This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
File: S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft (raw, json)
Hash identifier: 5yeul07Lg8+Q2eWGqw7PfvpxbZGCOjivw911YImTER4=
Subject key identifier: 10:82:DE:CA:A5:7B:6F:25:F9:C0:70:33:7E:C4:0C:CD:83:0F:4A:60
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial: 019C4246D0C27396DFD611BFD33610C39DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
Manifest number: 17C6
Signing time: Mon 09 Feb 2026 12:01:03 +0000
Manifest this update: Mon 09 Feb 2026 12:01:03 +0000
Manifest next update: Tue 10 Feb 2026 12:01:03 +0000
Files and hashes: 1: A7oH_fLfnOw7C8Ezc6fn-0zm-WM.roa (hash: p+2iqj6NoeYI6sIm7F3U7seEwOT2LgHbpeFNruLRw/8=)
2: S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl (hash: VFBlhCwjw5MXNTnPtpIfCdmKVCix0+einWBA4t63F84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:d0:c2:73:96:df:d6:11:bf:d3:36:10:c3:9d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Validity
Not Before: Feb 9 12:01:03 2026 GMT
Not After : Feb 10 12:01:03 2026 GMT
Subject: CN=1082decaa57b6f25f9c070337ec40ccd830f4a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:04:c5:ae:46:19:ed:b8:e3:2d:1f:67:cb:
9f:cf:f6:32:95:28:74:51:b7:81:cc:d0:c1:24:3c:
f3:2a:ec:1c:70:11:d5:96:ad:4e:8b:5c:9e:92:f9:
76:11:69:52:d2:48:3a:c6:86:5e:72:ed:1c:70:e7:
b8:25:86:de:ab:d6:d1:b5:0d:1a:5d:64:c1:2d:5c:
8d:af:50:75:26:20:7d:ee:d6:cb:1e:76:92:4c:bb:
68:65:e7:2d:7d:9d:dc:8b:6e:f1:a2:fa:73:56:e3:
f1:b5:5b:24:c1:79:11:86:a3:fe:5b:cb:07:ce:f1:
8a:6a:ac:c9:eb:17:56:5a:f9:da:9d:47:e6:29:13:
78:91:42:e4:bb:d4:55:a8:a1:ae:53:aa:0a:7b:63:
04:da:31:3e:a5:71:0c:62:80:e9:d0:7a:1b:ce:c1:
89:1f:a3:dd:c6:99:f5:72:3d:7e:38:37:ed:6f:b4:
27:c0:38:a4:30:6c:d7:eb:1f:b2:85:16:7e:a2:76:
73:94:d6:02:27:15:1b:87:7e:f6:9a:f4:14:d6:5a:
38:e6:6e:e7:2b:d0:50:64:47:81:3b:e5:8f:2b:ca:
d6:bd:0a:bf:e0:63:4d:e7:d3:a0:5d:f1:87:9f:d8:
3f:c6:e1:2a:b2:63:7e:c3:1c:94:43:df:ab:24:94:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:82:DE:CA:A5:7B:6F:25:F9:C0:70:33:7E:C4:0C:CD:83:0F:4A:60
X509v3 Authority Key Identifier:
keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:72:7c:0f:72:1e:14:93:2a:4f:0f:87:17:74:93:c7:c1:a3:
71:4e:a9:97:14:23:f8:e1:61:e0:66:f0:6f:8b:67:f5:da:50:
be:0d:64:36:17:bd:e4:ea:5a:da:da:4e:0c:c6:a7:aa:40:f8:
2e:21:af:95:8f:fd:0e:19:5c:21:58:3f:ae:ca:3d:77:e2:05:
30:ba:7b:ba:1c:a5:7c:a1:60:0e:41:7a:9f:bd:7f:95:54:15:
eb:54:35:0d:32:cb:9b:7e:49:5b:0e:09:b8:04:09:0a:9b:54:
53:47:a2:b0:33:62:c2:c8:6b:72:08:4b:0c:30:96:c7:b2:dc:
1f:fd:bb:5c:2c:65:cd:1a:43:fe:f0:35:99:f1:cd:19:74:cb:
19:c1:49:ca:62:d6:cb:d2:99:26:8d:da:97:a5:ce:ff:2a:ca:
ed:b9:da:2a:61:b4:d0:9c:e4:4f:27:71:61:74:0c:05:00:57:
17:2c:e8:d1:99:a6:79:d3:c6:a2:b9:92:e9:6d:1a:6c:fb:7d:
28:54:c5:76:9a:86:e8:84:48:e2:67:83:71:72:b9:4a:85:e2:
93:bc:61:ea:04:66:56:9c:ac:7e:ee:3c:53:c2:8b:b1:c6:48:
8e:e3:4e:7c:cd:bb:13:e9:e7:b3:c6:40:96:70:fc:86:5f:cb:
5f:e6:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:13 2026 by rpki-client