This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json)
Hash identifier: TAaawUZ8Nqi5rzsrUVz+IZgOU7N4+A7ryYZUeuMEY+g=
Subject key identifier: F0:1A:A6:7F:67:58:BA:40:48:00:16:D3:2E:15:09:DF:72:AA:08:BF
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial: 019C446C72DA341E149E2BC05E11D88A1DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
Manifest number: 0355
Signing time: Mon 09 Feb 2026 22:01:23 +0000
Manifest this update: Mon 09 Feb 2026 22:01:23 +0000
Manifest next update: Tue 10 Feb 2026 22:01:23 +0000
Files and hashes: 1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: cT/DtZfG2apQAwkdtrfjAjKFGwKi1PiE+y+sOod3IeE=)
2: HORWGw6AaqSSM12H6ipwx55-oWY.roa (hash: G83S9Vamz90/aaDzeWNDK3Mb1c9FRLQyr+F0Xgj6z8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:72:da:34:1e:14:9e:2b:c0:5e:11:d8:8a:1d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
Validity
Not Before: Feb 9 22:01:23 2026 GMT
Not After : Feb 10 22:01:23 2026 GMT
Subject: CN=f01aa67f6758ba40480016d32e1509df72aa08bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:c5:dd:b9:bd:2e:ec:3e:39:dd:6c:78:a8:
93:68:a3:5b:ec:da:32:c4:66:ec:8d:5b:fa:97:32:
d6:4b:32:da:aa:ed:47:01:e7:c6:80:11:0e:da:1a:
db:4c:1a:5c:48:7c:ae:cf:2b:90:69:b6:39:85:51:
10:08:84:cb:e8:26:44:41:ff:e2:29:56:2c:14:48:
7b:8e:95:28:48:71:48:9a:09:9f:b5:53:f7:44:c4:
8b:3a:c5:06:61:c0:5f:8e:ed:2a:4a:d0:cd:06:10:
f9:98:20:26:e8:13:29:f1:d0:ed:37:71:eb:69:4f:
65:6a:04:04:55:10:08:c8:26:74:91:04:50:fc:e0:
20:5f:1b:65:ba:e3:26:80:da:60:38:bc:0e:75:bd:
8c:bb:50:56:86:b6:59:2c:a4:5b:a0:55:bc:29:5b:
28:39:78:64:16:c9:ae:99:a5:82:49:a9:ec:01:3e:
ec:62:b3:f4:a7:a3:25:24:c3:09:98:2b:54:30:bb:
bb:eb:d0:39:a1:05:60:b6:a5:60:72:43:03:be:99:
d3:17:f6:cb:5e:93:db:9a:04:99:72:61:57:e1:88:
c6:4b:db:9b:1a:49:ce:38:64:f3:be:68:81:2f:9b:
a6:48:77:89:d4:13:4f:f6:73:95:86:e9:1e:9f:b1:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1A:A6:7F:67:58:BA:40:48:00:16:D3:2E:15:09:DF:72:AA:08:BF
X509v3 Authority Key Identifier:
keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0a:9d:a3:da:6f:c8:df:d3:65:50:72:e6:38:05:f8:e2:00:
8b:e8:78:55:71:f9:f6:19:1d:8b:ea:d2:8b:17:c3:6b:5f:e6:
b0:48:de:61:dc:10:62:76:37:4e:8c:7e:2a:21:e1:dc:a8:4f:
7b:e9:e5:1e:11:b4:00:8d:4d:16:46:78:e9:0a:76:b7:40:62:
f6:cd:5e:c7:ad:78:e1:30:55:8d:2a:7b:ae:79:95:10:f6:dd:
1d:f5:f7:64:3e:12:9f:ed:f1:47:0f:31:67:e9:35:91:04:f4:
43:33:0d:3f:d8:5d:d1:06:68:a3:4b:1c:74:42:a6:fd:f8:89:
a0:38:5b:69:02:88:1d:bf:8d:8e:cc:08:2c:84:76:25:6d:d0:
6f:2b:2c:0c:4e:4d:6e:06:b3:89:53:c3:ef:33:a2:9a:6f:29:
73:72:ca:b1:64:09:2e:f5:2c:7e:b6:d2:20:01:26:11:11:a9:
4d:63:97:6b:f3:a2:a3:84:93:0c:c4:23:da:50:ab:95:85:67:
6f:33:5f:c4:b3:9f:15:21:b1:27:60:92:a0:9a:4c:62:1d:39:
40:d7:d2:f4:42:c8:86:42:0b:b6:1c:56:6e:3f:4d:a3:3f:a5:
e6:45:bc:fe:09:11:d6:92:ec:cc:6d:b6:0d:3b:a1:6c:74:fc:
e2:fa:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:35 2026 by rpki-client