This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
File: I0AYtVE7d50uHjrBqGpZO92XTKc.mft (raw, json)
Hash identifier: BiQW/ZTUy4EY4zDbIj4CmasIljIzhR/CrK7L2/D6AYw=
Subject key identifier: 56:B9:83:C1:D2:04:33:F9:AC:9E:8C:96:3E:18:F5:DC:AF:04:14:A7
Authority key identifier: 23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
Certificate issuer: /CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Certificate serial: 019C41A1A7DFA25ECD2E3A0FC2608256CF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
Manifest number: 03F0
Signing time: Mon 09 Feb 2026 09:00:39 +0000
Manifest this update: Mon 09 Feb 2026 09:00:39 +0000
Manifest next update: Tue 10 Feb 2026 09:00:39 +0000
Files and hashes: 1: I0AYtVE7d50uHjrBqGpZO92XTKc.crl (hash: zXsNlb3Fvm+hr3KrULYR1+3oZdKwKbQBfS8B4PmJ2Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:a7:df:a2:5e:cd:2e:3a:0f:c2:60:82:56:cf:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Validity
Not Before: Feb 9 09:00:39 2026 GMT
Not After : Feb 10 09:00:39 2026 GMT
Subject: CN=56b983c1d20433f9ac9e8c963e18f5dcaf0414a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:6e:b1:b0:6c:6b:8f:ec:f4:d4:e8:b9:d3:
9f:d2:14:78:65:78:b1:87:85:99:0b:81:4f:3c:9f:
39:8f:d4:52:40:40:b2:64:8d:0f:ec:35:e3:8c:36:
c5:cd:77:1a:93:91:1c:4a:19:6d:7f:42:27:cf:ba:
da:95:cc:78:ec:39:06:c1:28:fa:45:2d:48:86:fe:
75:e4:2b:50:80:a3:69:38:23:19:cb:60:30:35:a6:
5c:1e:80:67:9d:ed:e5:82:cc:f4:38:51:21:2f:34:
ab:13:2c:74:ff:a8:98:dc:1f:dd:78:46:f4:48:ff:
ff:0f:0d:3b:6a:34:99:20:b6:6a:ff:b4:10:49:b6:
48:cc:8e:89:6d:3c:61:40:03:e2:60:4b:de:a4:8b:
59:56:b2:d1:7c:f6:32:ee:e1:75:d7:e3:b6:3c:4c:
5c:e5:c1:30:09:8b:58:f0:0e:3b:08:89:98:e1:02:
71:98:b9:60:eb:01:e7:dd:b2:28:d6:b0:7b:9f:0a:
f0:5d:f2:33:d8:d3:8c:d1:c9:9d:44:94:b3:57:43:
be:83:d5:29:f3:3b:1a:68:96:64:c4:f0:16:41:35:
b6:74:51:0e:b0:5c:d2:77:4c:5d:9e:7e:a6:71:e9:
81:77:39:ac:f3:c0:f5:3d:da:af:84:3a:0f:34:90:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:83:C1:D2:04:33:F9:AC:9E:8C:96:3E:18:F5:DC:AF:04:14:A7
X509v3 Authority Key Identifier:
keyid:23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:14:01:a4:4b:5e:1e:77:e5:ca:79:81:67:8e:cf:f2:67:f4:
7d:f7:8d:48:ba:46:79:23:6b:01:81:93:bc:6b:d4:4d:7f:b6:
6b:3f:bb:08:c1:08:76:3c:4b:1c:03:9a:79:e6:6d:51:3a:23:
6d:1b:85:fb:42:13:24:0e:02:89:99:a6:5e:6a:c4:2e:f2:7e:
d9:d3:94:2b:08:28:33:9e:9c:fc:e3:c9:48:7c:b6:2a:7c:bd:
74:90:fe:50:eb:db:88:75:cf:bc:b2:9c:9d:c9:ef:84:6f:f1:
b9:51:44:71:07:5f:37:34:2b:df:bc:1c:fb:18:10:ec:34:7c:
b1:47:31:7e:e1:21:73:09:a5:e7:ad:de:53:32:f3:4a:da:ac:
24:9c:e8:2f:d4:0d:cb:f4:5b:3e:7d:79:74:b1:e3:8a:06:ef:
b8:c3:5c:dd:5d:5d:cf:af:ef:de:8a:8b:a8:4b:a5:f5:50:01:
c3:b6:2c:2d:83:c2:01:ad:12:8a:67:fe:c2:15:fc:07:56:3a:
3b:49:fc:67:1d:fb:a5:fb:ea:6c:0c:e4:ba:4e:db:99:86:92:
0e:7f:b1:b7:46:4a:76:34:18:2f:d6:11:50:e4:b2:fd:98:44:
3e:61:28:b8:dd:64:1b:e8:1f:fa:f4:d8:51:cb:dd:d8:ca:e1:
bd:43:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:38 2026 by rpki-client