This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
File: mGpc6Mx8vBzhNJbJgaibw0cufgs.mft (raw, json)
Hash identifier: 1zpA2yLhByJgGYGZQeB9dWnLRvgFNL1tR3xYdIKPUbc=
Subject key identifier: B3:6C:52:B4:DD:32:58:18:6D:E5:29:A9:8B:E1:69:48:B8:2B:22:C3
Authority key identifier: 98:6A:5C:E8:CC:7C:BC:1C:E1:34:96:C9:81:A8:9B:C3:47:2E:7E:0B
Certificate issuer: /CN=986a5ce8cc7cbc1ce13496c981a89bc3472e7e0b
Certificate serial: 019C42468FDED086CBCC84CDA702896C2AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
Manifest number: 1E
Signing time: Mon 09 Feb 2026 12:00:46 +0000
Manifest this update: Mon 09 Feb 2026 12:00:46 +0000
Manifest next update: Tue 10 Feb 2026 12:00:46 +0000
Files and hashes: 1: mGpc6Mx8vBzhNJbJgaibw0cufgs.crl (hash: CN6qh5S4xSyI+GqMSxQDREZ3quGBduKgnxtqdOvuZHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:8f:de:d0:86:cb:cc:84:cd:a7:02:89:6c:2a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986a5ce8cc7cbc1ce13496c981a89bc3472e7e0b
Validity
Not Before: Feb 9 12:00:46 2026 GMT
Not After : Feb 10 12:00:46 2026 GMT
Subject: CN=b36c52b4dd3258186de529a98be16948b82b22c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:51:56:7e:12:d7:a3:b0:b9:9e:b8:a7:02:03:
95:b7:f6:f4:c1:2b:fe:91:fa:50:b5:94:c3:7d:20:
90:54:90:cd:af:35:4f:b6:78:75:a2:20:8d:45:fe:
ef:e5:c1:b4:42:a5:09:ee:4c:de:46:b7:db:09:9d:
1d:23:ec:61:19:a5:4a:0e:a2:c5:a4:77:ae:ff:ec:
48:7c:2c:7c:d7:65:f6:da:1d:a8:13:de:59:88:cd:
86:8c:f4:bc:5e:06:a7:90:33:6c:31:50:dd:a3:8a:
c6:39:15:e8:b4:1d:8c:a3:07:1f:44:3b:13:6c:f6:
bc:18:4b:ea:47:0d:94:ba:26:0a:54:59:63:3d:5f:
a3:e5:52:ef:ec:cd:b1:5d:81:cd:be:59:85:3c:d5:
8d:40:a0:eb:05:ca:d7:a0:9c:4c:45:c4:14:63:f4:
de:2c:81:f7:f1:cb:95:2d:b7:f8:a8:4b:57:a3:77:
a7:50:6a:04:c2:67:43:e2:34:40:29:27:13:80:c9:
aa:a5:1f:7a:cc:90:75:7f:63:74:d4:b4:de:bb:0e:
3d:87:fa:c3:97:e7:86:fa:4b:a0:74:92:47:99:4b:
31:ae:de:7c:46:fd:8f:96:3c:18:a1:0b:44:fd:71:
c7:55:c0:12:89:7c:9b:5d:5c:7c:65:85:da:43:ee:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6C:52:B4:DD:32:58:18:6D:E5:29:A9:8B:E1:69:48:B8:2B:22:C3
X509v3 Authority Key Identifier:
keyid:98:6A:5C:E8:CC:7C:BC:1C:E1:34:96:C9:81:A8:9B:C3:47:2E:7E:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGpc6Mx8vBzhNJbJgaibw0cufgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a7cd12-de78-44ce-8326-42432742b2ef/1/mGpc6Mx8vBzhNJbJgaibw0cufgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:15:b5:e6:79:88:96:bb:99:fe:d3:e0:67:1f:df:aa:5a:de:
17:3b:68:96:38:37:4c:ea:3d:35:b6:ab:1b:55:7a:c1:d2:6c:
fc:48:48:32:66:2f:d9:46:ac:8b:06:8b:67:4c:7f:5c:a2:d5:
23:0e:42:55:10:7d:80:1f:90:c0:f4:c9:dd:97:f0:96:5f:6d:
dd:b7:a2:a5:09:41:28:f4:11:eb:25:63:9d:d8:0a:a0:bf:db:
97:a2:83:6c:f3:6b:65:61:d4:cf:30:be:26:68:dd:a6:64:23:
b0:cc:b1:71:9c:19:92:a9:53:9d:cd:22:74:e1:71:4c:8c:73:
bd:86:30:cc:16:4b:78:97:8c:0d:9d:b8:47:3f:ec:65:0e:8d:
57:5c:58:8f:f8:0b:79:2f:7d:ad:9a:9c:25:ca:c9:53:17:d7:
11:03:cb:07:5d:4f:eb:1c:c8:6a:ea:19:72:a1:1b:0e:ba:a3:
40:6d:c8:8d:09:7a:c2:fb:a7:f8:9b:e6:3a:6f:59:c6:82:1d:
75:7c:bc:e8:d9:74:da:c2:ed:ae:ef:4c:af:f8:f5:fa:d5:e6:
68:1e:0c:73:dc:41:74:42:6f:4c:05:be:8d:f4:34:90:61:60:
fd:86:df:30:9b:12:19:54:75:e3:3a:80:8f:67:92:50:04:e1:
61:76:e9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:39 2026 by rpki-client