This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: 8EJIjTNuPtfuCC1KQo1euWHNN0t6ohS40rW7q7BlIPI=
Subject key identifier: 5C:18:13:A2:BE:97:A7:27:33:DF:41:F4:2D:D3:9D:38:33:E8:CA:B1
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 019C424672A29E078EF6DD7F1BEF4D457E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 1549
Signing time: Mon 09 Feb 2026 12:00:38 +0000
Manifest this update: Mon 09 Feb 2026 12:00:38 +0000
Manifest next update: Tue 10 Feb 2026 12:00:38 +0000
Files and hashes: 1: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: 6nKjXimyJNzq0P5Lut6xlgnjzO6u3tPMFKYMV7tUSNU=)
2: n7VFRuXxwgQnbFBuSUUBxwFhG6c.roa (hash: 6D6FdS3Q7oE33CoT/nZTuBGeDlU4d2ghqGCtrD1KUXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:72:a2:9e:07:8e:f6:dd:7f:1b:ef:4d:45:7e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Feb 9 12:00:38 2026 GMT
Not After : Feb 10 12:00:38 2026 GMT
Subject: CN=5c1813a2be97a72733df41f42dd39d3833e8cab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:e7:d2:f5:ea:70:61:63:1c:d7:2c:22:f1:
cd:82:83:66:b1:7a:b9:0e:b5:02:14:ec:2c:1d:df:
d2:ab:29:85:7a:83:3f:f5:00:1f:54:29:c2:94:08:
61:06:b4:7d:f4:cf:f6:46:0f:6b:22:5f:32:b0:23:
ed:25:d8:47:3c:bb:63:9b:8f:cc:d3:e7:ec:3f:20:
f8:6b:b6:fc:55:af:9c:79:63:95:50:a9:39:2f:7d:
07:df:d0:4e:23:ce:ab:59:5f:ec:54:8d:91:63:0d:
39:d2:6b:ee:ab:08:01:af:06:eb:95:3b:fc:5f:e3:
bb:63:9f:bc:cb:39:cd:ad:1f:a2:aa:92:a4:9b:32:
12:1c:ef:22:bc:64:b0:df:09:5c:2b:9d:43:ae:94:
05:81:32:49:7c:f7:75:48:1c:d9:3a:6a:ff:b7:37:
d2:c7:22:51:15:54:87:d8:16:be:3d:8d:77:b6:c8:
b0:af:28:b7:b0:d9:a3:ff:49:8d:87:8b:f2:d1:65:
07:f7:78:15:4a:71:c9:ac:74:41:d9:d5:f6:57:63:
17:ce:48:35:55:70:a0:0a:c8:2c:df:cb:06:3f:95:
77:8b:bb:f0:31:ae:f8:61:ce:1b:89:1b:9c:5f:b4:
db:50:e6:f9:39:44:62:31:32:59:9e:a3:32:70:20:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:18:13:A2:BE:97:A7:27:33:DF:41:F4:2D:D3:9D:38:33:E8:CA:B1
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4a:2c:f6:7d:a1:c9:67:14:00:c7:34:eb:57:af:86:82:a5:
29:82:16:3e:26:1a:c1:47:48:e3:08:b7:e9:e9:8a:a8:2d:6e:
02:6b:a8:b5:65:7d:ed:2e:54:cf:45:b9:59:25:73:f2:85:cb:
5b:1a:d3:3d:6d:d4:a7:b9:b7:43:be:bf:6a:dd:c3:a4:ce:54:
e6:42:f0:55:9f:03:37:44:30:d6:6a:f0:e5:9b:84:f7:0f:ac:
8d:b1:d3:9d:72:64:62:e0:21:24:04:9f:4b:e8:c3:ac:48:f9:
b4:03:09:7c:12:02:4d:1a:19:80:4e:fb:51:c9:68:62:a9:d3:
d6:ef:93:68:6b:a9:d7:8f:07:e2:34:2e:58:36:ea:be:2b:51:
16:72:b1:3b:f8:b0:30:cd:a1:03:15:0f:14:ef:53:af:7c:46:
c9:57:77:30:55:4d:81:39:37:3b:39:b6:92:f5:93:2f:1a:a7:
4d:f8:92:10:99:64:a3:fa:4b:d9:86:73:fc:bf:d0:a5:57:a5:
5c:ec:ec:be:ed:d8:41:03:4c:40:31:82:89:a3:6f:71:4b:e0:
c6:37:38:72:14:01:ad:e1:2b:1c:a5:80:56:4e:99:86:71:b9:
8d:e3:86:3b:70:be:f9:71:2d:2d:f2:21:ee:2a:e6:1c:79:1f:
82:95:35:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:27 2026 by rpki-client