This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
File: MMOt1700croWgExJC2ahCXZZvTE.mft (raw, json)
Hash identifier: D0xaQ+lQNTJLOEg2C0lyip1TNs4Azfsk+2CzGZzDhY8=
Subject key identifier: E8:E4:A9:5C:4B:52:5C:B9:12:E0:0A:06:DD:C3:8C:8E:EF:BF:FC:6C
Authority key identifier: 30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
Certificate issuer: /CN=30c3add7bd3472ba16804c490b66a1097659bd31
Certificate serial: 019C421039099547B2E6B131173DF350E32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
Manifest number: 0DC2
Signing time: Mon 09 Feb 2026 11:01:25 +0000
Manifest this update: Mon 09 Feb 2026 11:01:25 +0000
Manifest next update: Tue 10 Feb 2026 11:01:25 +0000
Files and hashes: 1: MMOt1700croWgExJC2ahCXZZvTE.crl (hash: pt2jRFwnTbNNoqKLavqBDoQWtifbzp/mXhaN7HUw5iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:39:09:95:47:b2:e6:b1:31:17:3d:f3:50:e3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c3add7bd3472ba16804c490b66a1097659bd31
Validity
Not Before: Feb 9 11:01:25 2026 GMT
Not After : Feb 10 11:01:25 2026 GMT
Subject: CN=e8e4a95c4b525cb912e00a06ddc38c8eefbffc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:2c:18:b5:b5:2a:b9:81:46:8b:03:25:1b:
e9:00:73:b1:e6:0c:f1:b8:e9:94:b5:2a:7c:df:15:
9b:e1:45:ab:f5:70:a4:74:4b:0f:76:b0:1e:60:09:
73:18:6e:98:cf:ea:2d:b3:a4:ac:1f:a9:b4:aa:93:
ad:2b:a3:a3:f9:7b:f8:c2:5e:b6:09:1c:76:b5:08:
2b:a9:ac:6b:e7:c0:55:c3:f0:31:eb:01:d4:c0:d6:
9f:30:96:5a:df:33:04:c6:5b:47:f5:7a:f7:b5:74:
bb:4c:cb:13:20:41:72:01:96:3c:a0:48:e6:ab:16:
66:05:56:cd:40:d5:8f:8c:d3:65:78:64:06:45:84:
35:d8:78:a6:9f:e7:96:e1:19:63:4d:a9:5b:43:09:
b1:0c:05:fa:f3:22:e8:3b:81:c0:78:41:74:c1:9b:
7c:e0:6a:16:14:5c:af:94:3a:89:9f:0c:7a:31:7c:
92:62:2f:5b:6c:88:d6:d8:69:48:b3:52:a8:15:a1:
15:06:84:52:7f:5d:be:d0:0d:30:f9:ec:6f:66:6b:
de:8a:0b:28:21:14:ca:fd:c8:e4:6b:b5:b3:6f:91:
d3:c1:06:00:35:b7:e9:de:65:2b:f4:c3:c8:bc:cb:
ad:33:7e:28:ae:98:6e:d3:80:77:61:00:a7:f0:dd:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E4:A9:5C:4B:52:5C:B9:12:E0:0A:06:DD:C3:8C:8E:EF:BF:FC:6C
X509v3 Authority Key Identifier:
keyid:30:C3:AD:D7:BD:34:72:BA:16:80:4C:49:0B:66:A1:09:76:59:BD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMOt1700croWgExJC2ahCXZZvTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/23ccc8-4718-453c-be3e-95cd6924ab4e/1/MMOt1700croWgExJC2ahCXZZvTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f5:af:cc:96:6f:32:e5:ca:a8:09:ad:f6:55:10:9e:6d:ff:
59:bc:75:1a:25:c1:9e:86:90:1d:85:78:96:63:a4:17:ac:36:
5c:a7:79:8f:10:8f:27:70:5e:3f:4f:af:ed:6d:3f:c1:6d:6c:
0b:4f:6e:92:4a:eb:38:4d:d7:b8:3d:8e:5f:62:c8:b4:ac:eb:
39:ae:87:7f:11:9f:ea:53:b8:c9:4c:14:50:96:58:a4:fa:12:
54:88:b2:08:4c:17:89:96:d4:62:cf:52:de:8c:5d:73:be:95:
6e:18:2a:64:6b:ed:28:36:a0:16:3a:7d:61:09:0c:8d:62:a6:
ee:63:2a:1e:54:cd:29:ef:4d:34:d9:f1:e3:11:d2:75:81:f5:
27:9b:d5:14:65:40:75:f4:50:bd:e2:53:2a:e3:f1:fc:4d:b1:
58:d2:c2:cd:3e:43:82:40:c5:d3:e3:69:dd:08:0f:92:68:b9:
a5:2c:de:c6:c8:6a:97:2c:77:58:c9:1b:ac:0d:1c:c0:91:ec:
88:39:de:78:67:fb:4c:47:88:ea:4d:96:dd:f8:f8:1c:91:8c:
f2:56:6b:0c:0f:b6:63:76:98:a2:6f:9e:5f:6c:18:3c:eb:0c:
63:50:7e:d1:40:5a:85:80:3f:27:83:15:48:16:76:0a:57:12:
a2:5a:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:36 2026 by rpki-client