This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: qYkkOf2wjZVK0hLUc4cVyKTKdiUJrjhrg7KpagJKCOk=
Subject key identifier: 3B:81:07:17:DB:EC:82:8A:64:D5:E5:D6:D7:0E:AE:9D:65:E1:1F:3A
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 019C41D8BDDAADA7B1C30250A1023F7D4F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 1315
Signing time: Mon 09 Feb 2026 10:00:49 +0000
Manifest this update: Mon 09 Feb 2026 10:00:49 +0000
Manifest next update: Tue 10 Feb 2026 10:00:49 +0000
Files and hashes: 1: 1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa (hash: GVSG8HQq960x0d4CpK5jN+FSCHq1SzLhEkFhDXdwhwI=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: x0uatvPzOjOJdfQFBp391yC7eyq1D9HVnidgSN2a1OQ=)
3: Pk5JLOSd1QInAh2OTvMfyyR1NPI.roa (hash: O7rw9h1GQCgx5zvERGlnO4YLbgkL7RaVJgOWvuy279I=)
4: oVjc2gbj8Z3HA7eAzKIRnl2lQMA.roa (hash: zAAZk1U4VBtTI0cONSxWT3e4cbR3Hkt4vRra+VHSqCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:bd:da:ad:a7:b1:c3:02:50:a1:02:3f:7d:4f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Feb 9 10:00:49 2026 GMT
Not After : Feb 10 10:00:49 2026 GMT
Subject: CN=3b810717dbec828a64d5e5d6d70eae9d65e11f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:4a:56:2f:c6:6a:3f:7f:45:fe:f6:6e:78:
09:03:1a:47:1e:84:89:4e:91:70:da:ad:3e:6f:68:
cd:80:7f:7e:51:4e:a8:32:19:08:9f:8a:0c:41:95:
a1:0d:59:04:2e:d7:ab:f8:74:17:ac:c5:79:f6:c8:
88:31:ff:16:86:86:45:8b:d3:a1:5a:48:bd:ac:45:
43:6d:fe:e6:7b:c5:59:e4:6c:29:fb:54:fc:e4:92:
6c:f1:a8:8b:9a:3f:67:9a:9f:1c:50:04:27:4e:8c:
24:a4:ed:2e:00:fe:fa:56:d9:6f:84:0b:f6:3b:79:
51:48:92:98:ea:6a:cc:69:b0:fb:c8:01:5a:d5:7f:
96:09:ec:95:7c:52:a4:f4:b5:7c:d8:e7:c4:94:22:
ad:ca:15:64:88:2e:dd:b1:ba:f5:65:cc:ae:53:2b:
0f:36:93:12:75:70:dd:8e:6e:12:7e:e8:57:54:f4:
25:a2:d9:df:1c:07:23:f7:21:76:4d:9b:76:e9:70:
6c:cb:79:96:73:d2:e6:0c:42:02:61:bf:f5:34:d3:
d7:75:17:81:f3:10:34:cb:42:d0:76:2d:e4:c7:b3:
04:56:2d:af:40:75:e0:5d:0e:fe:37:5b:f6:eb:90:
53:f0:a3:4c:7f:bf:8d:e1:ad:f0:26:4f:9d:00:e7:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:81:07:17:DB:EC:82:8A:64:D5:E5:D6:D7:0E:AE:9D:65:E1:1F:3A
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9a:c1:c4:54:2c:e8:12:db:c8:d8:f6:4c:35:c4:ac:e2:1f:
cb:aa:aa:27:bd:54:60:3e:5e:0c:3d:da:1c:95:8c:40:2a:38:
89:ac:19:14:f7:a2:f5:1d:7b:9d:01:e7:fa:b2:1d:38:ee:37:
d9:e7:c0:11:b2:e5:98:68:3d:29:6a:53:30:3a:08:29:46:fd:
d7:70:1e:00:04:f9:e1:3b:a0:f3:76:1a:ff:07:61:41:e6:eb:
c4:90:09:61:8e:cb:e4:fd:74:0b:24:dc:94:2b:fd:21:5d:cc:
23:ec:b8:31:73:01:31:f2:23:d4:1d:0f:f7:6b:67:90:17:d4:
97:3b:4d:8d:c8:4e:da:40:fa:22:50:ec:c4:ce:eb:57:a5:f8:
30:b6:8d:0e:65:f0:0d:d8:ae:32:ab:fd:f9:2b:c8:06:cc:18:
52:88:24:32:dd:77:df:7a:f1:54:7f:63:68:62:57:9c:a0:15:
ae:fa:33:82:a9:85:c5:09:80:5e:44:36:e8:e6:70:31:4f:37:
62:20:ce:09:e0:a0:ce:41:68:29:98:fd:e1:f1:15:a6:32:68:
dc:7d:51:fc:78:96:ef:70:37:0d:9a:0b:00:6e:6a:8d:f2:bf:
03:6e:1d:b5:b2:0c:5f:53:44:f6:b5:c9:92:98:0e:45:fd:6d:
25:81:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:33 2026 by rpki-client