This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
File: DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft (raw, json)
Hash identifier: UmTogH0XZyR1yzvOCidWwtlUdo/5DG2XwWKo8R8QBSQ=
Subject key identifier: D0:E5:2A:A5:62:05:E0:38:CC:BD:FC:05:7E:2B:5E:6D:3E:00:8E:61
Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e
Certificate serial: 019C1BA76704FAFF9C968EFCC562481CAF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
Manifest number: 0F2B
Signing time: Mon 02 Feb 2026 00:01:21 +0000
Manifest this update: Mon 02 Feb 2026 00:01:21 +0000
Manifest next update: Tue 03 Feb 2026 00:01:21 +0000
Files and hashes: 1: Bw0LYZeYa4YiK1Zwav9M2CIs7yc.roa (hash: Og9dej6zdeYfUEuKlPyDfibsivF+zi1xumhqKFbtAHA=)
2: DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl (hash: eU562wgwV/FOFk9P882K8lVDdLKzoMuUZ1MjBUYX654=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:a7:67:04:fa:ff:9c:96:8e:fc:c5:62:48:1c:af:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e
Validity
Not Before: Feb 2 00:01:21 2026 GMT
Not After : Feb 3 00:01:21 2026 GMT
Subject: CN=d0e52aa56205e038ccbdfc057e2b5e6d3e008e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:fb:ca:92:c3:86:e2:0a:6e:16:43:e0:82:
95:4a:a5:2e:d4:4a:0a:b5:ce:6a:22:83:c1:cc:f6:
3d:cc:67:6d:c7:bb:47:06:64:bb:b5:2a:1d:e8:f5:
02:c5:78:12:fb:ea:70:7b:7a:1a:3c:fb:82:f7:91:
35:04:7d:56:af:38:82:39:1f:ac:a0:4b:a9:09:0f:
f2:85:5b:8a:88:be:bb:b6:04:57:9f:af:f4:4d:80:
c1:4a:5e:31:d6:1c:ed:5b:c9:97:9e:d7:fc:2f:8f:
cd:43:21:c4:16:b8:11:70:0f:92:61:c5:72:bf:e2:
d2:28:58:78:38:a8:4c:22:5d:b7:13:f4:6a:b6:36:
bb:1a:22:27:cc:61:a6:fe:43:d1:df:50:6d:32:a9:
2f:6f:6b:30:86:ef:0b:f9:8d:4d:db:35:46:7f:8e:
a2:a6:0f:bd:d4:79:96:2f:16:61:04:7e:f0:ae:0c:
60:9b:58:f0:6b:b1:22:7e:c2:bc:e7:fc:c8:fb:74:
14:fe:9a:8f:59:8b:95:1e:17:a5:85:c7:79:a4:69:
11:85:55:56:38:f9:9e:5a:48:39:f3:c5:34:88:f2:
2c:e3:be:76:ca:ec:6d:79:22:80:b3:88:ef:be:64:
2f:dc:99:82:a8:c7:3e:0f:8a:01:b6:7e:a9:59:a3:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E5:2A:A5:62:05:E0:38:CC:BD:FC:05:7E:2B:5E:6D:3E:00:8E:61
X509v3 Authority Key Identifier:
keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:01:8f:d9:65:7f:f1:97:b6:b5:c6:24:63:a6:6c:00:be:74:
53:f4:34:33:ce:7d:02:06:48:ba:c8:8c:8c:92:ef:cd:88:f8:
0e:b5:1c:6a:10:12:b5:a0:b5:e0:52:5a:ea:f1:83:e3:69:1d:
db:58:38:10:37:d9:cd:2c:81:8d:7c:0f:63:0f:80:78:86:99:
15:04:c4:ca:8e:d0:89:f9:be:ce:6a:44:9e:e9:89:1e:c9:a4:
58:7e:74:11:74:e1:54:ce:4b:fa:91:1a:cc:31:47:39:0a:50:
4f:59:37:2f:72:46:3a:9c:05:d9:87:99:ef:48:17:99:8d:b8:
49:8a:5a:db:58:bc:f6:ed:21:f2:37:70:38:c3:16:93:92:5d:
05:ed:33:16:78:6c:96:22:54:c3:e4:20:82:b4:0a:cb:44:6f:
d5:2a:5d:3b:9f:c7:87:0b:46:53:fa:db:c1:9b:fd:e3:0d:92:
ee:97:f7:46:31:4b:96:50:80:14:c7:62:0e:50:ce:67:d9:5e:
60:be:78:a4:d1:45:99:29:1a:2a:ad:c3:21:26:df:7b:05:ce:
26:0e:43:10:5f:4c:1c:ff:68:1a:5d:32:5d:ac:41:b1:26:42:
54:1f:0b:44:ed:34:3f:28:5f:49:f9:e5:96:76:35:80:67:5c:
47:04:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:22 2026 by rpki-client