This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File: 0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier: wz7n0Ui03qKf0wJjXh7vWM4UmmrZMUoFss0dQ65ZqKE=
Subject key identifier: 32:CF:8F:FE:72:47:65:C2:A4:A6:1C:E4:22:A2:4B:5C:D6:F8:78:81
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer: /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial: 019C4434D8EC51B573A1A8ABCEEBD161047C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number: 0794
Signing time: Mon 09 Feb 2026 21:00:39 +0000
Manifest this update: Mon 09 Feb 2026 21:00:39 +0000
Manifest next update: Tue 10 Feb 2026 21:00:39 +0000
Files and hashes: 1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: lgF/RHVNIlbcC2wznYrK20+jqE5i8MM19UlpnM0mcpM=)
2: E8WXXcfuvBDPmOaMAFbCOw__lzs.roa (hash: DXmeZN81Z/RFvXHNJ2glOBWlXdcBg+DgqjRRTo5Assk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:34:d8:ec:51:b5:73:a1:a8:ab:ce:eb:d1:61:04:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Validity
Not Before: Feb 9 21:00:39 2026 GMT
Not After : Feb 10 21:00:39 2026 GMT
Subject: CN=32cf8ffe724765c2a4a61ce422a24b5cd6f87881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:bf:f2:3a:d6:c2:08:b5:80:76:1d:ec:a4:2c:
7c:fe:78:29:a7:9d:7b:f1:fd:34:de:54:c8:d2:47:
f0:89:12:62:42:c8:0a:b3:44:b1:21:cc:95:37:59:
ef:7f:29:e8:6d:02:bb:70:2f:be:ba:db:f9:92:13:
b3:9e:90:e8:81:7f:a8:21:01:f8:de:f1:2c:f9:a4:
ae:2e:9b:03:63:2c:a6:fa:88:f6:8c:5e:b9:06:ce:
ed:4e:e9:b4:08:d2:51:03:26:5e:c2:83:7e:ce:97:
4c:ec:4f:c1:84:47:fe:6a:54:12:1f:d4:86:1f:2f:
a4:e8:21:17:63:8d:d5:2f:cc:eb:0a:0d:24:dc:10:
a7:1f:31:30:fe:5a:99:b8:1e:da:42:6e:99:ab:d8:
e6:8c:ac:a9:85:6f:f6:e4:56:18:d6:24:bb:06:5b:
de:d7:a2:e5:6a:8d:b8:1b:e2:d7:7b:2a:0e:7a:27:
aa:46:48:06:b0:63:f0:b9:48:32:bd:8e:d4:39:d9:
29:4f:27:f3:9a:a0:bb:dd:f5:b7:cb:f2:c3:13:47:
8c:44:58:34:a3:e6:98:10:f1:3f:c0:53:7a:82:35:
b5:49:41:33:98:63:d5:44:e8:c6:7a:5e:1e:1d:fb:
55:67:2f:ea:5a:f2:6a:1f:28:1b:93:cd:37:39:3c:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CF:8F:FE:72:47:65:C2:A4:A6:1C:E4:22:A2:4B:5C:D6:F8:78:81
X509v3 Authority Key Identifier:
keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b8:76:c1:c0:2d:91:4f:bd:aa:73:d3:05:24:4a:14:6a:23:
56:32:b3:50:7b:18:fb:ed:88:78:e7:f8:11:8b:b3:63:2a:1d:
dc:ec:4c:0c:cd:06:90:3e:95:91:72:62:71:0d:22:f6:74:9b:
5e:a6:54:87:12:be:af:d8:2b:7e:48:d9:a5:97:e9:9a:e4:2f:
94:de:82:27:0b:2f:a3:16:3f:f9:2d:3e:85:17:2c:13:c8:43:
cb:d4:75:4c:7a:c8:b7:af:72:4b:e7:90:9e:0b:b5:9b:3f:ca:
5c:8b:53:a1:b6:43:22:12:6f:a8:35:f0:5f:15:98:e1:73:84:
dd:6d:5d:31:c4:af:58:1d:43:71:5c:3b:5c:ae:6f:f7:39:57:
4f:27:46:bf:24:b3:78:f1:7f:3a:70:85:93:41:45:bb:b9:bb:
1d:dc:15:f4:99:eb:61:13:94:3c:82:c2:c5:67:f4:bd:3c:58:
b4:e2:7a:d8:72:98:cb:a1:1f:e9:2d:08:7e:cf:78:a5:39:40:
07:15:6b:c6:44:4f:88:68:a4:7e:18:88:50:46:eb:79:11:25:
e6:8e:56:5d:47:23:8e:48:12:f3:ca:17:fe:51:ed:62:1d:68:
00:71:bf:12:72:31:d5:3a:40:fc:dd:84:ff:b5:46:33:fc:bf:
b2:99:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:18 2026 by rpki-client