This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
File: dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft (raw, json)
Hash identifier: DLl3BfFbwppemhVWsPwUzZnpMFdsEUyMH9Toa8BCAlQ=
Subject key identifier: 29:55:E1:8B:45:AA:29:C8:D7:1B:75:07:6D:86:4C:6B:CB:DD:AE:FE
Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
Certificate issuer: /CN=769a0ed13591d4b84ca79a8eb577226076651a14
Certificate serial: 019C427D692DCBD25AD19C47338E42DDC372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
Manifest number: 0C1E
Signing time: Mon 09 Feb 2026 13:00:40 +0000
Manifest this update: Mon 09 Feb 2026 13:00:40 +0000
Manifest next update: Tue 10 Feb 2026 13:00:40 +0000
Files and hashes: 1: EN7XiEfKlFXBlZqtNN-oRqqWPD8.roa (hash: hOsYakPKoUo+w1ZXynrtNEWFAogAYXmthy1G2XJLeXc=)
2: dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl (hash: WPg0aV7joUllhJESbFyYzzjr/WOvRqCeFcw55FEwc7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:69:2d:cb:d2:5a:d1:9c:47:33:8e:42:dd:c3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14
Validity
Not Before: Feb 9 13:00:40 2026 GMT
Not After : Feb 10 13:00:40 2026 GMT
Subject: CN=2955e18b45aa29c8d71b75076d864c6bcbddaefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:46:45:f5:7c:92:32:02:ab:b6:6d:44:a8:
81:91:68:a8:b9:2e:54:23:b8:ed:a0:73:68:00:b2:
f7:d1:74:a4:c6:ca:7a:87:f6:7f:08:75:6d:b0:ec:
61:da:b1:83:29:d4:b3:19:da:a1:41:7e:e0:4e:42:
79:74:0b:4d:b9:1e:4d:11:56:0a:62:d9:7c:5d:e3:
be:6c:b8:4c:38:b9:53:20:f7:2e:ac:e8:54:df:cb:
2d:31:61:64:19:54:ad:66:33:0f:2f:50:5b:88:f7:
9e:8d:db:8c:b9:e9:09:bf:63:e7:d1:91:64:df:2f:
96:da:cd:84:63:89:7b:c0:1a:fb:e2:4a:86:dd:f6:
82:a4:6a:9d:a0:42:04:26:2d:15:b3:2f:2c:05:d0:
8a:a3:63:74:f1:60:a6:28:d8:95:4c:2a:12:2f:2f:
7f:7d:d1:d0:64:94:45:7d:dc:0d:c9:46:29:9b:67:
0f:20:86:60:37:14:b0:75:86:53:29:1c:3a:95:75:
93:04:65:2a:21:e5:26:6b:22:51:26:85:8d:8e:64:
d8:cd:c7:79:a6:99:22:12:a1:07:91:d6:f1:c4:d3:
56:2c:56:1e:69:2c:23:25:48:8f:70:c5:ad:8d:cb:
f1:3a:d8:03:28:7e:0a:06:7c:a8:9e:22:15:a0:b9:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:55:E1:8B:45:AA:29:C8:D7:1B:75:07:6D:86:4C:6B:CB:DD:AE:FE
X509v3 Authority Key Identifier:
keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ed:24:8a:b5:f9:1e:52:2d:49:bd:57:f9:6a:87:e7:7a:cb:
e8:c3:82:ce:b7:ca:20:6b:bb:e2:b2:2a:ad:2c:09:81:65:27:
19:7a:74:7b:f1:91:b9:e7:50:00:41:fe:37:09:66:e5:32:9c:
1a:45:d0:3c:88:09:63:b8:06:75:65:2b:89:5b:08:05:71:15:
5d:6f:a0:af:6f:46:28:ff:f7:7f:08:f8:4d:94:a6:07:8c:e2:
a1:ff:fd:d4:fe:8c:4f:d3:2d:df:9b:47:83:ab:ba:b5:1a:cc:
6a:0a:6b:87:30:db:cb:d4:7e:7b:25:e7:02:f3:15:1c:3a:74:
a0:89:c6:a4:6d:46:4b:a2:de:b8:be:d4:2c:61:c4:07:08:6b:
ab:2a:80:3a:7e:0d:e2:1f:a6:bd:af:4a:0b:3f:09:35:98:8a:
d6:03:76:f0:bb:73:fc:13:76:7f:8f:55:7e:ee:76:28:4d:97:
1c:5e:a4:85:92:40:b9:55:7e:83:4a:47:c3:16:f7:26:e3:c5:
33:2a:f6:99:d8:d9:a8:cf:c7:94:a0:06:d2:3c:3c:95:79:28:
9e:7c:64:3d:a1:5a:43:38:f0:b2:67:e2:16:be:c9:92:f9:1d:
6d:15:77:08:1c:d4:c5:0c:fa:d8:09:a6:74:9b:a0:c3:4c:75:
51:ff:ff:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:47 2026 by rpki-client