This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
File: SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json)
Hash identifier: 22oRJU1ZHY4T6WzuiXfkjObqy6NTCqIZfYrEKrnINVk=
Subject key identifier: 92:C5:1D:CE:D6:5B:68:CC:25:63:D1:DB:5F:53:F1:25:68:BC:D0:5C
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Certificate issuer: /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial: 019C42B426B793F313CA361000760F4B668D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
Manifest number: 0DEC
Signing time: Mon 09 Feb 2026 14:00:28 +0000
Manifest this update: Mon 09 Feb 2026 14:00:28 +0000
Manifest next update: Tue 10 Feb 2026 14:00:28 +0000
Files and hashes: 1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: M1+cUI6fZI3OQ46XDtFRaQUfto+ME5oLCbbte9e51N8=)
2: Wvn-6bOtVas0qXKxXybSRbQtZBc.roa (hash: 1X1eFGWJ8hZe2T0rJSVL9R4hPe90VqVV+Y7boPOk/og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:26:b7:93:f3:13:ca:36:10:00:76:0f:4b:66:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Validity
Not Before: Feb 9 14:00:28 2026 GMT
Not After : Feb 10 14:00:28 2026 GMT
Subject: CN=92c51dced65b68cc2563d1db5f53f12568bcd05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:a3:2e:bb:a6:47:f0:d7:10:37:1d:ec:73:
68:68:1f:08:6b:8c:2a:d5:c2:4d:32:3a:0e:a6:23:
f7:ae:9b:df:a9:f5:86:d6:ab:92:79:ff:ef:0b:65:
b6:11:82:08:37:02:3c:b2:72:6b:62:33:7a:67:ae:
14:6c:51:c3:18:82:93:06:73:13:10:7b:ee:42:ca:
27:25:bb:cd:0f:2d:ea:cf:f4:78:2c:34:9f:74:c3:
48:c0:f5:fd:20:13:5b:70:16:03:6a:b8:59:81:28:
1a:f8:c3:51:75:a5:81:57:b0:6b:59:1d:35:03:6a:
fb:7c:b1:eb:50:ef:af:21:4a:d7:46:5f:4d:5a:a8:
bb:09:46:eb:63:e4:42:b8:f4:c1:b1:da:8c:17:86:
a2:8a:44:61:28:3b:57:c9:7a:bb:e9:ee:4c:f1:19:
6b:37:83:60:63:4a:7d:5e:7b:57:de:4e:17:81:5f:
db:34:3b:8f:6d:a6:76:1f:b3:6b:1a:9c:06:f8:9e:
1b:2b:97:6a:b7:d2:ea:16:40:57:81:ea:c4:bf:13:
54:90:f8:3e:31:7c:c1:8e:98:74:91:13:f6:a7:ef:
83:e9:44:4c:60:c2:94:30:91:16:64:19:52:af:fc:
42:b9:e7:4c:99:0b:91:86:f7:5d:6e:b5:55:59:01:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C5:1D:CE:D6:5B:68:CC:25:63:D1:DB:5F:53:F1:25:68:BC:D0:5C
X509v3 Authority Key Identifier:
keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:42:60:37:f8:2b:e2:9a:50:d4:1d:d6:9c:14:b2:a4:c6:2b:
ec:10:5f:e7:8f:12:9e:c2:6d:15:2f:bb:90:a4:aa:a0:24:e4:
34:3c:a1:fa:85:12:b3:32:50:e5:a0:20:52:46:72:86:34:b5:
15:d1:68:30:73:cd:95:2a:9a:ce:cb:04:c8:0e:51:92:aa:e1:
24:1e:d2:85:e3:48:7f:fc:be:ae:bc:62:d2:3e:2f:50:87:77:
c1:aa:ab:33:a4:8e:86:52:23:70:92:25:5e:90:fc:73:04:4b:
86:58:a4:b4:bf:1a:1e:8b:80:a5:c6:05:6f:ea:b6:84:83:f0:
c4:07:3c:f7:d3:c0:e3:cd:49:99:9d:fc:dc:26:a4:e6:e8:e8:
f4:b7:75:1d:42:39:2d:74:f6:e8:3d:e3:e7:54:0b:c1:ce:23:
d8:a4:b6:ae:ca:44:65:9f:51:a1:26:61:f1:47:af:97:dd:20:
00:f1:b8:67:af:6c:e8:98:d7:64:a3:5a:5b:1d:05:88:4c:ce:
0a:d2:9d:8d:5b:5c:e4:3a:5a:46:34:b4:5a:db:cb:d2:3a:b3:
01:27:07:24:52:67:b3:81:e1:dc:37:90:1e:3c:9a:87:41:25:
2f:0a:22:bd:a3:5e:39:4a:3b:ae:96:4a:d2:00:b8:92:58:7b:
0d:1c:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:50 2026 by rpki-client