This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json)
Hash identifier: LjSqWKW8DUBFUgSG+LcwurH8X0CAhriCWbdTs1/xVAI=
Subject key identifier: 36:FD:90:7D:E5:3E:19:45:8B:05:4D:BB:BB:29:A8:B2:9D:2E:53:F3
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 019C420F34C823C79050E6435B7588A04F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
Manifest number: 1815
Signing time: Mon 09 Feb 2026 11:00:18 +0000
Manifest this update: Mon 09 Feb 2026 11:00:18 +0000
Manifest next update: Tue 10 Feb 2026 11:00:18 +0000
Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: FDjCWzZunSTuIWESWUeeY/JRoZ/kMIs54w5Z7M79/Bc=)
2: DbVVbnIbFfDOZxQrgkEVy3hcMo4.roa (hash: gZv3W5/DB+PpYBH1O0f6SXVyCWjjrWFqDrRH0Bhu3Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:34:c8:23:c7:90:50:e6:43:5b:75:88:a0:4f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Feb 9 11:00:18 2026 GMT
Not After : Feb 10 11:00:18 2026 GMT
Subject: CN=36fd907de53e19458b054dbbbb29a8b29d2e53f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:2e:4e:2d:7a:2d:82:d8:e2:db:6a:78:b6:
50:91:33:94:7a:15:19:51:10:72:32:4e:9c:1c:06:
fd:34:df:7c:cd:6f:e8:30:b6:7e:c3:f2:9f:66:48:
e1:d6:a9:3f:8b:31:e5:e2:1a:a1:c1:07:ce:7f:00:
e0:13:11:ba:0c:e7:1c:fc:36:cb:2e:1b:db:fc:f2:
d1:2f:fd:29:a7:0e:8e:10:dd:3f:c9:ea:27:05:04:
3c:1f:cb:4d:52:d1:d8:e5:84:30:06:77:e1:b2:7f:
19:f8:2f:f4:9f:58:f5:1e:65:06:c0:5f:d5:71:90:
5f:26:3a:4c:e6:20:87:1f:5d:74:fa:41:90:89:44:
48:8b:e1:ba:93:6b:6a:b9:52:e0:d9:d7:85:73:1c:
64:7c:0a:c2:16:6a:11:80:2b:04:49:a1:3c:93:df:
65:e0:57:e4:1d:a5:27:05:a9:35:42:50:8a:d4:84:
fb:e7:b9:8d:81:68:db:dd:a6:df:3b:19:12:2d:8d:
60:8f:a1:e5:7c:48:48:71:af:ee:01:71:26:8f:1b:
63:77:68:3a:91:e6:b6:51:e4:e3:89:91:bf:f1:e9:
57:a3:2a:b6:2e:12:35:8f:cb:e5:85:72:5d:05:b4:
2b:36:dc:6b:8f:aa:a4:96:f8:3f:eb:81:d5:da:e1:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FD:90:7D:E5:3E:19:45:8B:05:4D:BB:BB:29:A8:B2:9D:2E:53:F3
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d9:5c:37:22:61:47:ee:61:63:02:b5:4c:ca:42:6c:fd:5b:
ca:35:7f:fd:0c:ea:39:bb:e4:ac:01:ec:75:e9:f7:9b:a2:f9:
a7:6f:22:75:8f:d0:7a:d9:3f:29:45:5a:79:05:8c:ec:bd:a5:
6f:00:51:de:21:86:f3:6a:9d:d9:8e:b3:61:ad:85:4b:e8:d1:
e5:d4:54:af:fd:a6:77:5d:82:bb:25:e2:eb:60:fe:8b:d1:2e:
35:4e:45:2e:50:ab:f1:63:cd:09:83:57:ff:a5:65:85:9d:3b:
26:b6:31:d3:3d:8b:8a:dc:b6:e2:af:44:55:f9:10:cb:ea:59:
20:dc:e5:57:5a:86:a0:b0:15:31:8b:d3:79:d4:32:db:38:c7:
4e:f8:27:c1:f0:8e:aa:12:ba:05:3d:3e:5c:ed:c1:21:12:db:
2a:f1:ba:f9:5a:76:4e:83:2f:3d:97:25:66:75:43:79:95:72:
1f:12:87:96:a1:90:4e:0a:36:0a:4e:b2:dd:8d:b4:2f:8c:4b:
e6:8c:7c:0c:95:5e:1d:5a:a3:16:c8:2f:dd:50:4b:09:e4:20:
2d:b3:1c:08:cb:83:49:97:33:ba:69:a3:e3:59:91:fa:c3:f0:
45:bd:31:7c:ac:8b:f3:ce:bd:62:01:93:ff:26:0b:b1:16:ca:
1a:15:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:43 2026 by rpki-client