This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
File: C6XvqmwrvKGf6h_7abLZaQc7lc8.mft (raw, json)
Hash identifier: BsljWesPgZX9ra0f+xHfxQuZaps5I5MET/MrC7mZY/k=
Subject key identifier: C9:E6:F4:E9:61:EB:DD:97:F6:91:6D:B5:6F:9D:64:2F:6E:F1:8D:17
Authority key identifier: 0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF
Certificate issuer: /CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
Certificate serial: 019C435954A7DF1BEB2DDCC2797270D4B5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
Manifest number: 23
Signing time: Mon 09 Feb 2026 17:00:53 +0000
Manifest this update: Mon 09 Feb 2026 17:00:53 +0000
Manifest next update: Tue 10 Feb 2026 17:00:53 +0000
Files and hashes: 1: C6XvqmwrvKGf6h_7abLZaQc7lc8.crl (hash: ureHJHbDNnUQBwQaRz0nsJcuwG9VNLvT64qwlGWZe2Y=)
2: VCkp9PejXKJX1lKBEBDutAXVriI.roa (hash: nwUrPFtHki5WHffzDMjFGHv6nnBlacI/UKaxl8oTmGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:54:a7:df:1b:eb:2d:dc:c2:79:72:70:d4:b5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba5efaa6c2bbca19fea1ffb69b2d969073b95cf
Validity
Not Before: Feb 9 17:00:53 2026 GMT
Not After : Feb 10 17:00:53 2026 GMT
Subject: CN=c9e6f4e961ebdd97f6916db56f9d642f6ef18d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:dc:58:b9:36:c6:88:42:70:89:b5:58:f1:
29:d4:75:71:a5:5b:f2:a4:08:9c:0a:cd:d3:12:f3:
62:f9:19:00:cc:59:2d:e7:b8:43:7d:b3:57:05:7b:
1d:10:bb:b6:fb:3c:82:96:25:bd:87:f9:80:8e:a4:
5d:a9:1d:cc:8d:c0:a3:ed:30:73:ea:c7:b5:b6:44:
f1:56:5c:6b:df:24:dc:a3:8c:64:ba:7c:c1:78:90:
80:7e:ce:c6:fa:2f:6b:74:ef:8c:84:c4:88:51:ac:
88:0f:52:e8:0d:85:b1:d8:04:b8:95:51:d8:32:6f:
ad:66:9e:f7:4e:ea:e5:23:a4:81:33:89:25:b9:af:
13:37:9a:13:f4:d0:7a:1b:cd:98:f9:92:b2:33:9a:
8e:66:1b:78:a9:1a:f7:e4:d9:cc:e3:51:1e:e4:a9:
d3:ee:f3:7d:66:59:76:2e:d8:84:98:9f:8d:2e:eb:
95:c2:a5:ae:7b:99:43:59:22:97:ee:ea:32:26:d3:
0b:43:ee:14:a7:8a:2b:80:f9:3d:ea:1b:cd:8b:2a:
51:f9:75:35:f9:fe:bc:00:5a:8e:61:2a:90:7a:a6:
c5:cc:ec:a0:2f:08:5f:9d:91:af:62:07:93:dc:00:
8e:16:76:5c:89:3e:14:1e:bb:b5:ec:fa:a4:e8:c8:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:F4:E9:61:EB:DD:97:F6:91:6D:B5:6F:9D:64:2F:6E:F1:8D:17
X509v3 Authority Key Identifier:
keyid:0B:A5:EF:AA:6C:2B:BC:A1:9F:EA:1F:FB:69:B2:D9:69:07:3B:95:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6XvqmwrvKGf6h_7abLZaQc7lc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/46d718-2509-481a-9f2c-c3c8bbcb30e8/1/C6XvqmwrvKGf6h_7abLZaQc7lc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a7:38:8b:c3:a5:88:ea:39:7a:de:81:cf:e6:e2:77:a7:34:
37:18:6a:48:d1:2f:be:39:f3:47:77:d0:ea:04:75:29:37:cf:
f7:93:0a:62:b4:40:33:e5:79:8b:b6:4f:22:bb:aa:74:99:a1:
d4:5d:b2:8d:8c:7f:13:c9:b7:bc:71:21:11:6f:58:07:39:9f:
20:bd:42:c6:07:f5:d8:be:b9:a8:ca:ec:7e:0e:8a:aa:4a:14:
64:45:1d:f0:27:8b:21:e4:d8:20:61:30:6d:96:e2:88:6c:3e:
6a:9b:c3:e5:3f:bc:e6:26:49:92:3b:a7:b5:57:6c:86:dc:f7:
3d:9d:4f:00:81:c1:43:28:bd:38:be:77:76:1b:fe:65:ef:b4:
9c:51:6b:40:51:cd:d2:a8:82:43:8d:77:1e:fb:df:92:02:bf:
38:8f:f1:64:a5:dc:33:84:87:d6:2c:e1:b5:22:e5:49:72:4b:
d0:98:bb:0a:41:62:c3:a2:52:7c:3f:53:77:c9:a2:cc:5b:46:
bd:27:c7:1e:d6:1e:58:96:ab:81:21:db:36:8d:30:ae:e7:34:
c7:d9:60:8d:eb:4a:2f:31:12:5c:7c:fc:6a:3c:e6:e4:42:7e:
41:6a:16:a1:79:b7:ab:b8:b4:8e:ba:e4:99:69:64:ba:a0:e7:
a7:97:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:34 2026 by rpki-client