This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
File: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft (raw, json)
Hash identifier: B+Q8rVgwcrTn57EJafuYjK3U26cYAcErhYfyG1uCW/A=
Subject key identifier: 4E:21:4D:4A:1B:04:7A:A9:C7:F6:49:34:BB:BF:E0:B8:20:28:81:91
Authority key identifier: D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
Certificate issuer: /CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Certificate serial: 019C42B4526890833D7BD90FBD53E7ABE8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
Manifest number: 054F
Signing time: Mon 09 Feb 2026 14:00:39 +0000
Manifest this update: Mon 09 Feb 2026 14:00:39 +0000
Manifest next update: Tue 10 Feb 2026 14:00:39 +0000
Files and hashes: 1: 2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl (hash: AkIBElCc49CEcvl8UzD+pEJP4Ykb2WQhBw6hGrRXGes=)
2: GMU3TSJTGq9iCufbaQZiFQej0WA.roa (hash: ljokmvqilxnlp8MkmSEtwBZsAxwI/68glG1fFGFpkvs=)
3: R8FcC7KhrsX6xfUJoni7fKDQvyU.roa (hash: luF/QpaFODwYEgvrZVW+0b3KKg50XI+k4diPh+v8PTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:52:68:90:83:3d:7b:d9:0f:bd:53:e7:ab:e8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d890d4ee07fc21c111d635284da7fb19fd706ce2
Validity
Not Before: Feb 9 14:00:39 2026 GMT
Not After : Feb 10 14:00:39 2026 GMT
Subject: CN=4e214d4a1b047aa9c7f64934bbbfe0b820288191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:63:2f:1f:0a:22:92:58:38:9a:fb:f7:1d:
9c:5e:3b:45:6d:f0:51:81:51:29:a7:28:06:b2:7a:
73:0c:d6:2f:e1:da:e4:95:c4:a3:c4:16:5d:79:1d:
b3:63:1f:b8:04:bc:37:9a:ab:3e:5e:80:35:5c:40:
cb:14:30:e8:70:00:e8:55:4a:6c:c7:22:9d:64:e9:
ed:f3:a4:70:50:d8:e7:52:fe:7c:07:7f:fd:7f:3a:
a0:8e:68:12:a7:ee:db:2b:1e:7e:7b:66:7d:7f:d7:
17:5e:05:85:a8:6a:ae:b0:b7:30:5b:ce:06:85:e0:
43:2f:22:b5:fe:38:e2:31:53:43:11:ea:95:72:08:
75:9e:ea:a7:3d:1b:24:13:58:8b:a4:14:d7:c2:97:
df:d1:90:cb:a4:b2:2e:47:cf:db:dd:54:d2:ab:60:
ab:31:9d:92:23:34:d9:1b:06:cd:4f:a9:82:f9:91:
01:46:d9:83:13:69:9b:0b:e2:0d:aa:1b:0f:00:6e:
db:6e:d0:f8:71:ef:3c:0c:2f:f9:45:7e:f7:e0:8d:
59:e6:50:68:28:b8:67:51:4a:33:44:cf:bc:ac:94:
69:9b:e0:3d:53:63:cf:c6:4b:5f:af:ed:cc:c0:02:
69:21:06:b8:e2:d9:54:81:96:51:24:16:0c:65:f8:
1b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:21:4D:4A:1B:04:7A:A9:C7:F6:49:34:BB:BF:E0:B8:20:28:81:91
X509v3 Authority Key Identifier:
keyid:D8:90:D4:EE:07:FC:21:C1:11:D6:35:28:4D:A7:FB:19:FD:70:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JDU7gf8IcER1jUoTaf7Gf1wbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3ec24a-b191-434a-bdc2-06a810af8d34/1/2JDU7gf8IcER1jUoTaf7Gf1wbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:79:22:ef:0c:36:fa:22:14:77:89:03:00:9f:c0:6f:b6:8e:
9d:73:16:f0:ef:fb:c4:4d:ab:44:7d:07:3e:00:6a:f2:bd:88:
2b:08:b1:e7:1b:5a:d8:33:5a:0e:14:11:83:c9:cd:29:99:4c:
c1:39:6a:3e:f4:b2:75:ab:04:e7:49:27:28:97:ed:2f:65:a9:
5e:8d:56:8c:8b:19:f4:d1:07:9c:15:5d:31:4b:13:9c:80:f8:
a6:e4:2d:d4:d1:cd:06:20:0c:d9:a6:ec:ef:07:71:32:ce:f4:
bc:11:80:2c:ef:8d:34:8e:76:cf:23:d1:cb:70:c5:8b:69:6d:
a5:00:95:45:73:f6:c7:e7:8a:0c:ae:45:a4:ef:a0:fe:6d:91:
66:5f:db:c4:01:32:58:07:30:20:d6:c4:34:73:ad:1c:30:01:
42:45:2e:a3:c0:ad:b8:c8:fc:60:7b:b0:b6:a2:01:fc:0d:3c:
9e:b9:9b:d3:aa:f9:b9:fe:f7:57:31:77:c7:7d:ca:1a:8f:c9:
38:72:09:e0:0e:7a:db:6f:38:04:45:80:17:73:b7:2d:53:8e:
03:df:8f:82:34:fd:c0:50:92:6f:39:f0:31:8a:fc:b2:9a:a4:
18:58:c3:21:e0:c0:68:5f:a7:5d:86:1d:35:62:2b:e6:9e:62:
3f:37:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:17 2026 by rpki-client