This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: cALITRwHsk0WRoEZLKyv/P8lYDqtVQ6c4WqK+npagsw=
Subject key identifier: 5F:44:CA:CD:4E:00:B0:4F:60:5E:EA:7B:B0:C5:F6:A6:4F:80:62:0B
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 019C42B48D0B7CBA9A07335FF47DD25EE3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 1246
Signing time: Mon 09 Feb 2026 14:00:54 +0000
Manifest this update: Mon 09 Feb 2026 14:00:54 +0000
Manifest next update: Tue 10 Feb 2026 14:00:54 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: JhHVTeIY16XtcnsPLKOVod7iqKI0ConsE1ZCgPPwx+c=)
2: sbGKIiYaL1Ayi3a_qqo0X9KBHn4.roa (hash: Z9uXxxsZvFu7pBxXBLrY1eCir1sHPNXI5kimRZXqQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:8d:0b:7c:ba:9a:07:33:5f:f4:7d:d2:5e:e3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Feb 9 14:00:54 2026 GMT
Not After : Feb 10 14:00:54 2026 GMT
Subject: CN=5f44cacd4e00b04f605eea7bb0c5f6a64f80620b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:a1:67:d2:28:75:b7:2f:d5:96:15:77:61:
58:cf:27:61:9e:90:00:84:f3:bb:ec:c0:41:32:a2:
bc:d5:23:9b:50:4f:92:9e:60:52:c0:24:6e:a4:07:
08:f6:22:f5:2a:58:c7:94:fa:1e:35:ed:72:2d:43:
b1:8c:97:ea:b2:c9:95:59:f2:db:0f:7b:2c:aa:45:
e8:23:93:ca:80:66:36:47:ab:98:83:95:e9:4e:f1:
ab:e0:fc:c5:0b:dc:d8:2d:4c:32:e8:bd:d9:8e:30:
62:83:0e:04:0c:4c:d9:35:b1:ab:f9:d4:ad:d4:61:
e0:8f:47:47:d4:52:09:8b:fb:80:3d:0e:99:02:ac:
d7:46:dd:a9:1d:b7:8b:11:9e:19:40:fe:18:ba:57:
65:91:ec:5c:0a:ad:dc:b5:03:bf:64:36:0e:86:3e:
1a:fd:4e:18:28:6c:66:74:0f:40:2f:92:16:5f:8e:
4a:95:2c:10:35:70:dc:1f:ab:51:74:dd:da:3b:e1:
d6:c4:d8:f1:c4:92:f1:db:ef:75:d5:34:b8:cf:55:
26:64:1f:6c:e4:60:4c:f8:7a:13:30:2d:ae:a0:41:
80:3d:e5:8f:87:b5:13:36:28:e3:76:22:2c:e3:bd:
cf:0a:37:ba:a4:4a:05:a1:c8:a4:bb:c7:b6:c9:6c:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:44:CA:CD:4E:00:B0:4F:60:5E:EA:7B:B0:C5:F6:A6:4F:80:62:0B
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4e:81:fe:ca:35:e2:e7:87:81:1b:c7:e6:82:50:f1:b8:37:
d4:9e:fb:ce:4e:58:fe:b9:a1:48:e0:15:bc:11:31:f8:63:20:
09:ba:d8:77:24:cf:7c:b7:d5:95:e0:b1:dd:9b:b8:c3:94:76:
19:57:82:cd:cb:16:49:86:bc:b8:e0:5f:14:c9:e3:4b:37:a4:
9b:19:56:38:d9:bc:7b:14:10:95:8f:5b:41:d5:f1:c2:1c:5a:
55:d8:e9:b7:38:16:7a:03:7e:19:8a:18:ae:2a:98:02:59:4e:
62:77:e1:83:35:4b:a9:70:c7:3d:ff:e1:77:b8:fe:bf:bf:43:
eb:40:28:21:55:3d:80:15:dc:c4:37:9d:34:54:fc:19:e0:d7:
26:56:c3:82:9f:75:8c:0b:71:f8:26:12:3c:e1:63:d1:6d:aa:
cd:fd:75:19:98:24:f6:21:ad:e7:d9:4b:fb:a9:22:b9:62:3e:
03:84:03:7c:43:fd:e4:bf:16:69:ca:9c:d5:f9:51:b1:51:58:
52:60:55:e4:86:87:19:61:2c:58:99:70:1f:00:97:41:47:e3:
82:c3:bf:64:41:ad:75:ee:03:d6:11:f2:3d:db:d4:e1:95:81:
51:8f:e2:60:6b:88:7d:40:a9:e8:70:22:3b:7a:72:84:8c:f9:
14:70:95:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:13 2026 by rpki-client