc:df:4e:b2:8d:50:78:77:3c:d2:d4:
16:e6:26:32:37:b7:8c:ce:aa:ad:bf:d8:38:ad:64:41:d6:3d:
32:a3:9b:2c:db:c0:c0:58:6b:11:c8:29:72:02:0f:fa:ea:be:
8c:59:cf:c3:ec:cb:00:f4:e4:dd:12:97:de:28:da:6a:95:41:
db:ac:8f:c5:7e:8c:84:9b:90:c4:f9:e6:16:e6:65:0a:fc:18:
8c:38:ba:0d:da:86:32:b9:2c:39:36:e8:e9:2e:3c:d5:13:0b:
5a:9f:0b:80:73:59:0d:8b:a0:c6:c6:12:3e:05:cf:d8:58:81:
c5:b9:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:59:10 2025 by rpki-client