This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File: 54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier: o3889B26qpV6RiGgn6b630yUkn6h3xH+qRBiK6fq2YI=
Subject key identifier: CB:F6:AD:8D:78:BD:EC:B1:6C:CB:DC:08:E0:2D:40:AB:0F:2B:90:48
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer: /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial: 019C4246DC04716C9E6D0D8FEB571F080A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number: 05E4
Signing time: Mon 09 Feb 2026 12:01:05 +0000
Manifest this update: Mon 09 Feb 2026 12:01:05 +0000
Manifest next update: Tue 10 Feb 2026 12:01:05 +0000
Files and hashes: 1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: aVrKUjzbii5qwxSarvJKHZqv3WCsvwD7m20MPj7ys8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:dc:04:71:6c:9e:6d:0d:8f:eb:57:1f:08:0a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Validity
Not Before: Feb 9 12:01:05 2026 GMT
Not After : Feb 10 12:01:05 2026 GMT
Subject: CN=cbf6ad8d78bdecb16ccbdc08e02d40ab0f2b9048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:f6:2b:83:94:bf:c0:40:22:26:65:a0:fa:
ff:6f:ef:12:06:8d:52:b7:ef:79:72:5b:4d:6e:28:
f4:88:96:c4:c3:79:03:6c:0f:4d:53:df:41:a9:29:
51:e4:f2:72:f1:93:b4:62:63:47:39:3e:a4:39:89:
fa:27:3c:c2:79:d1:85:e5:66:7d:81:57:7b:6e:57:
92:02:5b:da:47:74:3a:f1:db:8d:fb:f1:e3:65:10:
0d:ce:c3:04:f2:2b:08:1e:72:51:b5:cf:9f:1e:bb:
e5:a9:ad:f2:d3:70:63:15:41:0b:25:1c:43:f2:49:
2a:db:16:25:38:ea:68:17:2a:45:a4:6c:06:fd:5d:
fa:0d:b8:84:96:22:2f:78:52:b8:02:39:0c:d7:83:
2c:61:ad:fa:7a:e5:d8:54:b7:ce:58:27:39:6c:93:
a9:ef:f9:02:a1:37:95:6f:17:d9:95:a7:33:b4:5f:
ff:c2:cb:73:b9:85:e5:a0:7b:8b:16:19:2a:9b:b0:
11:84:84:28:9c:23:00:97:f4:bb:77:20:cd:2b:7d:
e9:50:ad:32:ca:ca:44:72:57:e9:a3:ca:4c:bd:61:
42:bf:ef:3d:8a:f8:32:40:8e:3a:6a:a1:30:50:d9:
65:19:5e:62:08:4e:68:c3:75:d8:56:35:ac:ca:28:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:AD:8D:78:BD:EC:B1:6C:CB:DC:08:E0:2D:40:AB:0F:2B:90:48
X509v3 Authority Key Identifier:
keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:30:d7:b5:c5:9d:e5:af:ab:fe:62:db:99:b2:60:8e:3a:da:
f9:85:13:f6:91:e1:13:8d:da:40:4d:f8:ca:3d:d6:cb:0e:75:
81:e5:47:c3:c9:e4:da:00:f2:4b:86:02:79:b3:e9:83:36:9d:
41:35:d0:40:89:8d:6c:6b:48:01:f0:2c:23:00:46:a0:8a:ff:
a9:f0:bc:16:16:0a:54:d9:7f:fd:92:a2:52:95:56:74:13:e1:
f2:c0:89:bf:58:80:4e:b4:e4:0a:35:16:f1:1e:ee:31:f1:3e:
2f:da:a9:89:20:23:42:ce:59:b5:16:61:8a:b8:ee:08:ef:d7:
03:ae:0c:fa:ba:6f:3d:f8:b4:3e:01:1d:df:3e:d9:63:72:2d:
26:20:02:f2:c8:04:3c:ef:a0:74:3e:70:84:bf:96:ef:55:f6:
7c:b7:dc:28:10:4e:69:c3:c7:1f:d6:7d:01:8d:c9:85:c7:7e:
9e:12:7b:13:45:26:f1:8f:38:2e:c7:11:72:2b:a6:ba:cc:71:
f5:24:16:be:dd:ca:80:c3:04:34:ba:fe:3e:d0:aa:24:47:4d:
35:ce:ed:2d:fb:14:77:de:62:1c:e8:16:d3:fe:8a:48:cc:fb:
8e:e0:89:47:35:32:5f:d2:01:cc:32:56:25:78:a3:72:67:61:
ba:e9:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:50 2026 by rpki-client