This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
File: 60GVbRLcuYK-1HqfrEp-SOd4fHk.mft (raw, json)
Hash identifier: AcmPostcvq6CsnljIQ0lfv/2W6MVa5WIWJHdWDhrSCQ=
Subject key identifier: EC:45:A3:92:8C:EA:76:BB:1A:FD:F4:9B:FA:BD:3D:5A:31:DF:23:A6
Authority key identifier: EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
Certificate issuer: /CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Certificate serial: 019C41A191220CD88F54485AE15C3ED1A276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 09:00:33 +0000
Manifest this update: Mon 09 Feb 2026 09:00:33 +0000
Manifest next update: Tue 10 Feb 2026 09:00:33 +0000
Files and hashes: 1: 60GVbRLcuYK-1HqfrEp-SOd4fHk.crl (hash: YYAfOMgqhkcnzyiIbluQWFBB0AlEYK2FFjC1iJkVHDc=)
2: rQtAzEA3IuNuehdcnThK_xXRMt4.roa (hash: cRYFONZaNIX4ZtEkAVHlLM1U8vITX1Zqs8J2LZhQlqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:91:22:0c:d8:8f:54:48:5a:e1:5c:3e:d1:a2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb41956d12dcb982bed47a9fac4a7e48e7787c79
Validity
Not Before: Feb 9 09:00:33 2026 GMT
Not After : Feb 10 09:00:33 2026 GMT
Subject: CN=ec45a3928cea76bb1afdf49bfabd3d5a31df23a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:14:89:5e:1f:a9:64:64:fc:93:b8:50:3f:
41:6d:04:a1:94:d4:7e:9b:2a:5a:94:8e:dd:6f:2c:
e2:2b:35:36:58:28:e1:ac:03:aa:64:da:71:8c:46:
06:df:29:26:a9:c2:c7:b6:45:81:85:2f:c2:7f:a4:
53:e6:ae:62:c9:ed:71:95:f7:91:dd:89:1c:c1:52:
e7:7e:6d:c0:37:34:5d:e3:3e:b8:d9:63:60:6c:64:
13:04:e1:e9:33:ec:87:d9:b6:3a:9d:82:82:55:86:
67:3e:bc:17:0b:b9:aa:97:43:5e:02:41:79:04:3c:
d1:d9:48:b6:b2:db:c9:8f:96:99:c5:41:b3:16:54:
10:45:c0:2d:8a:a4:70:94:f8:e1:04:64:c1:39:62:
d0:70:4e:d1:a0:a7:69:0a:9f:db:8f:ec:0e:49:ac:
e4:b9:ee:ed:98:fd:be:4a:7d:13:bd:49:4d:82:88:
59:2c:96:ba:7a:36:6e:79:4b:5a:19:ad:67:ae:a0:
9c:20:8e:01:41:16:75:fd:79:41:f6:ca:6d:7d:22:
55:ec:30:09:3e:ab:8c:87:d2:dc:cf:33:d7:fc:ce:
de:92:43:bd:a3:89:a9:4b:8d:7e:5a:4c:40:41:84:
3e:19:96:4b:6e:bd:00:3a:db:08:d4:84:88:a3:2b:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:45:A3:92:8C:EA:76:BB:1A:FD:F4:9B:FA:BD:3D:5A:31:DF:23:A6
X509v3 Authority Key Identifier:
keyid:EB:41:95:6D:12:DC:B9:82:BE:D4:7A:9F:AC:4A:7E:48:E7:78:7C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60GVbRLcuYK-1HqfrEp-SOd4fHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d3f1c-cff5-4b2b-9e46-67847c76cb76/1/60GVbRLcuYK-1HqfrEp-SOd4fHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9c:6c:9c:ed:bd:d0:bf:fa:e2:e2:54:0e:64:43:98:e7:ce:
86:03:b5:d1:a1:45:db:ae:9a:b0:25:99:88:e3:bb:e4:1f:1a:
c5:d8:23:d1:6f:b2:55:da:a5:18:b9:b3:74:7d:bb:a6:35:e4:
96:05:6c:5d:56:9f:28:3b:01:5f:e0:e9:f7:27:99:19:29:36:
47:0b:8e:46:89:93:34:ad:26:dd:7f:be:3e:c3:53:98:66:c9:
71:6c:d5:ad:40:48:66:81:3e:06:64:56:08:47:b1:fb:58:81:
ed:2d:a4:92:30:4c:44:6f:c9:60:73:9d:b8:9f:31:5f:98:a3:
38:bc:b9:2b:a7:52:73:1b:ea:68:55:4a:be:f7:12:30:eb:07:
b2:5e:20:50:52:6e:b8:a2:32:ef:0b:a8:1b:a6:7f:30:2c:db:
5f:52:6d:a5:9c:d9:57:2b:85:5c:c9:49:9d:35:25:6b:95:8e:
73:62:82:b8:9c:c5:35:ca:f6:ef:3c:34:93:8b:da:ff:bb:bc:
d5:48:7e:f9:a5:4e:eb:c3:49:a4:cc:5e:5a:43:d3:68:fe:2c:
d5:88:25:ca:7c:67:78:34:2e:bb:f1:33:08:ea:9d:7a:29:fb:
81:31:46:e3:9e:26:aa:85:87:66:16:fc:a9:f5:99:ad:80:31:
13:49:15:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:59 2026 by rpki-client