This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
File: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft (raw, json)
Hash identifier: 6r4Cod922b/nRDx9VOAME1nHLQ3BmkKG2eS7Y0qNzMI=
Subject key identifier: 8F:C5:B5:EB:04:65:91:B8:B5:40:65:0F:D6:1B:A7:80:9E:E2:53:85
Authority key identifier: D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
Certificate issuer: /CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Certificate serial: 019C41D8E5AB07B536AA226AF393CD035252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
Manifest number: 04CA
Signing time: Mon 09 Feb 2026 10:00:59 +0000
Manifest this update: Mon 09 Feb 2026 10:00:59 +0000
Manifest next update: Tue 10 Feb 2026 10:00:59 +0000
Files and hashes: 1: 0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl (hash: kr3oqGnXNwjHFZvS9APzNQKgmK1Jml/WMS1e8SJHg9I=)
2: he8kJ9DCXibthyRw5bWWfdO-zeI.roa (hash: CB90W0F1vwsIT9jZbtFWr7qRy3OvwRqYaZVqidxtkOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:e5:ab:07:b5:36:aa:22:6a:f3:93:cd:03:52:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e5eb7536620b5857d1bf590183d650ca23227f
Validity
Not Before: Feb 9 10:00:59 2026 GMT
Not After : Feb 10 10:00:59 2026 GMT
Subject: CN=8fc5b5eb046591b8b540650fd61ba7809ee25385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:7a:af:92:f7:22:74:b2:59:1b:71:72:25:
7f:ee:2e:c7:40:a5:10:b9:a1:88:96:1d:fd:12:61:
42:27:2c:8c:f4:49:e9:f2:35:fe:b5:53:0d:0f:74:
13:b2:8d:49:77:5d:13:40:cb:8e:45:6c:40:7a:0a:
27:77:03:d1:c0:71:69:08:f6:cf:14:50:a6:13:ba:
55:fe:c7:94:8e:fc:08:2a:6a:ee:53:d2:5c:1d:54:
97:e8:5b:d6:e6:21:9e:d5:0d:62:04:4a:29:9e:9b:
01:d5:94:fb:1f:3d:31:b5:54:da:21:26:c3:60:9c:
d6:f8:cf:af:9d:81:15:ba:7b:29:c0:4b:80:13:9f:
f6:5f:e5:96:17:52:28:f2:eb:89:51:28:aa:ae:8a:
b5:ca:91:ac:ad:6b:83:88:d1:d7:83:94:4e:85:73:
64:45:9f:c7:d2:33:01:df:4c:ab:71:13:b0:35:e6:
11:61:6b:b8:c3:9b:2d:91:ba:15:6c:ce:ee:a9:89:
8f:0d:bc:03:c7:3b:d7:8b:f3:6a:aa:8a:a6:37:9e:
5e:1d:7c:bb:e2:30:3c:bc:0a:9b:34:d7:e0:35:2f:
27:95:cc:7b:fe:48:c6:e4:dc:2f:da:06:10:b1:39:
ca:82:c1:b6:38:ae:54:97:b0:9b:9d:4b:0a:81:03:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C5:B5:EB:04:65:91:B8:B5:40:65:0F:D6:1B:A7:80:9E:E2:53:85
X509v3 Authority Key Identifier:
keyid:D1:E5:EB:75:36:62:0B:58:57:D1:BF:59:01:83:D6:50:CA:23:22:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eXrdTZiC1hX0b9ZAYPWUMojIn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/65fa3c-0175-4cee-9930-59cfd453dd17/1/0eXrdTZiC1hX0b9ZAYPWUMojIn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cf:07:4f:54:d8:e0:12:59:93:7e:bc:7c:d1:c4:e3:80:8f:
9e:d5:11:02:05:94:68:b3:b1:b1:58:55:2a:66:98:22:8e:6a:
dc:af:06:0c:08:5a:32:3e:50:fb:46:da:d8:01:ae:33:cb:82:
8f:29:af:fe:cc:38:07:10:21:08:00:79:2e:48:82:6c:c9:9f:
ae:a2:05:81:03:7e:e2:0f:eb:44:33:07:ce:34:50:03:55:e3:
4e:75:a5:67:46:25:8a:64:5f:7d:32:7b:8a:00:70:53:e8:a1:
b8:9f:1c:2a:e5:31:08:09:36:ba:5f:cc:4f:99:a6:27:a8:00:
3d:a8:8f:d3:bc:6d:a9:ed:29:00:65:af:18:24:e7:f3:0a:3d:
af:08:3b:f2:72:f6:2d:1d:88:a0:a8:f0:2c:1d:2a:02:4f:62:
a2:16:1c:36:d2:4f:9f:2c:53:6e:14:60:a9:3e:5f:b1:2a:14:
fd:fc:fa:4b:6e:f2:50:f6:85:73:e6:40:3a:eb:cf:a6:cb:bd:
67:e6:ba:93:94:d1:5b:40:63:a5:67:60:a1:cb:c8:e2:ae:79:
bf:cf:32:ae:8a:00:3a:e2:1b:c0:68:ea:f5:9f:99:83:f1:0c:
e2:e7:74:5b:9c:cd:42:ed:cd:6e:a1:88:17:10:43:b0:49:c7:
e2:a0:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:00 2026 by rpki-client