This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: MwXG9JqEVYi1yE//93/DVakynv3/tdtjzDG3G4QQSys=
Subject key identifier: 77:F1:9A:50:09:42:7D:C9:F5:5C:A5:85:BF:DE:EC:EF:0A:37:34:9B
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 019C413397BEE5F8FA8FB4D01EB9AA505723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 0782
Signing time: Mon 09 Feb 2026 07:00:25 +0000
Manifest this update: Mon 09 Feb 2026 07:00:25 +0000
Manifest next update: Tue 10 Feb 2026 07:00:25 +0000
Files and hashes: 1: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (hash: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE=)
2: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: sx4JHUJAIBP2X+wTCb0vwxx6o+8XVeWTgg6UZXfl1+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:97:be:e5:f8:fa:8f:b4:d0:1e:b9:aa:50:57:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Feb 9 07:00:25 2026 GMT
Not After : Feb 10 07:00:25 2026 GMT
Subject: CN=77f19a5009427dc9f55ca585bfdeecef0a37349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:89:33:56:3a:b6:09:24:00:5e:9f:70:08:69:
0a:80:9c:1d:14:22:78:d2:bc:93:03:42:af:82:7d:
e2:a6:92:e8:ae:cf:ba:0d:d6:1b:aa:23:29:66:fb:
aa:13:09:2a:43:7a:7a:d0:6b:61:0d:76:b9:8f:db:
79:06:b8:2f:3f:bc:97:42:c8:aa:c0:c8:4e:7c:d1:
fc:8e:40:f7:33:7e:c6:b8:5c:64:3d:e4:0a:16:ef:
07:bb:7e:7e:f2:8d:94:ec:0c:7f:e1:8c:fb:87:93:
be:d8:ac:60:7a:d3:23:ad:10:28:07:a9:ee:1d:b8:
bd:4d:51:c1:66:8f:3d:5b:8c:0b:30:2f:8e:16:ee:
39:24:1f:a8:cd:f9:27:37:2f:5d:19:bf:c3:d2:46:
fc:9a:62:12:4f:53:43:5f:d2:9d:19:d4:2f:90:5a:
3d:7a:00:7d:ba:cb:c2:d3:ec:c0:5d:3f:ba:9a:76:
ce:97:c2:c0:a5:ba:32:31:a0:39:b7:70:29:ee:3f:
70:75:d6:59:ca:a2:d5:8a:68:f7:60:a0:35:40:a4:
3d:dd:49:27:cc:5f:88:33:cd:ea:25:d0:16:bf:3d:
e2:66:11:ba:22:0f:b9:96:6b:bf:a5:ca:e1:92:8a:
67:da:c6:5e:50:5f:77:69:00:ab:f6:53:30:e0:42:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F1:9A:50:09:42:7D:C9:F5:5C:A5:85:BF:DE:EC:EF:0A:37:34:9B
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e3:15:06:6b:32:82:ae:56:55:7f:08:51:37:77:32:b5:8a:
37:57:20:83:01:8d:a6:94:b7:74:f2:01:cb:e8:13:d6:84:53:
fb:70:af:a7:70:4c:38:ef:74:95:86:71:c9:70:85:27:7a:1a:
7b:71:ae:63:f2:60:be:61:bf:d0:83:01:49:6a:c8:26:6c:46:
40:9b:05:04:5d:d7:93:c3:9d:8d:c2:1a:c1:1f:a0:82:39:2a:
6d:ce:f9:2d:3f:9f:5d:4f:fd:c4:e6:fe:7f:44:df:56:42:ce:
e8:52:ad:e9:7a:f7:5d:bd:86:ae:aa:da:9f:52:00:a0:b4:a8:
88:de:59:bc:79:65:61:2a:4b:02:1d:8d:70:f0:92:97:3b:df:
03:c5:9c:7e:ab:f1:1e:ae:9e:b4:ae:3d:5f:e9:cb:af:0c:58:
c1:1a:b9:18:e2:40:10:a4:a2:bb:a1:6b:4d:cf:43:91:f1:76:
61:e7:a6:96:36:03:42:59:00:d0:b7:4c:a3:79:21:2d:9e:f6:
7f:6b:5f:53:fe:74:c4:99:78:09:fd:a5:39:ea:17:2c:60:b1:
bf:91:15:2d:5f:3a:0e:ca:a3:f2:3f:61:02:7b:13:96:a8:aa:
fc:5f:81:e1:38:62:45:45:80:29:18:34:a6:6b:b8:71:72:81:
c1:f8:44:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:01 2026 by rpki-client