This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File: d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier: A+H6fVUCaBpO+0hAQcaFtaybC+1PtkMsppIWzHvkfes=
Subject key identifier: C4:64:10:97:BE:AB:7F:37:B6:4C:39:E1:9F:5E:4B:19:47:C3:08:3D
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial: 019C41A18C6A04E6CF0079E180FEB6316859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number: 1733
Signing time: Mon 09 Feb 2026 09:00:32 +0000
Manifest this update: Mon 09 Feb 2026 09:00:32 +0000
Manifest next update: Tue 10 Feb 2026 09:00:32 +0000
Files and hashes: 1: 2C6Ya6h31uul1QKjxJOYJtW0-Js.roa (hash: GfQhpseBFat/Xeckvhncromu6LqqPVkLS18vLbabiRM=)
2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: 8xCE0Q8424a1Q2JByyMc021aaiAaXyt7JhtaFrzWa78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:8c:6a:04:e6:cf:00:79:e1:80:fe:b6:31:68:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Validity
Not Before: Feb 9 09:00:32 2026 GMT
Not After : Feb 10 09:00:32 2026 GMT
Subject: CN=c4641097beab7f37b64c39e19f5e4b1947c3083d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:2d:d4:e8:1a:d2:fb:c6:56:a8:38:aa:84:
d9:4b:6f:67:67:7b:0a:57:e1:57:e2:d5:74:90:9d:
b0:e5:2a:3a:86:f9:44:b3:19:b2:be:6f:74:1a:cf:
2c:e6:4b:15:8a:68:5c:44:50:06:0a:cc:cd:b4:df:
b2:7c:53:5d:1a:23:9c:9e:66:78:b4:8a:b1:d1:5a:
e0:e5:74:af:a2:c6:00:28:e2:67:df:1e:a4:51:37:
db:9f:8e:7f:29:01:33:d5:86:14:99:c3:d6:9d:a7:
26:4e:84:26:cd:db:97:cf:b1:49:87:df:28:7b:9d:
18:3e:90:56:1c:2e:33:49:7c:47:3e:74:bb:fe:61:
f4:79:f5:a5:8d:4a:5a:7f:d5:dc:83:34:10:0e:60:
57:0f:70:8a:2f:00:0c:c8:8c:75:b1:de:58:cb:e2:
55:e8:08:56:e7:36:09:9b:e0:1f:19:ba:59:aa:d1:
27:ed:c3:85:e3:7f:8d:95:2b:66:d9:71:24:0c:6f:
36:e9:bc:32:24:36:35:cd:b0:13:80:e1:55:56:ed:
ec:a0:85:cc:a9:4d:6a:4c:b9:98:50:e4:39:b2:e6:
c4:77:98:bb:ec:fe:f4:cc:4e:57:f5:3d:67:bc:72:
df:fd:51:64:f7:67:b8:34:e7:9e:c1:13:3e:c2:ea:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:10:97:BE:AB:7F:37:B6:4C:39:E1:9F:5E:4B:19:47:C3:08:3D
X509v3 Authority Key Identifier:
keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c0:21:4f:fc:43:c1:33:8a:dd:f6:88:ca:69:bf:47:17:0b:
6b:4e:11:1a:c7:c1:f9:3c:b3:7a:e0:be:ee:e8:7e:a0:88:7f:
5a:99:67:74:9e:a2:e3:ae:12:2c:d5:1d:c9:cf:b4:a7:25:f1:
80:37:69:85:31:c4:68:a2:7e:34:49:15:1c:90:92:a5:e0:bc:
7b:1c:6b:8c:97:00:84:df:35:05:63:06:14:e1:ec:66:31:6f:
93:45:c5:1e:33:63:21:37:3b:35:87:72:6e:eb:2c:e9:bb:12:
be:e0:56:79:78:09:b9:18:2a:44:a7:d7:72:30:00:a4:d7:10:
c0:7a:b0:43:c4:61:61:df:7c:94:35:b8:9d:8e:cf:ab:ad:9f:
d7:46:a0:31:57:c5:4c:e6:76:2e:af:96:3b:29:d3:f7:e0:c4:
59:7f:91:4f:49:24:97:90:24:c4:7f:a1:e4:6d:29:cb:b4:58:
0f:05:a1:b1:b5:09:15:7f:e0:e3:f3:4b:32:fb:12:1a:95:7c:
cc:b1:21:bd:91:5e:d1:1f:f1:b0:2b:2f:af:bb:84:91:94:15:
4a:26:b8:ea:f0:0c:b3:07:38:1b:45:ec:1d:f3:4b:f8:c7:56:
30:68:a0:40:e6:04:1b:73:6e:1e:cc:6b:2c:3f:9e:fc:48:8a:
58:a7:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:02 2026 by rpki-client