This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
File: 0dI-JBGcupM36DRmSFv7EGsuJLY.mft (raw, json)
Hash identifier: uClbnOJtaVgt3InvlTbaw++zEh9o4HWbrXwOYSTtbtw=
Subject key identifier: BD:3E:55:17:AA:15:13:84:EC:17:E5:24:BC:CA:90:88:8B:BB:6F:49
Authority key identifier: D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6
Certificate issuer: /CN=d1d23e24119cba9337e83466485bfb106b2e24b6
Certificate serial: 019C44A2643F2CC612D3B9AF96F372C16032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
Manifest number: 0259
Signing time: Mon 09 Feb 2026 23:00:19 +0000
Manifest this update: Mon 09 Feb 2026 23:00:19 +0000
Manifest next update: Tue 10 Feb 2026 23:00:19 +0000
Files and hashes: 1: 0dI-JBGcupM36DRmSFv7EGsuJLY.crl (hash: Qrlx0uExAAcbbpPUrpzziBFDb9RqZty4NZmwfdiW6TE=)
2: GBJ2X2TfbSwmmzgVVsME19XqtSw.roa (hash: 8eDDx0cI0Ia4YPWxch5djmmuUUa69P9GBwa1jUZnCWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:64:3f:2c:c6:12:d3:b9:af:96:f3:72:c1:60:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d23e24119cba9337e83466485bfb106b2e24b6
Validity
Not Before: Feb 9 23:00:19 2026 GMT
Not After : Feb 10 23:00:19 2026 GMT
Subject: CN=bd3e5517aa151384ec17e524bcca90888bbb6f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:75:7a:e2:25:92:eb:1b:5f:db:c1:d9:01:
fe:75:32:7c:15:58:cd:5b:65:46:0a:77:1a:e4:cf:
7d:0c:7e:93:fd:cd:60:cd:58:d3:75:06:98:06:34:
6f:e4:6d:12:dd:db:06:95:5a:36:31:fe:3a:9a:b7:
03:b1:d0:81:8e:7c:4c:b7:36:65:af:54:53:31:67:
28:e9:68:38:af:a2:df:76:59:d2:14:63:07:10:02:
cb:91:cb:02:83:13:1e:1f:de:41:e3:e0:fd:09:f5:
c9:1f:4e:be:ed:91:18:94:9d:59:3e:38:79:e4:1e:
9a:27:a1:bc:1c:87:2e:a8:4f:50:ec:4a:bb:ab:98:
fa:71:5e:58:71:67:b2:09:d1:69:21:34:55:a0:23:
7a:14:e7:ab:6c:ef:59:33:51:63:1c:37:78:5a:ae:
cb:2a:38:e0:f2:c3:3b:c9:28:74:d2:ae:e9:7e:db:
1c:5f:c0:d9:df:00:30:40:76:f9:c9:c3:49:09:7a:
9f:71:a2:00:df:c6:95:bd:c9:9b:a9:fb:40:63:84:
44:df:54:53:f5:65:29:5a:36:bb:d0:f4:71:57:d6:
65:d8:33:b8:9b:ce:02:2b:93:b2:59:0a:de:05:bd:
8a:ef:0b:bf:7f:7b:1b:de:cc:14:c1:e6:48:e2:02:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3E:55:17:AA:15:13:84:EC:17:E5:24:BC:CA:90:88:8B:BB:6F:49
X509v3 Authority Key Identifier:
keyid:D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2a:a1:8d:4b:24:07:5d:c3:43:8c:e8:8c:9a:54:6b:67:2d:
86:31:eb:47:9a:7b:e6:39:0e:a9:e5:09:79:35:7a:7b:f2:88:
13:6c:a6:9e:55:5d:86:62:c0:5f:61:64:e5:9b:58:88:ab:f7:
0a:fa:8c:a8:28:cb:81:b9:a3:0c:6b:d3:66:32:36:cc:a7:19:
b1:4a:f6:f3:54:b8:1e:92:a6:2e:d6:20:12:f8:c9:93:33:fc:
54:e0:be:fb:5b:42:24:b2:f6:07:24:50:21:cf:5e:fa:df:f1:
fc:45:6b:0f:60:7f:f6:fa:51:35:7b:0e:d2:c3:d9:e7:b5:69:
e9:bd:04:8a:af:bb:17:64:fb:27:fc:59:11:7f:df:0b:00:00:
c3:37:ef:4a:bf:bf:90:0a:26:89:8b:1f:a3:55:e2:a4:14:f9:
ed:fd:d0:c2:6d:2f:4e:9e:67:9b:cb:33:5a:7b:26:e9:ba:a3:
9d:2d:1e:7c:c5:68:3b:ec:a8:ed:39:bd:9d:91:4d:09:45:bb:
f8:ce:6b:ba:63:b2:98:3f:59:48:99:23:b1:e4:74:f2:e0:b1:
e5:62:d9:87:7c:32:c1:1a:44:1f:c6:cb:92:ba:22:66:47:a3:
83:66:3f:b0:ab:29:fe:c3:95:84:44:f2:ec:fd:0c:8e:7b:f8:
6c:89:ba:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:38 2026 by rpki-client