This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File: 5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier: 2FR0I+j6Ic/6Z91X3y/RGRUn6s5A9yJSWcfqFPTrCnE=
Subject key identifier: BF:07:34:7B:C1:81:DD:CA:44:2E:A8:6B:FC:A3:F1:D0:4B:CA:44:27
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial: 019C43C69AF057D0AE7E89D5FD9A44F0821F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number: 17A0
Signing time: Mon 09 Feb 2026 19:00:15 +0000
Manifest this update: Mon 09 Feb 2026 19:00:15 +0000
Manifest next update: Tue 10 Feb 2026 19:00:15 +0000
Files and hashes: 1: 1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa (hash: RiGnAtuoBY0MDLXEEdvsOwo9zTH9zl0+GNo+JIs/bog=)
2: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: U6EQqrX2evEqwykVNKOTQ0R6Cv+W2g6fZy6E+2BJkkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:9a:f0:57:d0:ae:7e:89:d5:fd:9a:44:f0:82:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Validity
Not Before: Feb 9 19:00:15 2026 GMT
Not After : Feb 10 19:00:15 2026 GMT
Subject: CN=bf07347bc181ddca442ea86bfca3f1d04bca4427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:35:87:35:07:93:89:14:cf:e4:ee:12:6f:
3f:91:cd:f3:a6:36:46:e1:ca:55:77:5d:a6:36:e5:
e0:08:f8:a3:76:1e:81:16:e2:d6:98:5f:ba:36:08:
f4:5c:37:d4:61:d2:e9:80:9e:79:e9:c8:c5:53:ac:
49:6d:33:f6:c9:d3:18:7e:20:de:eb:e8:14:74:6b:
df:ad:c4:f8:43:be:3d:4c:81:5f:7b:d3:76:e9:97:
04:94:6e:c0:86:3d:01:7a:01:f6:5a:70:ed:b9:8f:
52:19:9a:5c:e7:c2:0f:85:41:f0:e2:45:4d:4a:c0:
21:13:6b:0e:69:5c:53:fc:40:83:39:ee:71:8f:67:
6a:2a:eb:22:ba:02:21:9d:dd:78:8b:c4:e9:bb:4d:
ea:d0:d1:c3:27:7d:7c:64:03:8c:3b:97:54:d2:03:
0b:5f:c2:90:ba:08:81:b2:eb:7a:f9:4a:72:28:f1:
09:02:7e:e2:12:3b:f5:10:be:c4:09:9a:9f:3e:0b:
63:07:5a:30:e7:b0:a8:3d:1a:3a:ba:6d:e1:af:6f:
52:b2:db:da:72:0d:cc:76:fe:ab:38:f8:95:9f:09:
27:7e:83:d1:b1:f3:28:fc:e0:b8:7c:44:98:a4:bc:
b5:59:29:70:20:eb:f0:db:0d:46:19:10:bb:31:29:
d2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:34:7B:C1:81:DD:CA:44:2E:A8:6B:FC:A3:F1:D0:4B:CA:44:27
X509v3 Authority Key Identifier:
keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ee:9d:d8:ec:24:cb:ba:9a:12:fc:51:2e:94:0a:b2:1e:ae:
10:1f:2d:ec:97:d7:4d:03:f9:6c:b8:8f:72:05:f2:18:73:d8:
82:39:b6:45:a7:e7:c1:0e:f2:21:a3:bb:4f:ea:c9:3f:eb:59:
7b:b1:6b:11:90:5b:76:9b:b4:37:d3:99:a4:29:7a:14:15:28:
93:99:e5:f4:e0:97:05:7e:07:31:4c:4c:d8:ee:fb:17:74:8b:
eb:37:14:50:9a:58:f4:af:2a:d0:4d:b3:53:3c:f1:e6:78:ac:
2e:ea:e8:63:49:4f:6e:f1:04:68:d8:dd:4f:6f:d0:20:04:18:
97:31:99:02:2a:d6:0e:be:87:7b:12:84:75:b8:35:19:a3:84:
fb:a0:b3:a3:4b:c4:3a:84:b9:c1:96:d6:02:b4:b5:9e:68:60:
94:de:fb:71:89:76:2a:e7:54:c4:d8:fa:a2:65:92:2e:b1:2a:
a5:8a:42:95:5e:08:02:de:af:f4:c3:06:e2:6c:07:11:25:b4:
8b:2c:8d:66:ea:10:93:e0:b1:f4:df:cd:bb:50:be:b7:40:1f:
ed:1d:5d:9d:e7:b4:8b:5e:f3:53:97:17:61:39:63:94:2d:ef:
fc:c2:b4:67:2d:91:b6:39:23:89:cf:19:9b:7b:ce:0f:c1:e2:
37:22:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:05 2026 by rpki-client