This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File: imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier: rmhyMDBAS5SYq6+JcP4rxhufKNR/QF0tPbhzvhQBpnQ=
Subject key identifier: F7:BE:9D:9B:19:02:7F:9D:CE:D8:B2:BA:02:7F:13:48:FF:3F:F7:BF
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer: /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial: 019C427DDECA099FADB49481A7FCC84711B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 13:01:11 +0000
Manifest this update: Mon 09 Feb 2026 13:01:11 +0000
Manifest next update: Tue 10 Feb 2026 13:01:11 +0000
Files and hashes: 1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: 9maq2+3pCg25OL5rljnK/+GRbrq1UjaN8fZLnkqNtZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:de:ca:09:9f:ad:b4:94:81:a7:fc:c8:47:11:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Validity
Not Before: Feb 9 13:01:11 2026 GMT
Not After : Feb 10 13:01:11 2026 GMT
Subject: CN=f7be9d9b19027f9dced8b2ba027f1348ff3ff7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:8b:aa:bf:76:2e:5b:73:63:ec:0d:a2:d5:
39:64:20:e3:41:81:6c:2f:a0:a0:29:1c:12:13:16:
cc:15:e3:6d:4a:19:32:8d:ee:6a:d4:50:ad:12:34:
4c:df:3b:b4:89:a6:81:ff:31:51:e3:33:bd:64:b6:
d2:79:d7:8d:91:62:78:2e:b5:e2:b1:d8:a3:97:f1:
fb:8f:21:1d:cc:71:31:59:ea:28:64:4c:e6:29:0b:
66:0a:78:2b:f6:bf:86:e2:44:46:aa:75:68:a4:75:
1e:58:ad:85:a6:5b:d0:da:d3:ec:76:de:11:67:d6:
e0:1e:3e:5c:33:b8:87:92:fa:06:a8:0a:38:d4:66:
4c:d3:71:73:13:84:6f:9b:94:32:3e:01:4b:1e:a3:
ae:c6:14:0a:22:e8:79:c4:85:c0:f5:df:9e:1a:5d:
f7:fa:a0:9f:1d:fe:af:31:fa:8b:9e:bb:53:67:4a:
0e:fa:97:84:f0:b7:14:c6:f8:77:94:2b:4f:99:92:
84:c1:af:da:75:e7:24:3c:44:78:4b:29:d7:e4:e0:
31:9f:7b:82:48:2e:e3:9a:1d:05:41:76:64:9c:8c:
4b:c2:a9:5e:fa:01:e1:7d:71:b8:91:15:c6:2d:a3:
bd:53:5f:55:e3:92:9b:8e:ca:5f:8b:7d:d4:7c:86:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:9D:9B:19:02:7F:9D:CE:D8:B2:BA:02:7F:13:48:FF:3F:F7:BF
X509v3 Authority Key Identifier:
keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e2:d2:7d:d8:cf:81:9d:90:21:bc:b0:c4:34:7b:e8:31:50:
c8:14:e4:07:1b:ff:52:13:2b:7d:eb:5a:97:8b:92:ab:6c:96:
37:51:09:5f:20:cf:20:0e:a0:e6:be:6d:d6:a7:c3:d8:5d:c4:
d1:6a:a5:9a:4e:f2:f8:a8:de:0a:5c:61:d8:fb:80:ee:ce:49:
8a:89:6b:3b:80:af:3c:c7:fe:3f:35:2e:6a:1e:2a:e3:6b:83:
b9:a1:0c:b3:3c:6c:dd:c8:b9:b0:b6:91:f1:7f:81:4a:d2:d0:
8f:0b:eb:4a:1d:96:1d:75:a7:eb:d2:10:ae:36:0e:f8:64:ee:
fd:26:b9:38:1d:7d:12:4a:79:a7:a5:fa:70:76:3a:48:2d:ca:
65:3e:3e:c9:be:6e:1a:53:47:ce:7a:67:16:14:81:8d:85:5d:
46:c4:6c:51:a3:b0:9e:2c:97:8b:3e:db:77:57:35:d1:f6:c1:
b7:35:a7:47:8c:25:13:de:b9:5e:09:f5:01:42:66:0b:df:65:
a1:a8:94:bb:78:c4:4d:3e:8d:a6:79:50:bb:6a:d9:f3:0c:fa:
ac:9e:89:76:d8:c9:95:e2:f7:00:80:fb:e1:2e:0a:82:04:4e:
0d:37:50:a6:02:d8:11:75:5c:01:1a:5f:81:cd:ff:8b:ac:ed:
17:5b:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:34 2026 by rpki-client