This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: LyJBh8FAj7+NfiC+KCxz8SQEadfbNqmoKDkKdbB5+vs=
Subject key identifier: C0:6F:0E:96:EA:30:19:6E:E5:4D:82:67:A3:57:B5:D1:F4:FF:3D:46
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 019C43C73FEC7895C7B94B3A4462923E5239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 148B
Signing time: Mon 09 Feb 2026 19:00:57 +0000
Manifest this update: Mon 09 Feb 2026 19:00:57 +0000
Manifest next update: Tue 10 Feb 2026 19:00:57 +0000
Files and hashes: 1: 6gA1OlRN1ocGTkJB84vRgcbm7yE.roa (hash: m0QRct0nDamOcIZ5SWxkfJtavcfbw7Z34cfgKRNCHWc=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: rjeVfg4cf3uypyDxQc+PiozzXqUMUCXSTgcZ/1ql+q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:3f:ec:78:95:c7:b9:4b:3a:44:62:92:3e:52:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Feb 9 19:00:57 2026 GMT
Not After : Feb 10 19:00:57 2026 GMT
Subject: CN=c06f0e96ea30196ee54d8267a357b5d1f4ff3d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:09:cf:8c:d0:ea:22:9b:fb:bf:d7:0e:20:
ac:49:6c:d8:09:ed:ab:dd:b4:3c:ba:01:80:f4:84:
a3:7f:97:e0:9c:e1:b5:c3:f3:c9:81:db:d6:53:e3:
19:94:02:4e:81:e6:74:f9:c4:33:08:a9:ce:10:76:
43:ed:95:c4:3b:9b:95:ed:14:03:34:13:70:c2:1f:
67:85:2f:f9:22:35:c6:80:a1:18:61:2c:0c:d3:d0:
60:8e:17:ee:32:de:27:02:7d:d6:f9:55:f6:b1:60:
52:17:80:3d:82:7c:ea:05:1c:b4:d8:9a:78:c0:fb:
15:70:e3:90:53:e0:2d:9d:9b:76:29:d8:4d:40:24:
5f:cb:e6:a0:88:6b:02:6b:a9:e0:2f:91:4f:83:a7:
7e:c5:46:14:ab:28:ee:ac:03:fb:6b:a4:df:68:ea:
b4:eb:bc:0a:f9:b3:21:4b:3b:da:05:25:e7:51:48:
88:5f:06:f2:bf:41:29:55:87:10:da:a7:03:d2:0e:
43:5b:90:7e:75:35:a0:a8:ae:cb:75:70:5c:32:52:
f4:13:32:b3:5a:5a:6f:25:10:0d:38:db:71:87:8b:
65:37:66:32:9f:e5:8e:a2:30:65:a4:3a:fa:f9:7a:
33:d1:ab:91:e9:d8:5d:8a:e4:55:22:4e:48:0b:2e:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6F:0E:96:EA:30:19:6E:E5:4D:82:67:A3:57:B5:D1:F4:FF:3D:46
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b3:fc:bc:03:50:fe:df:a7:23:ac:2f:9b:ee:a2:65:58:11:
d9:71:92:82:24:b9:54:c8:96:5e:bf:5e:db:b9:b8:2e:32:a9:
ea:d7:89:41:ce:d1:33:36:b2:d6:f8:0b:72:07:d8:ca:3e:54:
92:71:1b:fb:d4:f8:4c:51:2f:8f:b5:65:23:68:77:88:8e:21:
0a:81:0d:72:4c:54:76:e6:9b:04:e8:68:da:57:f4:a6:5c:c7:
8d:39:63:ea:cf:a2:c7:85:6a:90:c1:de:d0:b0:27:96:5a:1a:
81:0c:1c:3b:e8:4e:02:15:1f:2c:e7:e9:35:b4:ca:25:5c:b9:
2d:1a:4c:01:35:7e:8a:53:c0:08:3e:e2:89:e2:0b:60:6c:f6:
59:00:c5:82:39:cf:2e:37:22:e2:da:c4:77:ac:64:fe:0d:87:
3c:7e:c0:a9:0b:dc:d5:85:e6:a1:30:63:47:c3:2f:26:d8:e1:
44:65:38:8e:25:17:62:77:3a:1d:de:7c:01:77:c9:9e:ff:bf:
f3:64:ec:ae:26:09:6a:38:7c:ae:b3:3f:35:f1:6f:dd:38:79:
3f:f3:b5:47:b2:a1:a3:aa:d1:c6:e5:c8:a1:e6:c1:40:69:19:
b5:98:26:50:d4:b2:83:0d:43:fd:80:19:cf:b4:f8:c4:67:58:
8d:ad:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:36 2026 by rpki-client