This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json)
Hash identifier: D39WYNS1eoqPhgW1KwNOsxFucKnkYcU7/LeEP1TcYHs=
Subject key identifier: E5:0C:09:35:37:15:1B:E6:E6:A9:5A:CB:B4:02:5F:E9:2F:EC:95:4A
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 019C41D8C02506B4CAEEE012A81E05A92ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
Manifest number: 0E14
Signing time: Mon 09 Feb 2026 10:00:49 +0000
Manifest this update: Mon 09 Feb 2026 10:00:49 +0000
Manifest next update: Tue 10 Feb 2026 10:00:49 +0000
Files and hashes: 1: 3vLLEawWlFzGv5JsfUPDtZBDJGY.roa (hash: PavOw4v6+T14FuM5j33PYH4PD5HZoqWe5pgCu1sHQTM=)
2: AHtaW66JMITwcArnsmCRwFXXsoI.roa (hash: ZcCP5/OLK7h3hkYbytBpwMfpzhJ4QDRnFvoryxgp3QU=)
3: GlceivHp-TV4Q9crmL9mrMBEglg.roa (hash: fi9rQQg/AghEIXY2rzjh9Ngdd5xXBUgGLZxXNH+o2gI=)
4: LXdVZsghVBzvzoaxQRbvjkVx8jQ.roa (hash: NF23Tpd0XzXu/8VnH1fo4lwK7GUHlQSNd4PIlBQQqXM=)
5: SqqfV0cqdsmTEBKuOvF0JJEbDoo.roa (hash: bMcPfDE84mvLVznq47OZBYkUC9R902MrAMG5aI6NhzY=)
6: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: KPd5CpAOZvKqPtWrB1ce+YyBc1U0QVzqpJpgquhyDVo=)
7: fLKffdmk_A9Snr8RhFbOZjjywPY.roa (hash: IiagzZLO/ENGlk4BhZMQEHdxX+qkJzXcYKWPS2YP1/k=)
8: hxoGXcKSbBJ2PWCa3J0fMHiuDsU.roa (hash: 7Q+LWc6VgpTopv5k3/peiGrLhiln8d4FJvX1XgGREac=)
9: m4ddTK804isbAZwCK7aJ6EBhPpU.roa (hash: 7StX8F57GxKb2pQJDMDon9e+sgj78negT0fCwKTunA8=)
10: yHzr1mLOyq97cMlnkU_QbvILd_k.roa (hash: A7tEKpefOfoVMYMfFB/0vDiWMTh6ZA+ebsPXTsPnyck=)
11: ziPECi56XWvOBSk7jFhCDI6bu7M.roa (hash: GtmGk+9Vj+/ONt8GKGTxXSgpLCYGnOP8KSMdgsMgpmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:c0:25:06:b4:ca:ee:e0:12:a8:1e:05:a9:2e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Feb 9 10:00:49 2026 GMT
Not After : Feb 10 10:00:49 2026 GMT
Subject: CN=e50c093537151be6e6a95acbb4025fe92fec954a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:ef:fd:e2:3e:3d:46:4c:59:90:7d:6e:03:
a9:4b:8d:b4:08:b9:4e:c1:b7:ed:14:b3:11:44:e5:
50:01:42:7c:91:35:0b:f3:66:f6:99:a5:7f:62:13:
f4:56:71:df:29:dd:31:8d:e2:0b:cd:1e:75:1e:2c:
1f:88:02:57:cf:d6:df:a1:e7:05:e1:f0:ff:35:f6:
85:4b:d3:b1:44:3d:88:8a:c2:bc:65:35:f8:4d:60:
fc:ad:93:d2:31:44:19:02:41:ad:94:64:ca:04:09:
9a:1f:a5:f1:0e:db:8f:73:52:26:10:73:66:b4:4c:
fa:77:d1:82:66:e1:67:b4:98:ca:c7:cc:1a:97:76:
6b:52:d5:e4:40:3e:f2:16:e1:ac:16:b3:8d:47:09:
d7:c8:6d:0b:f2:8b:47:be:f5:2a:3c:2e:28:a7:c3:
fb:41:3a:57:85:9b:a9:ce:35:b3:df:0b:35:ba:bd:
99:54:33:44:32:cd:b6:ad:46:c0:67:1f:41:e0:da:
b2:ea:1a:4d:35:fc:60:a8:5a:91:37:01:90:35:a5:
18:26:8e:8c:8d:15:da:18:a7:81:05:81:9d:5b:c0:
44:76:60:cb:24:08:b0:ff:b0:25:7f:77:50:dd:55:
4c:32:c8:fa:a6:b5:fb:f4:97:cc:53:8d:c3:95:67:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:09:35:37:15:1B:E6:E6:A9:5A:CB:B4:02:5F:E9:2F:EC:95:4A
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f9:e1:40:22:a2:d4:7e:99:36:79:65:a0:ae:26:d3:3c:10:
91:13:b1:f5:f6:99:ff:ad:1a:23:8c:e8:00:52:2c:bc:8a:9c:
6c:29:2a:35:6a:c2:04:e5:17:86:a4:ee:e7:aa:ef:4d:e5:06:
d4:e6:51:95:9a:e4:e5:0c:04:cc:a8:b8:40:b4:6a:c0:f2:67:
61:12:c8:ca:7b:59:f8:2a:68:6c:ff:d9:62:82:ee:f9:1b:ee:
89:3c:90:0e:c1:26:29:f7:1e:09:b4:3f:c6:9d:0e:7e:b7:fc:
0a:ec:4b:b9:53:45:df:51:5c:55:05:73:5e:1b:56:1b:e6:60:
f1:9d:23:93:17:ed:ba:67:e5:48:93:d1:20:bf:c0:d3:90:d0:
46:d0:4b:a3:b1:f8:ee:fb:2a:18:fc:01:62:13:94:ba:fa:29:
6d:a2:f3:1f:0b:c8:da:07:79:0f:89:42:21:6c:08:22:8d:ba:
72:21:7f:a9:ca:b8:dd:c1:0b:65:55:c8:11:76:c9:da:24:f1:
c2:d4:19:58:09:bb:c2:0c:52:69:d2:c7:f0:5d:69:f9:db:35:
62:fd:69:45:5a:2a:58:a3:0e:d6:0c:03:89:1c:fd:70:11:bc:
dc:18:19:35:ea:89:7e:40:7b:81:cd:eb:70:d0:03:3b:83:d3:
6f:a6:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:59 2026 by rpki-client