This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
File: sJLCwjUMWQpEg_1E8lCnf-6qspY.mft (raw, json)
Hash identifier: Eynfd3368BUHeEUmsmgN7FNNcAMFUHdu8nPuGclkAPI=
Subject key identifier: A3:A9:F5:C2:FC:56:19:BC:E9:4E:49:AB:8E:2E:25:F6:A8:B9:CF:A7
Authority key identifier: B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96
Certificate issuer: /CN=b092c2c2350c590a4483fd44f250a77feeaab296
Certificate serial: 019C416AC3A4659BEA7F711AB919AC6D823F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
Manifest number: 07B5
Signing time: Mon 09 Feb 2026 08:00:41 +0000
Manifest this update: Mon 09 Feb 2026 08:00:41 +0000
Manifest next update: Tue 10 Feb 2026 08:00:41 +0000
Files and hashes: 1: 3bXwyJRphHC821s-_1eJDdRcSaQ.roa (hash: 1C3Vwg+v+ejiWvSqFbwaT9wdnlbnP0w1UGBSQJTnl9w=)
2: sJLCwjUMWQpEg_1E8lCnf-6qspY.crl (hash: lYpXYV31IozJX17EUSvbu2LGqWuFm9knLGc6iyIB+jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:c3:a4:65:9b:ea:7f:71:1a:b9:19:ac:6d:82:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b092c2c2350c590a4483fd44f250a77feeaab296
Validity
Not Before: Feb 9 08:00:41 2026 GMT
Not After : Feb 10 08:00:41 2026 GMT
Subject: CN=a3a9f5c2fc5619bce94e49ab8e2e25f6a8b9cfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:97:06:c0:64:00:31:70:cc:4a:6d:82:cc:
68:de:99:82:5d:c7:1c:62:54:96:b4:3e:b3:1d:77:
ea:5e:8c:d7:f7:b6:4b:72:ea:a4:ce:f0:ca:00:52:
c6:66:ce:73:16:98:fb:ef:8d:20:b5:d4:d9:1b:d5:
5f:16:b2:33:9d:0a:ac:6c:f8:25:c0:95:0a:96:ca:
2f:ee:e8:1a:51:9f:de:92:3e:e3:c2:57:b4:4e:e0:
dd:d3:7c:8d:87:60:79:2c:b2:eb:56:8e:75:fc:e5:
f5:0e:89:02:a0:7e:b9:17:5a:e3:94:fe:f6:b1:3f:
c1:c3:d3:60:22:8e:ca:ba:ba:9f:e3:bc:80:bc:ac:
76:8a:1b:fe:ef:00:a4:01:73:67:69:0e:be:a7:58:
c0:56:3d:c5:01:3c:01:53:b9:f0:2b:45:ec:28:e4:
25:3c:0b:17:61:54:91:bf:cd:0f:aa:d3:ef:05:2d:
6f:1f:79:d0:2d:67:35:ab:47:9b:3d:34:1c:0c:02:
f7:3d:9d:59:f7:d0:ed:ab:aa:00:75:1f:0d:ab:03:
79:93:47:87:71:2c:7b:c8:8a:1f:74:03:2c:20:b0:
7a:79:d3:7b:77:83:ee:8e:94:d7:7d:fa:9a:51:b0:
07:71:10:3f:1f:d6:92:e9:3d:51:83:33:2e:6e:30:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A9:F5:C2:FC:56:19:BC:E9:4E:49:AB:8E:2E:25:F6:A8:B9:CF:A7
X509v3 Authority Key Identifier:
keyid:B0:92:C2:C2:35:0C:59:0A:44:83:FD:44:F2:50:A7:7F:EE:AA:B2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJLCwjUMWQpEg_1E8lCnf-6qspY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/52c6c8-716a-4969-9b3e-49ebeb3af0ea/1/sJLCwjUMWQpEg_1E8lCnf-6qspY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2e:47:e6:46:11:48:ae:4c:6b:bf:15:b1:3d:8e:db:9d:7a:
65:25:9f:52:0a:3d:02:4f:3d:1a:7e:1c:40:68:94:40:c0:8f:
c1:30:ba:a6:c0:46:2e:0d:93:43:1c:7a:87:fa:2e:d0:25:03:
9c:a8:43:6d:c7:fc:a9:8d:17:c4:66:68:39:26:fb:14:12:b2:
1b:3d:ee:55:67:01:30:15:ae:3c:5a:d2:28:80:f9:7e:09:68:
17:85:1a:1f:db:c0:0c:f3:57:14:e1:37:ca:7a:26:26:98:63:
5f:33:03:6c:b3:70:ee:3d:e9:d8:d0:f9:fc:d6:d7:6c:62:28:
79:68:53:81:46:66:5e:9f:ef:a8:53:b0:6a:cb:79:64:0c:52:
6e:8f:3a:cf:95:a5:76:39:d3:64:ed:6d:69:7a:01:0a:6c:88:
a0:08:98:35:99:3b:4b:a2:f1:c5:0c:86:ae:b2:92:a1:d7:38:
3f:6d:55:42:12:df:d2:97:59:b3:d8:0a:5c:d7:76:0a:56:25:
f9:fb:07:61:d0:e2:71:88:f0:3a:d5:c6:f7:15:09:a2:83:84:
05:30:69:2b:81:27:98:70:f2:d6:c8:8f:db:6c:38:3a:6f:80:
5b:2e:df:39:29:13:1e:23:44:d5:33:fc:b8:26:72:d6:88:49:
be:ba:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:25 2026 by rpki-client