This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: yDBiTFBRYfV1iNJAg6CJLYNmKl3lbhY652ApUb7n0Zc=
Subject key identifier: CE:5E:70:46:3A:C6:82:96:39:A0:79:D4:91:E8:56:9E:43:B8:5D:B6
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 019C4321DEE29EDA52AC30B7E087572A3792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 16:00:19 +0000
Manifest this update: Mon 09 Feb 2026 16:00:19 +0000
Manifest next update: Tue 10 Feb 2026 16:00:19 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: EbxEIQl6CQ5fZ3ILncHmOaJ55kJxMJJYUSl5EIjTq5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:de:e2:9e:da:52:ac:30:b7:e0:87:57:2a:37:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Feb 9 16:00:19 2026 GMT
Not After : Feb 10 16:00:19 2026 GMT
Subject: CN=ce5e70463ac6829639a079d491e8569e43b85db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:ee:0e:a0:14:bf:c6:e9:ef:2c:dd:f0:a0:
a5:1b:c4:aa:6f:96:17:fc:4a:4b:48:81:76:ad:05:
1e:e4:b3:c5:00:16:c6:bb:fc:e3:7c:e2:4c:d8:07:
cd:9b:d1:22:6f:0b:b0:a3:93:81:6c:18:97:cb:94:
16:54:93:f1:58:2a:21:b0:c2:78:2d:73:b1:9c:4f:
a3:be:4b:47:ce:40:89:d8:cc:f5:85:34:f2:f6:ed:
14:f3:b8:81:ba:31:46:6e:ac:67:02:35:2b:6d:b1:
dc:ed:4c:27:8f:56:d7:46:93:5a:df:e6:cb:01:de:
d6:d1:b5:46:38:03:cd:fb:90:14:20:66:63:56:69:
de:29:46:ad:47:db:a6:ca:c7:ee:ef:7f:c8:1a:20:
3c:17:3a:0b:91:6d:e9:89:f4:36:01:5a:f0:ae:75:
32:7c:4e:10:18:5b:55:7d:fd:f7:45:fd:6e:c9:64:
90:cf:ae:f4:f4:84:12:d0:bb:40:c1:a0:95:58:75:
5f:c3:f8:aa:9d:97:cb:b4:7b:77:aa:86:36:ef:31:
67:f5:32:82:32:35:6f:7a:27:f2:ed:a9:57:bd:35:
8f:f4:e2:b7:56:fb:d2:71:74:8c:7a:41:45:b9:40:
c6:21:86:95:1a:47:2c:a1:33:5a:bf:11:f2:9f:df:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5E:70:46:3A:C6:82:96:39:A0:79:D4:91:E8:56:9E:43:B8:5D:B6
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:05:1c:83:60:49:cc:22:79:23:da:a5:ed:60:29:49:ef:12:
67:2a:33:9c:87:c4:a0:2e:4d:9d:ad:ca:a4:b3:3f:c4:27:7b:
4c:7e:31:a5:ac:8c:86:f5:80:8f:cb:ed:9c:24:db:39:fa:dc:
f7:d3:18:ba:c8:97:17:83:57:8c:20:5d:49:b3:b6:de:0b:dd:
be:92:d7:de:2f:97:ba:c5:01:62:b9:68:30:40:cb:a9:38:b2:
3d:83:93:27:c7:53:9c:37:77:df:3b:47:9c:83:c3:ba:86:f5:
ec:e6:9b:39:b1:f6:6f:e8:92:27:5c:0b:46:a7:2f:86:78:3f:
81:af:59:81:ee:f8:9d:ed:d7:30:01:ab:26:78:d4:83:51:6e:
cf:9c:44:c6:5d:44:8b:d1:c7:e2:06:68:cf:1d:e1:73:79:37:
e4:1d:67:ed:10:c1:1e:7f:67:47:d7:62:79:15:97:09:44:2b:
69:0f:90:94:6f:21:a2:06:65:37:aa:b9:59:69:df:2f:ea:15:
3e:6c:47:a4:10:60:ac:6d:66:84:84:52:15:a2:13:bc:68:bb:
c7:95:22:c8:fd:1d:43:0d:40:5e:58:6c:78:54:5e:b8:20:2d:
60:0a:be:20:b6:22:3d:85:fa:b5:1c:02:0b:54:ea:98:dc:70:
c5:99:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:36 2026 by rpki-client