This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: LshyKhNF4mtK/hQ9N/YIeP/26p/vCSgU5UGg2/kQzqk=
Subject key identifier: 1C:CA:F7:7F:AB:46:DF:59:81:EA:1B:CD:54:9C:48:68:0D:44:C3:55
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 019C4358F14CAFAAEE60DB00C21C34E993D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0E0E
Signing time: Mon 09 Feb 2026 17:00:28 +0000
Manifest this update: Mon 09 Feb 2026 17:00:28 +0000
Manifest next update: Tue 10 Feb 2026 17:00:28 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: ofaV+RujggjkCmAUh7LGcQdcw9BFcSVpKwOPQXFelFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:f1:4c:af:aa:ee:60:db:00:c2:1c:34:e9:93:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Feb 9 17:00:28 2026 GMT
Not After : Feb 10 17:00:28 2026 GMT
Subject: CN=1ccaf77fab46df5981ea1bcd549c48680d44c355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:4c:f6:6a:df:81:73:82:fe:c9:0d:15:94:
b4:76:29:c7:be:ca:29:dd:bd:aa:0f:e8:f4:7c:5a:
f3:51:ec:a4:7c:76:f6:81:a0:27:98:0f:d2:47:d3:
4c:c8:ec:5a:29:d7:46:6e:33:a4:51:53:d0:fa:00:
04:18:5a:3a:06:ed:b1:06:14:f5:9d:49:c8:c3:2a:
65:bd:15:37:49:3e:00:b5:3d:61:5b:e3:03:3f:32:
29:fe:12:7d:1d:63:10:12:ec:33:23:4b:7d:7c:f8:
c6:e2:5c:d7:2d:01:67:24:4b:6a:be:db:9f:61:cc:
a0:cf:69:bf:ad:1d:65:0c:5e:04:b6:c0:f5:61:af:
bf:63:f8:9f:f0:58:41:4c:3e:29:d2:7d:5f:cc:1c:
1b:b1:3e:2f:01:8d:4a:64:a4:5c:6d:24:8c:b4:57:
c3:ce:54:7f:c1:d8:6c:4b:eb:4c:65:96:19:dd:84:
9e:68:63:6e:3d:c8:d1:44:84:8f:68:b8:f1:2f:9c:
6b:c2:02:d7:c7:9f:fc:98:11:b7:f5:ac:44:3e:3a:
01:4b:d4:62:6d:31:bd:2e:08:56:d5:d7:1c:ad:3b:
9f:db:74:26:82:08:66:5f:20:89:1b:57:52:ef:5c:
f1:12:a7:1f:82:f1:95:b3:66:c7:9c:bd:d1:6d:bf:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:F7:7F:AB:46:DF:59:81:EA:1B:CD:54:9C:48:68:0D:44:C3:55
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:35:06:28:1c:3f:3b:e7:26:6d:12:c3:8b:47:e5:0c:78:f4:
bd:11:ed:3a:f6:f2:0f:ca:07:53:51:cc:4e:95:2f:99:96:7b:
07:3e:ee:2b:1c:57:00:eb:ff:bc:eb:0c:9c:69:87:e9:b2:db:
7e:c2:3c:12:c1:b3:32:43:76:90:7f:74:58:19:ae:51:35:20:
e2:11:33:cf:a7:74:cb:05:7d:2d:02:46:bf:2a:15:0c:d9:bb:
e7:59:3c:69:a2:7d:32:a0:c6:d8:24:dd:8e:6a:c3:ea:fa:a5:
51:eb:5c:28:3c:c6:8c:8c:f3:2b:bc:86:49:84:e3:57:89:66:
8d:14:f2:63:b3:00:05:ac:23:9d:c0:ad:ca:c8:fe:19:2c:1b:
02:4d:36:ec:9a:13:16:73:e9:5e:94:d0:28:28:8b:a4:c1:6d:
97:97:04:c5:cb:7d:32:8f:a9:86:66:df:b9:59:e5:44:2f:dc:
cb:69:6e:34:c1:41:75:55:43:35:12:23:10:56:3b:8c:89:66:
5b:76:04:f0:f1:4f:58:7d:86:e8:ba:2f:98:79:0a:16:f2:48:
59:43:dc:af:20:6d:85:2b:0f:03:ce:86:db:79:c0:32:2c:cc:
7c:3d:03:ff:87:34:c0:55:59:fe:63:e8:46:46:d5:41:22:a5:
bb:e4:ab:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:39 2026 by rpki-client