This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
File: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft (raw, json)
Hash identifier: 04WnZsyDxOJPDvR8bcaXMvrrbGZ5QE3Rikcs1BdM5BA=
Subject key identifier: CF:89:70:CB:0B:5F:52:AE:DA:B4:FE:EF:C8:FC:6B:3E:2F:7B:3A:67
Authority key identifier: 77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
Certificate issuer: /CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Certificate serial: 019C42B43464047B73579293B553BB7C60BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 14:00:32 +0000
Manifest this update: Mon 09 Feb 2026 14:00:32 +0000
Manifest next update: Tue 10 Feb 2026 14:00:32 +0000
Files and hashes: 1: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl (hash: XJ5Jq3PKWr9I17Rpobln6oyH0tcMBeoUwsplAloPIU0=)
2: tPa9pSwrFvB1K6LXnFP7QgOZmQg.roa (hash: EuLOm9LNu+vdtWKW8xKy1jbrcq+2BOsoUg00XaJJYUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:34:64:04:7b:73:57:92:93:b5:53:bb:7c:60:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Validity
Not Before: Feb 9 14:00:32 2026 GMT
Not After : Feb 10 14:00:32 2026 GMT
Subject: CN=cf8970cb0b5f52aedab4feefc8fc6b3e2f7b3a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:81:35:b9:81:87:83:3b:88:9c:92:e7:83:
98:86:c6:65:84:95:b1:39:83:a5:29:6f:a6:d4:84:
4a:c4:f9:54:99:de:bc:b1:40:f0:2e:7e:ec:f2:d5:
19:90:0e:62:47:56:92:9b:a7:8a:11:8c:17:02:5d:
8f:5f:b3:12:04:94:3c:2e:27:71:26:79:ac:46:46:
e2:b0:9f:e0:7d:56:4b:93:39:25:39:c3:8e:ab:39:
a1:37:3f:f9:65:c4:8a:57:62:44:49:d7:bb:49:76:
be:f9:20:32:e2:c4:86:10:ab:06:2a:e3:d5:ef:b5:
0b:2f:55:3f:f1:fe:c4:2b:02:3c:e9:bc:13:f0:03:
a2:94:c1:3c:5f:21:e3:66:53:bf:6f:40:8c:ca:af:
48:3a:12:ce:f5:22:57:e0:56:63:f0:00:9e:db:25:
a2:5b:b7:a3:27:8f:66:e7:a3:14:41:5b:44:14:2f:
e8:6d:ca:87:2d:eb:ee:4d:fe:ef:ad:95:f5:db:74:
3b:18:26:ac:6b:0f:4e:68:60:d9:72:5d:03:e0:b3:
d4:1f:a6:d5:c9:15:55:56:d4:bc:71:30:37:9f:56:
14:af:0e:b2:67:09:1a:d4:d4:23:3f:71:2e:51:76:
29:02:c2:0b:2c:9d:f2:ee:61:6f:99:88:ac:c6:54:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:89:70:CB:0B:5F:52:AE:DA:B4:FE:EF:C8:FC:6B:3E:2F:7B:3A:67
X509v3 Authority Key Identifier:
keyid:77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:46:fb:01:c2:79:2d:b3:bf:42:6f:97:45:1c:1e:bb:23:28:
ee:e9:ed:14:a5:40:fb:da:34:fd:bb:d6:c9:73:82:46:2e:81:
e4:b1:4f:70:62:f9:00:76:53:82:e5:10:2a:8f:08:71:38:fa:
b2:5b:d2:57:be:b4:22:81:4d:43:73:ba:c4:de:8e:68:fc:6a:
17:37:92:4d:15:1b:e0:25:83:5b:bd:ff:f8:77:11:2b:20:65:
b0:62:05:e5:e6:ac:3a:11:44:09:39:b6:13:84:c9:e4:e5:5d:
1b:d8:ae:17:62:4e:8a:81:34:c4:4a:59:73:02:c3:62:f6:5b:
ba:dc:e9:7c:8c:d3:e4:89:e2:a3:a5:2a:10:cc:4a:c3:9e:1c:
3d:43:37:e1:42:09:bf:18:1b:b8:8e:ad:b8:18:08:de:4a:e9:
b8:93:8e:98:c2:98:4d:87:2e:b5:ec:86:58:85:f6:ef:a9:b2:
ad:6a:86:44:cf:d8:50:2c:71:4c:54:94:19:56:98:f3:30:ff:
f2:a5:b0:0b:78:cf:6a:18:e7:a7:40:bf:80:cd:ed:56:59:28:
b4:40:29:cc:ff:45:b6:db:8b:d6:7f:73:a2:d9:fc:be:a1:26:
92:ba:fa:c2:2d:91:9d:6a:b1:cc:37:13:48:95:dd:b8:d9:f8:
d3:5a:30:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:08 2026 by rpki-client