This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: Sm22cHW+tqi7bTkmxOfuj7JoPjlCBvL/UCXBoRSdPQs=
Subject key identifier: 10:4B:AA:BF:2A:11:7D:72:6F:BC:4F:4E:29:51:AA:FE:1B:F1:DA:F7
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 019C42EB346F75107E60BF5E34DE75368E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 15:00:36 +0000
Manifest this update: Mon 09 Feb 2026 15:00:36 +0000
Manifest next update: Tue 10 Feb 2026 15:00:36 +0000
Files and hashes: 1: B6KgFpwvViQTEk9Dmhs8MfS-w7s.roa (hash: OhVWCZDoCQizES2xkeCkzPUeD4jK/eG28KZNwsfJC3Y=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: uzsJaUIcPk8mC/+BTS1gk2aXJ7Tr8+V40EwEIHTkgPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:34:6f:75:10:7e:60:bf:5e:34:de:75:36:8e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Feb 9 15:00:36 2026 GMT
Not After : Feb 10 15:00:36 2026 GMT
Subject: CN=104baabf2a117d726fbc4f4e2951aafe1bf1daf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:84:0f:1c:62:af:a9:7f:b1:03:1c:73:14:97:
97:eb:76:db:a3:03:6b:e4:28:c8:64:14:c6:71:b3:
94:64:81:41:71:0f:2b:17:3c:a9:93:dc:ea:13:6c:
74:46:2f:be:5a:fe:d0:3e:d4:72:d2:17:38:68:c6:
c5:f8:c9:f6:aa:da:e3:11:91:d9:70:91:0d:9d:85:
0d:4d:d5:c1:0e:73:6d:a7:ff:78:18:c8:c8:80:ef:
df:f4:e6:63:08:1e:68:b8:66:4f:c9:3b:d4:69:35:
f7:65:92:b2:33:5e:78:9d:eb:aa:b4:40:62:d5:43:
77:85:ce:7c:ea:3f:76:05:76:f7:5a:8e:0b:03:f3:
f9:b0:97:f5:4f:bd:a1:e4:e8:84:3b:87:72:97:43:
04:99:ec:56:59:32:3a:12:18:58:a8:c4:6a:af:9f:
0a:4e:75:67:c2:22:47:1d:2b:76:d3:b8:a1:92:e2:
f9:6a:94:c9:17:37:51:73:18:5a:14:41:ec:56:6f:
ee:b3:9f:26:9c:01:3b:aa:9f:e6:c6:a3:97:59:d8:
ce:eb:8d:65:b9:d2:a5:95:68:09:fc:9e:19:e8:2d:
c3:a9:e8:ad:aa:88:48:b4:f7:20:f8:71:59:42:13:
cf:f0:6e:71:39:53:78:66:4d:8f:7a:5b:a9:df:e7:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4B:AA:BF:2A:11:7D:72:6F:BC:4F:4E:29:51:AA:FE:1B:F1:DA:F7
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9f:5a:ef:d0:54:15:19:ce:fe:9d:4f:1d:61:28:3d:73:7f:
fe:96:ab:19:f9:11:88:ca:12:0b:12:9f:8d:87:6c:96:1d:a1:
d7:a9:9a:46:81:3d:f9:4f:fe:0e:17:3a:d4:d4:4a:2a:92:26:
c5:d0:51:12:f4:bf:e1:af:32:ed:91:ec:e2:c2:5e:9d:ff:a9:
75:01:0f:d8:52:62:40:de:af:50:ec:93:27:80:17:f2:45:ae:
7a:d1:28:23:d1:d2:d7:2c:6a:c5:87:5d:20:d0:38:1c:de:b4:
86:e2:45:5d:22:ce:96:82:13:c9:58:96:77:a0:cf:cc:42:4b:
32:32:74:24:d3:0a:07:1d:8e:0e:b5:4b:83:03:8f:26:d8:15:
61:4b:e1:18:d0:f6:48:0d:16:1d:15:be:c1:f2:fd:b8:27:57:
9a:9c:7a:a4:f3:f9:58:41:4b:7b:c3:62:1d:c2:99:57:90:1b:
ee:4e:73:59:c2:cd:bf:7a:18:83:7e:35:69:3d:ca:b6:2a:5c:
98:ed:c1:16:12:58:cb:ac:07:d5:c6:df:f2:16:ad:72:5c:b1:
eb:4e:f6:51:81:a3:b6:90:70:fe:56:bd:41:66:ef:93:2a:76:
90:ec:31:0c:fc:ff:12:d5:6c:f2:2e:a2:41:1f:3b:a8:82:32:
51:4b:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:52 2026 by rpki-client