This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: jDD1a2dzNHP7Y03KhRIPoekDCcf4Lylm3O+98yppOCo=
Subject key identifier: D4:4A:BD:4E:C5:67:29:38:52:C2:0D:05:66:55:CC:EB:BB:FB:DB:42
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 019C4510CF6D5F950064D8C04E83526B0B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 180F
Signing time: Tue 10 Feb 2026 01:00:55 +0000
Manifest this update: Tue 10 Feb 2026 01:00:55 +0000
Manifest next update: Wed 11 Feb 2026 01:00:55 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: HMbIpk+rVCYyVY1OV1LuZf27Sz6yMi+YIG2ff5X4fTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:10:cf:6d:5f:95:00:64:d8:c0:4e:83:52:6b:0b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Feb 10 01:00:55 2026 GMT
Not After : Feb 11 01:00:55 2026 GMT
Subject: CN=d44abd4ec567293852c20d056655ccebbbfbdb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:8a:45:20:fc:cc:81:44:dd:0e:1d:b9:c8:
5e:08:0b:9b:0f:60:76:0f:6c:82:4e:44:be:39:e9:
f4:4d:ad:04:b0:f6:f7:95:49:77:25:5a:d7:72:4a:
0e:3a:ff:70:a9:33:26:18:d0:44:cc:d8:a6:73:71:
dc:45:0a:b5:5f:07:8b:7f:12:fc:e7:90:6b:53:cd:
88:4b:cc:bc:95:77:56:33:62:28:05:ba:6e:e2:77:
2f:1c:d3:93:eb:e2:64:5d:c5:2a:92:fa:51:e8:6a:
53:ea:e5:64:3c:04:23:3d:70:55:d1:4d:85:64:13:
d3:e8:c0:54:1a:2e:d2:e9:15:fb:9c:74:e3:a3:dd:
70:c8:2b:7f:e3:1a:9b:fc:52:f8:fa:ec:d1:e0:a4:
f0:10:58:f9:fa:8e:ff:bb:0b:4a:f5:29:b5:26:0f:
e7:0b:89:fd:48:96:d8:5e:7b:c3:a4:57:b4:21:30:
c2:80:08:06:8d:be:87:b4:43:df:f7:94:cb:f9:49:
a9:83:dd:80:ba:cf:5a:d7:a4:80:14:03:94:3c:a0:
a8:10:dc:e1:7b:e7:98:4c:fc:79:a7:9d:b3:19:22:
df:1b:ca:10:0e:9d:6f:e8:74:93:d8:ba:d4:cc:e2:
76:d9:e0:eb:47:11:2d:db:ca:fb:68:e7:91:e8:65:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:BD:4E:C5:67:29:38:52:C2:0D:05:66:55:CC:EB:BB:FB:DB:42
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:77:c0:9f:7f:4b:8d:15:7b:e3:9f:a4:ff:06:48:bb:32:70:
e8:32:6a:51:9a:9d:b4:da:ae:bf:0e:0b:e5:3b:2a:4c:03:2b:
d0:eb:11:58:e9:ea:13:d8:d8:75:b2:df:fa:1b:4f:f3:e9:1f:
92:b8:f9:5d:bd:af:b5:c6:0c:16:14:7b:4c:c4:ae:74:14:32:
b0:59:45:3e:66:b6:f3:d3:ee:d7:60:d0:06:88:d7:86:f5:aa:
70:46:92:fe:e7:ae:6c:95:a5:68:d3:1c:76:e4:57:ff:e3:1f:
00:6b:b8:c6:f6:8c:28:05:51:52:27:37:67:90:05:e8:bc:f4:
98:e2:00:f1:a6:b1:c0:90:31:40:4e:13:76:ce:9d:b8:26:8a:
b6:a9:e9:fa:14:04:ab:89:7d:59:2b:b1:0f:c0:69:a6:4e:a1:
a0:d1:b8:c9:b6:36:1d:dc:8a:91:0c:e3:86:11:b1:f1:41:b5:
63:ed:88:9c:9b:cc:5b:f9:58:76:99:24:05:6a:62:49:19:c3:
20:16:2b:82:0f:2d:8b:44:be:43:6a:98:4e:21:74:74:05:8f:
36:e8:b7:ab:54:7a:8d:92:5f:97:a6:eb:fc:66:30:57:ff:b5:
20:fc:99:48:93:be:ab:09:04:bc:72:4a:2f:07:f0:2a:bc:18:
d9:54:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:33:29 2026 by rpki-client