This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
File: A83mT0Foo_OZt3SU2Urqdyksm88.mft (raw, json)
Hash identifier: +8Dm8VTjf7WSz//1x6a6xCcS40ln02uUTfECBclLatM=
Subject key identifier: FF:0A:6D:1D:37:98:05:F6:07:0F:7C:10:85:FD:3C:71:C1:38:69:5F
Authority key identifier: 03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
Certificate issuer: /CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Certificate serial: 019C4246821D81D873E8F612753C1E05243E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
Manifest number: 1376
Signing time: Mon 09 Feb 2026 12:00:42 +0000
Manifest this update: Mon 09 Feb 2026 12:00:42 +0000
Manifest next update: Tue 10 Feb 2026 12:00:42 +0000
Files and hashes: 1: A83mT0Foo_OZt3SU2Urqdyksm88.crl (hash: iHTZS0CJrOjVGil28oD4zofUFsy1+VTCV8lQ3YtEj3k=)
2: VqbW8hWa6U_90YgDAsOUDVLHuCw.roa (hash: quQX28Hjb85Vem897JezSZ+lGMfYDszka76M0Xq2SLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:82:1d:81:d8:73:e8:f6:12:75:3c:1e:05:24:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cde64f4168a3f399b77494d94aea77292c9bcf
Validity
Not Before: Feb 9 12:00:42 2026 GMT
Not After : Feb 10 12:00:42 2026 GMT
Subject: CN=ff0a6d1d379805f6070f7c1085fd3c71c138695f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:95:dd:4d:d3:66:f8:2f:e8:c0:11:c0:4b:
ed:f9:b8:e6:dd:f6:f8:8e:a5:89:99:45:ac:0f:94:
93:11:98:54:0d:8a:44:5d:23:37:b6:7a:1f:e2:5e:
ef:81:53:bd:7f:d2:ab:3e:42:2f:20:c6:5c:f4:9f:
6b:38:4a:a8:17:e3:99:8d:55:d3:16:0e:db:a8:40:
95:45:97:44:fd:b2:3b:bc:ba:6e:43:77:fb:2b:5d:
a0:d2:10:72:79:5c:fe:89:72:6c:7f:24:8e:a2:8b:
71:5e:d9:42:a0:21:a0:0c:69:7f:40:83:4a:6e:8d:
69:17:2f:72:dd:b7:ea:be:ed:39:96:90:f4:3b:4f:
7e:ca:0d:96:7e:4c:8b:3d:28:bb:1f:8b:f6:86:71:
a9:d8:58:fa:45:88:45:57:21:04:1e:2e:51:dd:41:
78:ce:2e:3c:3d:95:23:18:58:46:e9:14:ba:cd:e5:
8c:0d:42:27:64:65:de:da:b9:a3:1a:c8:ce:e6:ae:
8e:a7:3a:cd:28:eb:42:e2:a7:7e:ba:8e:17:ef:4c:
0d:b1:e9:72:88:ba:25:ad:ad:48:7d:e5:60:03:01:
dd:7b:7f:c2:30:aa:8e:7a:23:01:fb:11:f1:91:f7:
b8:85:c7:bf:c6:28:6c:dc:a9:b5:c7:61:0c:89:81:
68:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0A:6D:1D:37:98:05:F6:07:0F:7C:10:85:FD:3C:71:C1:38:69:5F
X509v3 Authority Key Identifier:
keyid:03:CD:E6:4F:41:68:A3:F3:99:B7:74:94:D9:4A:EA:77:29:2C:9B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A83mT0Foo_OZt3SU2Urqdyksm88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/dc1318-c330-4b4d-94ae-f1b00c8428ed/1/A83mT0Foo_OZt3SU2Urqdyksm88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:57:7c:aa:bf:6d:d1:15:65:a7:04:6a:e7:6a:7d:96:a3:1b:
6b:74:30:df:f2:ca:d4:1d:c3:9e:00:91:5d:1a:4a:00:f4:e0:
cc:00:dd:07:6a:23:f6:fb:32:61:7d:0d:a8:1a:ea:83:56:8d:
e4:b7:99:6a:37:d1:44:2d:6c:60:31:8b:c3:84:19:88:77:6d:
f2:db:81:5e:51:86:6e:f6:f2:db:34:e1:3f:c9:54:49:0e:45:
ee:9e:ea:1e:3f:b4:ef:06:01:2b:7c:39:79:f1:2c:e5:1d:0a:
6b:68:0b:15:11:ea:14:4b:2f:b8:52:f7:41:bc:13:37:79:09:
f5:13:3a:17:bb:7b:a9:a7:c7:cf:a6:da:c0:d1:b7:33:78:c6:
c0:cc:f2:1f:48:53:62:81:22:6f:f6:a7:d7:ad:df:ed:85:8e:
03:a8:00:01:c7:02:04:a1:40:15:72:d4:39:03:b8:52:6d:8c:
80:ce:72:11:dc:21:ea:84:6e:1f:80:2c:f1:78:76:21:4e:e4:
bb:ca:f7:4a:67:93:28:b3:8a:39:bf:d4:67:a3:5b:dd:39:13:
c8:65:7e:c6:0d:03:b9:77:d9:65:50:26:3b:7f:4d:3c:f5:9e:
df:9d:9b:cc:f5:19:4b:fb:8b:8a:33:cb:ec:9e:23:f5:63:8f:
47:05:40:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:51 2026 by rpki-client