This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: 6CvxHdZiC/bnWdj2iQOMLYqzKzvm/FUslTRRS1vhE2o=
Subject key identifier: FF:E4:CC:CF:F6:38:80:CC:7A:62:61:F3:C0:B9:47:95:1D:E0:E8:3C
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 019C416AD01754F099DBE0D05F7EAE464FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 15FE
Signing time: Mon 09 Feb 2026 08:00:44 +0000
Manifest this update: Mon 09 Feb 2026 08:00:44 +0000
Manifest next update: Tue 10 Feb 2026 08:00:44 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: CP5sx8uOL4oS8ORx/nupTJmp8OmO8KXaD6IAtXM/kh0=)
2: yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa (hash: nGkz7j5CjWTfBWr6c+S9Cs2//HPjWw5q8jEucRFb/jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:d0:17:54:f0:99:db:e0:d0:5f:7e:ae:46:4f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Feb 9 08:00:44 2026 GMT
Not After : Feb 10 08:00:44 2026 GMT
Subject: CN=ffe4cccff63880cc7a6261f3c0b947951de0e83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:2f:14:9f:b1:54:16:d1:b2:a1:c6:f0:a1:
a3:c5:90:ee:2b:3e:68:20:d9:75:3e:1d:7d:b2:fa:
16:16:90:0b:c4:10:3a:cc:bd:48:d5:f1:88:31:65:
4e:aa:25:9c:09:0c:bd:a1:ee:9b:d8:58:df:f6:c9:
a3:8c:c0:ce:61:4e:20:57:36:da:f1:49:02:b5:4c:
59:77:86:4d:66:5c:66:79:15:78:f9:31:f6:99:88:
ae:bd:36:28:37:86:23:e0:43:65:0f:ce:27:e8:d4:
7a:2c:45:06:b3:c6:8d:ba:f1:a3:c1:92:07:90:38:
5c:53:65:db:be:2f:59:a7:a8:03:fe:40:59:a5:c8:
50:7d:93:15:fc:19:74:8d:54:2f:65:13:ca:93:3e:
cd:6f:b0:0f:09:7c:f3:8f:78:5b:0f:24:3e:67:24:
d3:8a:e6:66:37:cf:b6:78:54:79:63:44:42:57:2a:
3e:9b:70:c9:2e:f5:27:0b:0b:3d:f2:51:8d:3d:4b:
29:a0:e0:cc:b0:df:8d:2a:01:cb:0c:9e:67:8f:02:
c0:fd:fd:30:19:ae:60:00:b0:a7:1d:17:10:78:b4:
18:dc:36:d2:57:af:25:be:cf:2a:36:5e:36:62:d8:
91:73:81:a0:12:13:1a:d0:1b:68:e9:1d:77:e4:d5:
d6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E4:CC:CF:F6:38:80:CC:7A:62:61:F3:C0:B9:47:95:1D:E0:E8:3C
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:23:76:96:8a:7f:63:08:4b:8a:6e:ee:0d:96:36:17:50:b4:
16:57:af:ca:b2:da:b9:7e:ae:de:0d:43:d2:18:86:b0:75:50:
46:c5:ba:32:4f:eb:44:6e:0b:7d:19:d3:60:24:16:a4:d2:78:
96:13:6b:e2:8a:f4:41:02:35:06:0d:3c:b8:81:b5:54:51:3b:
f4:ee:b9:0e:c6:12:e4:d8:c6:5f:be:eb:be:73:ad:67:2f:d9:
c1:e3:ce:e4:44:dc:0e:fe:67:66:14:1f:2c:5b:7e:df:9b:7b:
5c:a0:30:85:ee:67:01:3b:48:26:12:8b:b9:4a:19:31:37:cb:
d0:16:eb:7e:7b:17:dc:9a:25:59:61:da:22:a8:30:22:ce:1c:
9c:43:9b:50:99:52:69:79:34:73:ea:22:06:9f:ef:5e:96:52:
ef:3f:c8:76:bd:a9:6f:48:28:2e:9c:8b:04:c8:5d:81:4c:59:
a6:ef:10:67:92:27:4b:30:ae:1a:09:04:35:b5:52:bd:d6:53:
62:3a:31:52:a0:f1:fb:f2:bf:e3:5e:ff:4d:9d:e0:7b:f9:d8:
82:bf:a0:26:74:d1:e0:cb:96:17:df:7f:4f:50:9a:10:01:75:
8f:e5:2c:7d:2a:34:e1:17:bd:c4:85:da:0b:24:80:06:2c:2a:
da:18:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:17 2026 by rpki-client