This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: hYis6mF/JEjVP2C1hVbojX5demm5urlPtjNr+rtmrFw=
Subject key identifier: EE:A8:67:72:2A:A6:2A:B6:02:71:1B:BF:8C:00:F5:E3:D3:B8:34:B7
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 019C427E28262283CDED046B86CEC037340E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0C1F
Signing time: Mon 09 Feb 2026 13:01:29 +0000
Manifest this update: Mon 09 Feb 2026 13:01:29 +0000
Manifest next update: Tue 10 Feb 2026 13:01:29 +0000
Files and hashes: 1: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: Y7NMaxbZnuYLBMNWX3p8B5NJhAOPO2IvhY9sU47ck6c=)
2: VrD_z9WUzqoxuEFUeLh8zCfscNM.roa (hash: RBMbhE4e93nDrWwDckaO3Ac6YKsGDngzavc4attXd7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:28:26:22:83:cd:ed:04:6b:86:ce:c0:37:34:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Feb 9 13:01:29 2026 GMT
Not After : Feb 10 13:01:29 2026 GMT
Subject: CN=eea867722aa62ab602711bbf8c00f5e3d3b834b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:01:63:67:3e:b2:31:64:37:95:ea:c6:c7:
cd:f5:49:1e:7f:d7:bc:b5:cf:3c:7b:60:be:f0:65:
e6:f8:69:2e:4f:64:98:52:84:47:e1:a2:46:29:c1:
f5:08:7f:ee:0e:49:da:82:06:a1:d6:64:26:ad:ac:
b7:24:62:a0:bb:d8:ad:33:5f:40:1c:cc:34:c3:28:
7a:6f:0e:ea:d0:d9:48:d9:b5:16:2f:94:d9:d9:a7:
af:7e:01:39:78:d5:45:3b:d7:7a:a9:15:22:d9:46:
04:5e:65:38:50:b1:4a:10:b9:36:40:da:05:29:7b:
3d:cf:27:f9:e6:b3:15:00:d2:97:3c:93:75:6c:aa:
98:00:56:cf:bd:91:57:6a:0b:e4:b3:66:ae:7d:78:
ce:83:cf:1c:2a:ef:10:98:e8:4d:d9:93:66:5b:70:
40:3a:3d:35:a6:86:f6:ba:b0:74:ba:ef:e9:b8:d3:
b8:62:5f:3d:8e:12:ad:88:81:f6:a4:6d:fe:99:8b:
2d:ac:4a:d4:18:2a:38:b4:93:d1:8b:38:c7:8c:86:
39:aa:c3:c4:fb:ee:87:82:7a:23:1a:83:50:07:2e:
69:77:99:fc:04:94:02:ad:b0:2c:27:ea:c2:ca:18:
00:e6:f6:24:0c:f8:5d:43:34:77:9b:2d:fa:4f:c9:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A8:67:72:2A:A6:2A:B6:02:71:1B:BF:8C:00:F5:E3:D3:B8:34:B7
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:74:21:ac:40:d6:df:fa:05:a4:7f:c9:1e:a5:7a:5e:15:4b:
c7:29:93:d3:49:79:45:59:21:ba:1d:37:c5:10:90:f5:06:8d:
c3:72:96:d1:23:89:05:56:cc:a9:d4:ce:8f:c8:79:9a:0a:61:
68:e5:c0:e5:01:c2:84:5b:f7:08:72:c0:b3:89:49:ec:91:b1:
d6:99:63:7b:22:e9:22:a7:0d:41:a5:ec:21:92:7c:5c:0a:c3:
61:98:c1:57:3f:c9:59:e1:2d:eb:6b:d9:d9:d4:01:d7:41:0c:
10:d3:f9:3d:5a:f8:5f:77:f1:ef:57:e9:74:17:88:9c:d3:73:
2c:86:7b:ff:33:f3:af:e1:03:5c:7a:6a:0a:c6:dc:dd:2d:ad:
67:82:f7:4d:c8:5b:6d:ec:00:27:aa:0d:c0:1e:e0:c8:34:74:
7a:9e:59:cd:ad:11:39:a5:3e:d6:20:a4:1a:c3:e3:e2:75:78:
9e:a1:18:29:a6:30:a0:93:70:1d:de:f8:dc:e6:4f:28:fa:51:
52:8e:7d:56:e9:7d:30:55:40:13:7b:68:4f:31:b3:34:5b:23:
b1:cc:83:31:f2:80:d6:b1:ab:22:01:87:ee:de:5e:59:7a:78:
f2:a6:f0:33:f7:ac:62:67:f0:a0:d3:8e:63:7a:32:30:00:15:
af:92:a5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:01 2026 by rpki-client