This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
File: SS0kreN6IjOTKECddX1H-XlDt6A.mft (raw, json)
Hash identifier: CegqwuKPf+lFHfQYjw148Z8pRj+s1yrFwCt8wduRJdw=
Subject key identifier: BA:8B:F6:F7:D1:97:AD:05:F6:04:87:5F:50:BE:AB:85:18:A9:D8:CF
Authority key identifier: 49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
Certificate issuer: /CN=492d24ade37a22339328409d757d47f97943b7a0
Certificate serial: 019C4390C8E4A6C22E1FDB266DF49671D134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
Manifest number: 0F0C
Signing time: Mon 09 Feb 2026 18:01:27 +0000
Manifest this update: Mon 09 Feb 2026 18:01:27 +0000
Manifest next update: Tue 10 Feb 2026 18:01:27 +0000
Files and hashes: 1: NFYt2GuSWXtuOwlW6Nq8CMWtovs.roa (hash: puZ/+ztmFMeMmQqgSFGKCmQg2VYFRDLAAcv+aC1rqdo=)
2: SS0kreN6IjOTKECddX1H-XlDt6A.crl (hash: 5/UWkUDnHOg/bPthfw6fjveLUzrJsjXyxwOGcwVLPgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:c8:e4:a6:c2:2e:1f:db:26:6d:f4:96:71:d1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492d24ade37a22339328409d757d47f97943b7a0
Validity
Not Before: Feb 9 18:01:27 2026 GMT
Not After : Feb 10 18:01:27 2026 GMT
Subject: CN=ba8bf6f7d197ad05f604875f50beab8518a9d8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5d:0e:dd:d6:0c:d9:d1:21:40:a4:b1:45:23:
3c:aa:b9:86:ab:67:32:0c:b8:03:51:d4:af:f4:23:
75:f4:15:c2:f4:c9:ab:8e:75:5b:f5:7b:32:9f:67:
e2:1c:23:13:06:9d:d6:0a:e8:0b:54:e4:7b:c7:30:
6f:22:ac:34:f7:17:ea:ad:ad:53:0b:c1:ae:52:76:
6f:c0:67:26:35:bb:17:6a:2c:08:79:f2:46:0c:05:
ce:18:7e:91:8f:54:ba:87:87:47:ed:ef:51:c8:f5:
fc:17:b2:69:d2:db:d3:23:10:db:90:25:68:50:5d:
bf:e6:a4:ed:67:d1:4a:be:cf:a0:03:0e:c1:e0:ec:
7e:7f:44:8f:fb:83:d3:ad:63:af:f0:7a:ac:a3:0a:
11:c0:17:52:26:f8:ea:80:1d:40:d3:7c:47:96:a0:
63:69:0e:31:aa:8f:dc:be:5d:8f:22:95:3f:56:e7:
66:3d:b4:b1:bc:29:5f:68:ed:6e:c7:c3:78:40:25:
e2:29:44:32:cd:2d:94:13:68:f6:80:86:64:55:5c:
07:70:21:ed:2b:25:08:9e:7d:d8:b4:e8:ff:60:a6:
ef:34:c7:a6:07:f7:66:95:17:50:d3:46:31:25:c3:
66:a7:b6:2c:76:7e:79:e2:0b:fc:27:10:d7:49:58:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8B:F6:F7:D1:97:AD:05:F6:04:87:5F:50:BE:AB:85:18:A9:D8:CF
X509v3 Authority Key Identifier:
keyid:49:2D:24:AD:E3:7A:22:33:93:28:40:9D:75:7D:47:F9:79:43:B7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SS0kreN6IjOTKECddX1H-XlDt6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d8f845-6250-4df8-90c0-e24b579c9914/1/SS0kreN6IjOTKECddX1H-XlDt6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f0:ed:58:4c:de:aa:7f:3a:b9:67:ba:22:5a:5b:2f:f2:85:
dc:f0:b8:6d:c1:ff:97:99:78:14:24:6d:63:82:b8:13:6f:17:
c3:c4:fd:f3:39:86:b2:35:b1:00:0c:a2:46:99:05:6c:7f:13:
f6:e3:47:c1:1e:30:45:5c:0a:81:d4:6d:2b:9f:21:a3:61:53:
ff:66:28:80:6d:9c:90:b1:2d:42:43:95:e4:61:a0:04:74:31:
76:85:e7:0a:62:4f:1d:a2:03:fc:19:3e:34:00:e1:72:03:ec:
79:f0:63:cf:18:bc:28:a8:f9:89:4b:d9:10:6d:b6:21:ed:1d:
f4:2d:df:d5:29:13:f7:e2:07:9e:a9:16:c2:ad:64:84:d5:ad:
cd:7d:ac:84:8e:99:51:33:06:78:7c:6f:38:17:df:91:14:06:
56:66:05:4b:6a:f1:e3:66:7f:27:b1:43:45:4c:c2:ba:c5:b1:
09:d9:19:40:32:19:6f:92:43:c8:68:c6:bf:c7:55:6c:fd:31:
f9:8b:cb:ed:b6:62:3d:3b:5b:57:5b:aa:33:10:a9:71:1b:ce:
23:c8:2f:29:f5:a3:7c:be:d5:eb:c8:0f:12:f8:55:3a:10:34:
3c:34:85:fc:75:be:11:30:5a:fa:a8:a1:37:55:e8:be:83:d1:
f5:e9:82:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:05 2026 by rpki-client