This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: eblV+k2g3cH0XFuH1nrdGBbG2BuIWt1uDmWmPQPoE9Y=
Subject key identifier: F4:CF:2A:02:A2:2C:A3:5F:A8:48:FE:57:B3:A8:41:C8:39:36:17:11
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 019C4322DFF2248B416E0C129E1D2235BF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 078F
Signing time: Mon 09 Feb 2026 16:01:24 +0000
Manifest this update: Mon 09 Feb 2026 16:01:24 +0000
Manifest next update: Tue 10 Feb 2026 16:01:24 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: dTjlPFYGxFT46Hu/gIe1WImpPy9j0uCntnw1d5YyzEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:df:f2:24:8b:41:6e:0c:12:9e:1d:22:35:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Feb 9 16:01:24 2026 GMT
Not After : Feb 10 16:01:24 2026 GMT
Subject: CN=f4cf2a02a22ca35fa848fe57b3a841c839361711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:ea:90:5b:f9:69:06:c2:b9:2f:d0:6b:3d:
e0:dc:e0:e0:5c:fd:b6:84:00:1c:df:41:f7:4a:57:
48:ad:d4:98:00:5e:45:98:98:3f:42:e3:bd:22:9f:
b1:f0:af:6d:66:a5:1f:2a:cd:43:d5:5f:e7:f8:e2:
1c:ed:45:7a:d6:ee:e4:7f:cd:84:c9:31:62:49:b9:
11:80:6a:cc:e9:9f:a5:61:4d:87:41:43:4f:9c:2d:
15:be:a7:7e:79:f3:60:46:c6:8d:4d:ec:47:19:3f:
ba:8a:98:6d:e2:e2:47:0c:f5:6b:1c:8e:5f:2d:90:
ca:ee:8e:c7:00:64:60:f1:65:e7:9e:d2:62:6c:77:
51:ce:e4:97:38:b1:b1:e9:5b:98:87:25:5c:50:21:
fd:7b:c8:28:62:9b:bc:a1:75:c4:10:cd:b4:7d:d9:
36:98:50:c9:0d:0e:5f:7f:e6:3d:c5:c6:cd:c2:d5:
d8:b5:1d:99:e1:28:38:48:7f:42:69:5f:ce:f1:f5:
71:8f:c1:49:41:aa:ff:62:f7:c7:43:c3:10:3d:80:
ee:10:d6:b1:83:ff:2f:e4:4d:1d:f0:24:f1:9e:c6:
81:56:22:ac:71:ee:a7:bc:ab:7b:36:05:84:25:1d:
c9:75:08:dd:51:c3:96:10:af:d5:6c:03:f4:eb:98:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CF:2A:02:A2:2C:A3:5F:A8:48:FE:57:B3:A8:41:C8:39:36:17:11
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:07:ba:04:d1:e2:6e:aa:22:95:86:fb:01:89:6b:06:4d:77:
79:4b:e8:53:72:cd:e9:b5:51:7d:ae:38:e9:9c:c5:6a:13:64:
24:5a:70:fd:7b:8d:7c:a2:4d:c3:b1:c3:63:b9:15:af:9f:f9:
18:b5:9b:ba:7e:e9:1f:4b:ac:02:cc:c0:41:a5:a9:f8:bb:d3:
62:bf:78:fa:d9:37:81:92:52:b6:36:b1:34:0c:5e:41:c9:29:
de:e3:8a:ca:66:30:35:b8:0c:44:60:90:08:8f:95:dc:e2:df:
11:27:68:4b:a9:e4:ca:ea:4f:3c:a6:be:4e:dc:9a:96:06:6d:
81:ad:a4:d1:eb:38:0b:26:6c:5f:9a:17:e7:1b:12:a0:5b:27:
3f:25:1b:d7:37:98:e8:d7:8c:1f:a7:ea:e3:67:d1:77:67:4c:
5d:e5:69:60:58:e9:23:42:59:ba:fd:8e:4d:06:f2:d7:90:b6:
7f:8d:6d:7e:ab:3f:ee:66:9c:f7:11:2e:06:f1:7b:00:42:5d:
53:e7:c0:b5:86:a3:55:18:7b:86:cf:c3:4b:83:c0:80:99:7e:
af:e9:e4:6f:82:24:98:d7:03:e2:e1:1d:d6:ae:c0:bc:b4:ee:
c9:8c:28:20:90:dc:65:7d:66:19:e5:35:ad:01:2b:7d:36:20:
94:21:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:55 2026 by rpki-client