This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: 1zzCIRaFOETL4ItxBaAe5wCQeCgS/TCaQ/M/5s+4WJ4=
Subject key identifier: F9:76:E1:9E:17:BC:37:92:D4:36:E1:15:90:90:0A:20:B7:69:4F:DC
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019C45EC6C9139571CC0D33A9226A4C709B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1822
Signing time: Tue 10 Feb 2026 05:00:47 +0000
Manifest this update: Tue 10 Feb 2026 05:00:47 +0000
Manifest next update: Wed 11 Feb 2026 05:00:47 +0000
Files and hashes: 1: JlOAjttYipL0TGtbfBsFFvLjAR8.roa (hash: TVmfCw1v4XJ8nqxuPkYqDh+JoZDFJOLgqdhk5gRKV6o=)
2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: 7+Gd7wiGwS61cCE1vTbJJgixzgjyf0TsFF3PC6EzOGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:ec:6c:91:39:57:1c:c0:d3:3a:92:26:a4:c7:09:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Feb 10 05:00:47 2026 GMT
Not After : Feb 11 05:00:47 2026 GMT
Subject: CN=f976e19e17bc3792d436e11590900a20b7694fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:e5:26:75:d0:86:39:c8:c3:25:f5:bb:a8:
2c:d8:40:37:00:f3:04:41:e9:c1:fc:59:5e:88:9c:
fe:36:73:37:49:fe:46:db:81:52:6b:6e:1f:e9:34:
3e:2d:ad:31:e6:9d:f1:69:71:24:1f:02:5f:3f:32:
5a:4c:b4:b5:25:dd:ad:83:ef:ab:d9:85:e8:a8:04:
e3:3a:e9:c6:57:46:4e:dc:24:33:5d:0f:6f:a4:bd:
b2:e2:73:5f:41:38:5d:0b:ad:a8:10:76:39:d9:09:
ed:e4:41:14:70:86:e6:89:24:7f:be:d5:a0:d0:f0:
bd:80:99:93:11:92:10:19:f8:5a:97:65:0a:c9:58:
f3:b3:4a:35:d9:1d:ab:a5:11:55:06:2f:4f:86:44:
62:63:e0:47:ba:7c:d6:40:da:29:9d:91:15:15:b7:
34:61:b4:e5:20:ec:ca:76:1f:ce:e6:db:f7:17:d3:
2e:14:15:93:e8:87:be:cc:b1:f4:37:dd:c9:99:20:
23:71:22:10:34:3f:04:56:76:bb:05:0a:02:ee:c9:
c3:13:14:11:82:ca:25:3d:d1:5a:ef:4b:1b:a9:81:
ab:f9:24:9c:c8:b2:6a:ed:8a:2f:e9:76:69:85:a6:
08:36:44:f8:44:d4:d1:71:b7:81:50:98:0e:b9:09:
ca:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:76:E1:9E:17:BC:37:92:D4:36:E1:15:90:90:0A:20:B7:69:4F:DC
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8c:a3:be:db:df:62:8a:7c:66:e7:92:d2:cb:d1:13:e0:e3:
16:ae:99:ef:f5:d8:39:3e:55:3a:4f:3a:eb:c8:fd:22:83:5a:
3a:ee:7b:6a:e4:d0:c5:ba:93:25:03:82:33:fe:5b:e5:59:3f:
78:ea:29:5a:49:6e:de:2e:b1:99:be:1d:63:b6:04:54:7a:35:
3a:dc:c5:24:e5:55:93:5d:1b:14:67:2c:66:96:aa:f8:cc:48:
03:43:62:1f:6c:0a:89:46:1e:0f:62:46:33:32:7d:3e:d1:f1:
96:3a:6d:e5:f5:40:0e:98:f0:f5:76:db:bf:e5:1a:cc:4e:6c:
eb:4f:83:cc:84:68:ae:b4:83:be:3d:e6:55:7b:14:e4:08:a5:
61:dc:cc:a1:78:78:39:dc:97:f6:ff:fd:cf:28:f4:ce:67:6f:
97:22:59:dd:b7:6d:15:d8:27:cd:ab:3d:59:a0:73:e3:f7:4c:
4b:c1:96:dc:11:e6:06:f9:ef:a4:2b:11:45:8f:c1:ac:53:19:
f3:cf:b3:33:cc:c9:c0:ec:60:bb:17:cd:3d:37:ae:4e:22:55:
5c:d4:6a:98:ed:4b:22:38:0d:7a:03:b8:8a:4e:54:9d:bd:58:
5b:5b:eb:2e:f5:07:a4:71:ee:52:4c:3d:5f:2d:33:a7:4e:59:
11:d0:9e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:47:09 2026 by rpki-client