This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
File: SW1fsJjEMw63plGNkDZC2jYZsEc.mft (raw, json)
Hash identifier: jaaWAZ52INuHoeiOQxpV7KMz+Sk1dfPp9OkMsDA9ZWw=
Subject key identifier: 4F:7C:E9:55:DE:FD:13:94:62:B9:2D:EC:3E:26:B4:97:76:B0:9A:5B
Authority key identifier: 49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
Certificate issuer: /CN=496d5fb098c4330eb7a6518d903642da3619b047
Certificate serial: 019C43220831ED8DAC8933D2E9F87CE2AE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
Manifest number: 0EF5
Signing time: Mon 09 Feb 2026 16:00:29 +0000
Manifest this update: Mon 09 Feb 2026 16:00:29 +0000
Manifest next update: Tue 10 Feb 2026 16:00:29 +0000
Files and hashes: 1: SW1fsJjEMw63plGNkDZC2jYZsEc.crl (hash: PC/ISW1zD6qOSyPgKlXNaflZ3f/fYRKVuYDo0hkJ7Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:08:31:ed:8d:ac:89:33:d2:e9:f8:7c:e2:ae:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496d5fb098c4330eb7a6518d903642da3619b047
Validity
Not Before: Feb 9 16:00:29 2026 GMT
Not After : Feb 10 16:00:29 2026 GMT
Subject: CN=4f7ce955defd139462b92dec3e26b49776b09a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:93:73:bd:ed:08:a2:ca:d6:36:b2:f1:2b:
55:0b:5a:6b:58:03:f4:eb:1d:ea:ba:38:91:58:ea:
44:00:8f:3a:4a:f3:09:a4:a0:f3:61:ec:d9:83:bd:
b6:7a:97:09:fe:8e:1c:9d:a6:5e:89:10:5d:47:1d:
04:9a:52:b7:e9:8d:11:06:49:33:0d:2e:26:de:f8:
18:78:b6:a5:44:61:2b:dc:13:0f:46:5d:36:0e:a4:
88:36:1a:be:d2:29:ec:eb:58:8f:2a:2a:8e:7e:f9:
e4:cf:fe:83:a3:bd:7e:00:f9:b7:af:a0:fc:d8:a8:
ec:0e:9d:b2:f5:3a:91:b1:26:3d:a4:a6:ee:d2:50:
a3:48:02:c9:64:8f:c5:06:9a:58:46:d7:4d:95:1e:
ac:90:02:eb:78:c9:de:4f:48:6e:db:69:ac:31:0b:
5b:1d:11:5b:92:72:69:0a:ad:9a:ea:e9:bc:10:48:
ce:63:dc:e1:ea:50:a7:ef:3f:91:84:e7:e4:5e:05:
4c:92:4e:20:48:4e:0e:d9:a5:67:86:85:ce:b4:18:
a1:69:ba:34:22:43:14:09:37:df:25:92:75:c2:3a:
bc:77:16:da:7c:bf:7a:1f:f8:e9:8a:c5:f6:7e:f3:
94:a6:57:13:cd:81:53:6d:ae:58:ac:b0:a2:89:79:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:E9:55:DE:FD:13:94:62:B9:2D:EC:3E:26:B4:97:76:B0:9A:5B
X509v3 Authority Key Identifier:
keyid:49:6D:5F:B0:98:C4:33:0E:B7:A6:51:8D:90:36:42:DA:36:19:B0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW1fsJjEMw63plGNkDZC2jYZsEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6a58dc-3c4b-4961-abc9-1bf0a80f09c4/1/SW1fsJjEMw63plGNkDZC2jYZsEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:79:72:2f:97:4e:e9:0c:be:71:06:c7:cb:7c:d0:8c:e6:33:
a3:e9:01:9a:3e:27:e1:00:41:e2:b5:d0:20:2c:71:ea:22:17:
82:51:a4:df:87:a7:3c:ba:8e:6a:05:66:30:5a:c2:79:01:aa:
07:f9:47:09:a2:8c:58:24:3a:8d:71:11:d6:08:87:72:63:b8:
7b:fd:de:ff:75:87:20:e4:b6:ea:41:1c:3d:2b:80:a2:15:36:
2f:64:51:57:46:30:e8:f7:0b:66:c3:a5:31:e9:c4:b6:37:44:
78:e9:56:d4:6e:8e:2c:6e:97:d7:9f:78:a8:7c:ae:59:1e:d6:
76:c0:00:ce:a6:63:9d:8a:d0:5e:58:88:37:b9:1f:27:1a:dc:
62:2f:0a:f2:2e:78:34:6f:69:4e:e9:28:a1:c5:44:ae:8d:41:
62:b1:fa:b8:12:4b:08:53:19:ad:54:ab:53:d5:90:28:20:1a:
7b:2b:f9:0f:e1:62:43:00:4a:51:3f:d2:95:49:b2:12:0f:b7:
de:a7:ee:e7:87:2d:1b:e8:49:68:09:1a:63:f1:ae:27:0f:5e:
c7:ff:17:5d:2b:af:e7:a7:ad:5c:ad:ce:7b:ee:86:57:a2:88:
c2:b4:9f:9a:21:5d:ca:f3:46:f3:e7:04:49:66:aa:d2:e7:89:
8f:a7:0f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:59 2026 by rpki-client