This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
File: DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json)
Hash identifier: pyJEkxrNtWrgGgb7vRrOj5u+R286yi3KoLyn3q5g3ns=
Subject key identifier: C3:26:13:45:96:2A:26:7A:B4:A8:F7:76:D1:4C:56:93:9B:83:93:78
Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Certificate serial: 019C42B45EE6CCAF4B94A7F072C7C5EAFE82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
Manifest number: 48
Signing time: Mon 09 Feb 2026 14:00:42 +0000
Manifest this update: Mon 09 Feb 2026 14:00:42 +0000
Manifest next update: Tue 10 Feb 2026 14:00:42 +0000
Files and hashes: 1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: Z4iWckrq3gCisZUWafeAOGaaSKHq745Q6u043XImjbU=)
2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:5e:e6:cc:af:4b:94:a7:f0:72:c7:c5:ea:fe:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Validity
Not Before: Feb 9 14:00:42 2026 GMT
Not After : Feb 10 14:00:42 2026 GMT
Subject: CN=c3261345962a267ab4a8f776d14c56939b839378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:83:e8:6b:15:6b:2f:f9:9e:ad:fd:67:39:ed:
1c:66:ca:90:db:4b:ed:e1:3f:92:71:9c:f9:01:90:
8a:6c:c6:46:fb:d7:80:1c:28:c9:09:f2:a7:0b:e5:
c1:dc:e8:b4:4d:9d:8e:5e:e1:a7:1a:38:50:a4:9a:
e2:04:ad:66:30:ac:dd:9d:96:5d:5a:7c:f0:66:7a:
58:b3:63:f6:93:54:ae:4a:c8:80:97:19:c3:d8:53:
29:55:db:0f:54:17:cd:a6:bd:31:1d:5b:f2:0e:34:
8b:fa:a3:41:e1:04:2c:bf:d7:9f:5d:5d:64:ea:d2:
fa:0f:c5:62:f7:65:d5:ee:aa:11:a0:73:82:88:48:
13:a6:21:af:a4:e8:d5:78:d6:c3:69:57:29:ea:3e:
a1:87:be:56:51:85:92:31:d8:85:92:91:6c:3f:78:
3b:75:ac:fd:cc:33:5a:ea:9f:97:2e:1a:ca:70:54:
df:6d:8d:90:aa:75:bb:62:4a:9c:75:7a:88:a3:9d:
51:5c:95:4a:7d:da:c3:0c:51:5a:0e:b2:16:c2:61:
c2:83:d7:99:84:6d:96:f5:59:61:c2:4b:3e:6e:ea:
d8:cf:78:44:4e:40:8a:b8:f3:f5:44:e1:a8:f2:76:
e3:e1:cb:3c:87:b6:43:07:0e:43:f9:e8:10:03:9a:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:26:13:45:96:2A:26:7A:B4:A8:F7:76:D1:4C:56:93:9B:83:93:78
X509v3 Authority Key Identifier:
keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ee:42:10:5b:0a:19:45:cc:65:b7:f5:8e:51:be:db:0d:58:
d8:9f:94:16:ba:f6:e8:45:22:fe:0c:79:99:cd:61:c8:d1:ae:
c8:bf:5e:b4:db:b7:82:d1:cf:a5:21:a8:a8:dd:8b:35:2a:b2:
09:de:04:92:13:b6:ad:d2:24:61:70:53:cb:ed:2c:4f:86:4b:
fd:93:e0:db:0a:4a:7e:2f:d9:9c:e5:15:83:45:4a:50:60:7f:
cd:9b:0b:69:b1:c3:40:f0:48:a0:0c:53:d5:f0:43:6a:0d:d6:
b8:21:aa:fd:9f:61:27:c4:b2:3a:7e:43:e2:bf:21:fc:f2:30:
42:22:7b:51:ab:f3:5c:8e:76:71:c1:a5:55:2f:bc:ce:3e:ab:
0e:71:df:19:62:eb:d5:a6:66:4e:68:cf:fd:ac:bd:2c:6e:95:
4e:c0:a5:c0:f7:45:e1:98:d5:84:d5:1c:8a:da:e5:c5:98:0e:
a7:49:bd:82:09:80:2b:ba:94:93:63:c0:44:49:a9:5f:1c:aa:
3c:42:1c:5a:9d:38:20:bd:b9:49:81:ba:57:57:37:07:b0:52:
55:36:12:20:36:38:b3:ff:03:d7:fa:e1:04:cd:77:77:be:73:
e5:7a:af:c9:fe:45:2f:37:cf:07:ad:4c:01:3d:39:ae:0f:4f:
b8:1c:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:40 2026 by rpki-client