This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: X3lSLaxF8yZ/hvLfog4yNzVt2lrsyLlsUWwEcqRdWr4=
Subject key identifier: 62:1C:67:77:AA:18:84:39:57:19:7E:E2:A4:43:4C:ED:AB:4C:DE:35
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 019C43901FA71C198D7CCD35FEF9A7646F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 17DF
Signing time: Mon 09 Feb 2026 18:00:44 +0000
Manifest this update: Mon 09 Feb 2026 18:00:44 +0000
Manifest next update: Tue 10 Feb 2026 18:00:44 +0000
Files and hashes: 1: GQd_z5uJwdsLDnBkirOT1tIhbAY.roa (hash: r7UQRHAwPZYrFRzCrHQs/g9X5Lo/Yw67jppFdNg9RjQ=)
2: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: 0PgCTWy7CHWd5Yeu8Zgf6aBRrtU6g78X9EikwMbhEB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:1f:a7:1c:19:8d:7c:cd:35:fe:f9:a7:64:6f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Feb 9 18:00:44 2026 GMT
Not After : Feb 10 18:00:44 2026 GMT
Subject: CN=621c6777aa18843957197ee2a4434cedab4cde35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:14:9b:28:06:ae:b5:72:74:90:51:5d:51:
57:73:b2:f4:cc:16:60:ff:43:73:c4:f2:b6:27:9c:
ac:4b:f8:15:09:dd:8f:15:a1:2d:9d:da:d2:69:8e:
bb:37:ba:f8:b8:20:4f:d6:d3:9e:4b:de:7e:0e:74:
46:48:61:fa:98:8b:ef:b3:12:9b:5c:04:06:05:1e:
68:4e:96:a2:32:b2:ca:c9:2b:8a:67:26:ce:61:d8:
fb:2f:75:f1:63:58:6c:55:a6:e2:61:5e:fc:b7:46:
41:a0:dc:a9:f3:d3:3b:00:05:66:a9:5a:60:9c:91:
dd:6c:b3:a9:cb:34:8c:a3:ce:71:c3:07:f4:c6:fc:
b6:68:ed:a4:af:fe:7b:2e:f6:92:c9:c1:e3:97:72:
33:8a:54:92:a7:e2:44:60:59:78:90:3b:7c:34:61:
3d:4d:f9:61:99:df:17:2c:72:d2:aa:7f:50:e3:32:
22:91:09:3e:a1:24:f0:d4:df:8e:46:5a:fa:77:fb:
de:0f:76:80:f8:7a:75:80:48:9a:c9:ca:cf:1e:4d:
8d:cb:f3:98:bb:f0:fb:96:dd:b4:1c:33:5d:51:0c:
81:d4:7a:93:6c:8d:f4:29:13:09:f9:f1:a1:6f:da:
04:c4:f4:cf:5d:34:c3:ab:dc:54:e0:ec:9f:e2:fb:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:67:77:AA:18:84:39:57:19:7E:E2:A4:43:4C:ED:AB:4C:DE:35
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1d:6a:34:3c:93:f6:8d:bb:21:9a:05:37:68:b5:13:30:75:
49:be:e5:f5:e4:34:7c:40:68:a2:43:ae:eb:db:de:36:fd:13:
7f:84:1f:0d:77:4f:e3:7c:27:e5:5e:34:ca:78:d5:5b:2d:93:
e2:34:1d:0a:c6:c5:bc:4d:35:47:fc:00:78:4b:40:d0:54:e4:
65:24:c8:f4:54:fe:38:66:f2:a3:18:73:fd:5b:b2:8b:ef:6f:
b6:2b:2d:22:73:be:2c:b2:74:55:df:e7:86:a0:79:a6:4a:7b:
bd:90:56:3f:9f:4d:d3:c6:55:79:44:a1:b2:7b:cc:c2:b0:d2:
fa:ac:d8:a9:d7:5e:da:6f:f5:5b:c8:4d:f9:01:a5:25:d2:e1:
21:4c:00:29:4b:a4:92:9c:bb:b7:57:1a:b2:fc:6d:29:8d:32:
51:b3:20:c9:45:00:dd:c6:77:82:a2:db:10:30:53:49:89:f5:
58:04:09:ea:aa:2e:ae:56:74:47:cb:28:7f:61:d0:11:a9:88:
ed:89:6a:0d:a0:4b:cc:7c:c5:fd:ff:ee:57:1e:45:e4:e2:7a:
db:cf:77:46:c3:55:dc:ac:9b:bf:b4:67:fe:13:3b:55:31:8d:
14:37:ab:28:dd:b0:b5:b2:66:7c:91:79:c9:7d:fd:87:d0:c1:
f5:1f:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:30 2026 by rpki-client