This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
File: B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft (raw, json)
Hash identifier: /0l6ZUDVFNO+gnqJzcgzjdY33xcDBeY23ElsLahQN08=
Subject key identifier: 5C:BD:1A:35:88:14:D8:9E:1D:50:98:92:52:C0:0B:3D:D1:6C:A4:7A
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Certificate issuer: /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial: 019C41D877BF49C3B5B43071D66F55DD6352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
Manifest number: 0758
Signing time: Mon 09 Feb 2026 10:00:31 +0000
Manifest this update: Mon 09 Feb 2026 10:00:31 +0000
Manifest next update: Tue 10 Feb 2026 10:00:31 +0000
Files and hashes: 1: B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl (hash: GtIbpTS3+rQwAnIpXbQmvRtDn8anPAED75fdpkr1iPQ=)
2: zL1avC0lj7yCwQAa8kdB-j9BOqc.roa (hash: dt/cheCBQnjNlx2owBRsbLzi25MiYf0n9VeZMVmnugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:77:bf:49:c3:b5:b4:30:71:d6:6f:55:dd:63:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Validity
Not Before: Feb 9 10:00:31 2026 GMT
Not After : Feb 10 10:00:31 2026 GMT
Subject: CN=5cbd1a358814d89e1d50989252c00b3dd16ca47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:07:67:4e:68:ab:22:99:35:49:f0:67:4f:
1d:8c:82:ce:1f:7b:76:dc:21:a9:9e:ed:2a:66:a0:
a6:57:5a:28:41:eb:b1:0f:6e:4e:ee:01:f9:5d:ea:
a9:ff:e1:1b:74:72:dd:98:d5:22:90:50:8d:6a:50:
ba:c0:07:68:6a:a2:19:40:73:ab:75:22:ca:c6:15:
f6:da:3f:a6:15:46:2b:9e:bf:53:41:b0:2b:f5:f8:
ec:76:95:0f:ef:7e:e3:0f:81:b9:d0:99:f9:be:44:
ae:5d:18:f6:bc:57:26:5a:e8:15:36:1c:7a:e4:34:
1c:ed:ea:8a:de:4c:9e:fe:c3:9b:5b:5b:e8:f1:25:
b1:f5:a0:8a:72:7c:93:9b:3d:c4:69:60:4c:6f:57:
43:63:0c:b4:c5:00:8a:5c:74:57:28:fb:d3:e4:33:
37:f4:c5:8e:e7:56:95:99:7d:51:ef:30:9f:28:2b:
86:0e:47:b9:ff:2e:75:e6:9f:d6:60:8f:56:31:ea:
87:da:f0:d8:40:37:d5:80:e6:ef:1f:a1:03:d4:21:
ed:9a:d7:0c:72:33:d4:f9:fe:52:62:62:ae:3e:f0:
a6:c5:52:98:d5:a8:fb:31:95:37:32:a8:9c:c7:19:
8c:0e:eb:eb:67:85:6b:94:93:76:be:ee:cd:a8:c6:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BD:1A:35:88:14:D8:9E:1D:50:98:92:52:C0:0B:3D:D1:6C:A4:7A
X509v3 Authority Key Identifier:
keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:26:e9:a4:64:81:c6:61:b8:0a:46:37:3b:ef:fd:44:32:f6:
1d:05:05:9c:04:ee:c9:a5:52:5c:c5:ac:a6:bf:16:f5:ff:3a:
05:8d:7d:79:56:6f:c9:cb:3c:67:22:c1:9c:3b:0d:2b:da:bf:
88:0b:02:b7:e6:05:9e:bf:79:f0:02:71:01:0b:27:ae:c9:69:
98:41:68:fd:0d:bb:aa:7d:36:a5:5a:24:08:db:24:4c:fd:1f:
8a:dc:48:7f:29:b7:03:9d:1d:be:8e:65:c3:5b:bf:2c:6b:94:
80:3e:6c:a9:32:d9:cd:2f:7b:68:1f:92:9c:c5:7a:37:36:17:
1e:a6:ee:e3:f9:a8:2a:e6:9f:8a:4c:6d:29:63:94:5c:18:cc:
f4:33:86:a7:ef:6f:15:bc:cd:7e:7e:f0:96:60:90:c5:4d:25:
4c:51:74:a2:5c:91:fb:0d:0d:72:8a:ff:52:b3:11:69:6e:46:
a5:95:38:f2:e4:af:ba:16:54:8a:a6:c3:4b:92:31:40:43:4d:
9e:29:a3:7f:c5:dd:e3:9d:cc:a1:8b:ba:8b:da:66:25:6d:ac:
e8:45:3d:9f:71:12:67:0d:4f:3e:09:59:5d:31:b1:1a:2e:5f:
55:4e:28:ea:86:b4:04:0c:54:33:13:0a:8d:ad:9c:13:7a:58:
65:30:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:24 2026 by rpki-client