This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier: 7yO6SgtB4hP8NWWlm8ino0axHMc1a1OrWMtEvauP/v0=
Subject key identifier: E1:35:EE:6C:30:0F:CF:8A:E7:DE:08:F8:E2:1E:09:1B:F2:57:37:0C
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer: /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial: 019C4321FBB91E06FA4061ECD684CCCF7D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number: 084E
Signing time: Mon 09 Feb 2026 16:00:26 +0000
Manifest this update: Mon 09 Feb 2026 16:00:26 +0000
Manifest next update: Tue 10 Feb 2026 16:00:26 +0000
Files and hashes: 1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: kygQ39/FTsfVTaXgDtiWNtMq1MFvka9lYcJhmSAmqLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:fb:b9:1e:06:fa:40:61:ec:d6:84:cc:cf:7d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
Validity
Not Before: Feb 9 16:00:26 2026 GMT
Not After : Feb 10 16:00:26 2026 GMT
Subject: CN=e135ee6c300fcf8ae7de08f8e21e091bf257370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:8b:5f:c7:dc:07:d1:18:1d:bf:bb:b4:b8:
bc:bf:ea:e3:f4:26:3d:e5:6b:ad:58:4a:ac:6e:7e:
ff:46:c7:3c:85:02:ae:69:65:15:b8:57:54:e5:8c:
29:d1:36:f0:4d:ec:10:bd:72:33:da:58:92:7b:48:
63:57:92:4d:10:ba:25:e2:64:bc:1e:b5:df:f2:e6:
64:1f:d5:a9:ad:a5:dd:c7:3c:9e:39:32:13:72:6d:
02:73:82:48:44:9f:6b:c0:b8:29:7a:d4:c1:83:d2:
d4:9c:c2:d7:33:58:11:7e:ee:2c:c2:3a:61:45:d6:
63:5c:82:6d:3d:be:2d:8b:34:d1:e4:97:c7:45:20:
46:df:67:ea:85:23:2e:d9:2d:db:a1:88:71:98:10:
bb:30:f7:03:1e:22:98:8b:ad:89:60:8f:17:b2:29:
12:f5:2c:96:96:56:f2:8b:d1:8a:a6:08:41:bf:6f:
0a:85:42:4a:a9:77:d9:a2:dd:ed:e0:57:30:39:52:
50:50:50:da:1c:32:1f:1c:7d:48:9f:31:10:b4:c3:
15:98:6b:51:51:d8:9f:ac:8f:b1:d8:1c:8d:71:7d:
9e:a4:df:7f:f3:23:65:55:ca:1f:f8:b2:83:a7:d7:
cf:d9:85:c8:78:bc:ef:84:9f:3d:1f:c0:f0:97:25:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:35:EE:6C:30:0F:CF:8A:E7:DE:08:F8:E2:1E:09:1B:F2:57:37:0C
X509v3 Authority Key Identifier:
keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:13:a2:22:f1:f2:b2:02:0a:c5:53:4a:84:44:8e:db:20:c2:
43:e7:ac:2e:20:0e:74:7a:b3:de:1a:2a:ae:df:10:4b:b5:d0:
aa:d2:dd:15:af:5e:e8:a2:2a:25:46:39:27:dc:ed:68:f7:c3:
95:e7:06:c4:54:d2:61:e2:5c:c8:74:36:d5:a1:29:35:7c:c1:
ff:68:ad:d6:7f:5d:2a:58:20:05:9b:19:d5:86:07:c8:23:e4:
7b:64:9c:6a:fd:17:19:19:cf:23:13:1c:08:b4:af:49:21:e6:
f0:dd:c8:d3:9a:60:b0:5f:cb:7d:77:44:3a:d6:b5:7e:96:35:
6b:ad:4c:ef:b9:de:b6:e6:f7:c1:30:6f:13:2e:ce:e2:e8:94:
00:4f:d7:41:29:fd:43:d9:42:5b:be:a4:74:24:8e:d3:76:dc:
c2:c1:fc:41:ee:e0:c8:c8:87:99:94:05:dd:4d:2e:7a:d8:4d:
84:3f:76:f5:e8:41:7b:f4:a9:34:e9:e3:8a:cf:d5:47:a6:08:
b7:b9:47:28:14:fd:e8:1f:20:db:95:8b:94:44:c2:a1:40:78:
66:45:e6:dd:7d:1e:09:66:32:e9:ec:62:fa:84:29:b2:ab:59:
72:f3:de:87:80:cc:e5:f7:39:30:39:18:93:0d:d3:8d:6d:3c:
aa:1e:1e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:25 2026 by rpki-client