This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: Eayok7BmcvYnK5PRv7RJS/zIl/137h3kf4TTdWCPr6I=
Subject key identifier: 9A:9B:69:65:C1:8C:16:91:D2:E2:ED:A4:6A:D5:F6:D7:7C:E4:3B:28
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 019C42B3F198FD9630C4D4068A2DD58A8CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 1535
Signing time: Mon 09 Feb 2026 14:00:14 +0000
Manifest this update: Mon 09 Feb 2026 14:00:14 +0000
Manifest next update: Tue 10 Feb 2026 14:00:14 +0000
Files and hashes: 1: 4nJD6h_AT_Jm3vuCDyt9q7O_3CQ.roa (hash: GQ/gs01dnRvZL+8O2A61zDdVjrGTgR7MaIk+wMIYhGg=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: XySpQWB7QErffjOODxwjbpcYevZieN/NqH+KbQfcHrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b3:f1:98:fd:96:30:c4:d4:06:8a:2d:d5:8a:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Feb 9 14:00:14 2026 GMT
Not After : Feb 10 14:00:14 2026 GMT
Subject: CN=9a9b6965c18c1691d2e2eda46ad5f6d77ce43b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:95:99:e2:c4:ba:cf:52:54:b6:d0:6b:e6:
69:d0:89:de:95:7e:4a:84:db:8b:0a:a7:70:a8:0f:
a4:c9:26:c4:b2:79:06:fe:61:38:34:b2:27:52:03:
e0:e4:5c:14:49:11:42:e3:e0:c0:55:66:2b:13:6b:
11:9d:07:fa:a8:5e:75:90:22:16:9d:f2:0c:13:af:
e1:78:c4:46:80:ed:14:69:93:27:c1:7c:4b:f7:04:
81:cd:00:01:02:5a:07:38:be:ed:6a:2a:9f:2b:f0:
9e:23:49:a6:85:1d:e7:57:e2:89:84:4d:4f:05:31:
e5:55:02:df:fa:e7:e4:d0:99:41:21:77:a2:cb:5b:
1d:05:e9:5e:d1:5b:e8:f8:91:cc:90:97:48:1b:de:
bf:5d:1b:ce:24:ca:d1:1b:69:17:7f:0b:c8:39:92:
f9:d1:09:cd:73:b0:47:49:5a:d7:8f:59:a3:32:32:
73:81:e9:b0:db:4a:b3:d5:d3:23:68:3f:69:e6:5e:
3f:d2:b0:f3:ea:39:07:e1:e4:b2:4c:de:1d:99:0e:
ee:02:bc:60:81:8e:c7:e8:20:87:98:7d:4b:ff:44:
a1:a5:c6:02:d4:1d:d5:d4:1c:af:fa:3a:00:df:fe:
3b:b5:52:ab:68:bf:e5:96:e2:8e:d6:91:d8:ce:d2:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:69:65:C1:8C:16:91:D2:E2:ED:A4:6A:D5:F6:D7:7C:E4:3B:28
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d1:37:85:bc:ed:4f:87:6b:7c:fd:9f:57:01:65:38:bd:30:
68:5b:66:81:1c:01:1f:71:23:fb:60:4a:e9:6d:68:21:6f:6e:
09:82:37:4e:25:0b:ef:ee:f8:5f:99:99:5f:85:84:5d:66:08:
1b:05:3c:ce:6f:55:7b:4c:57:3d:7f:97:87:dd:c8:d4:85:8d:
66:14:82:f9:64:d7:c7:e4:06:b3:ac:e2:6f:2d:ca:25:a8:81:
9f:90:c4:f6:4b:a8:a4:5c:69:bd:59:4d:dd:d9:99:67:4a:d9:
35:73:64:6a:34:87:7f:00:a0:af:cd:f0:d4:d4:e1:5b:8f:3e:
3d:50:b1:9d:64:fd:b0:0c:91:0e:11:0c:5f:b9:8f:0b:00:26:
ce:6b:84:82:c5:8b:7d:f5:78:70:e9:4a:69:7f:67:9e:5f:cd:
43:f7:96:87:cd:12:c7:db:77:77:ce:92:6f:97:8d:92:a6:92:
ec:d4:f1:8f:c5:85:3c:87:81:a5:5a:8d:a6:85:5b:5f:e2:ea:
bf:4c:bb:3e:d3:16:f8:93:7a:fd:6e:6f:be:d4:00:e6:9e:5a:
79:df:b3:fb:6d:e1:1e:55:71:20:3e:c1:3b:5b:5f:e4:d3:3e:
bc:c4:21:f4:19:86:55:e5:a7:d8:d0:1b:39:45:4b:5f:c0:ea:
6d:23:fb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:17 2026 by rpki-client