This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: J0FoAGR/KR2WWvWZ6PuJ8hs7S4+DlseBkEqYVyd4sKs=
Subject key identifier: 18:61:56:AB:5D:7E:98:CA:C8:7C:DB:BB:E5:05:84:0B:A6:AE:8B:E8
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019C43595DAACEC620A8A35C58EA68B137C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 07D0
Signing time: Mon 09 Feb 2026 17:00:56 +0000
Manifest this update: Mon 09 Feb 2026 17:00:56 +0000
Manifest next update: Tue 10 Feb 2026 17:00:56 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: tOaS8G4wU9z+M947Md3s6uWIjUR6eZSEmwfpfpEIGb8=)
2: 9GMkdyr4DbW0rD9GNXc5HYR9PeA.roa (hash: Kv7/JJMZellKaJMYAA/q400p0MFHvGxPXd6PvxQ7/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:5d:aa:ce:c6:20:a8:a3:5c:58:ea:68:b1:37:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Feb 9 17:00:56 2026 GMT
Not After : Feb 10 17:00:56 2026 GMT
Subject: CN=186156ab5d7e98cac87cdbbbe505840ba6ae8be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:fc:d5:8d:7a:3b:5a:73:ac:da:67:03:21:
0e:12:3e:25:01:41:62:a7:4a:6b:e8:10:3b:6a:b2:
e9:75:65:89:69:5d:85:3e:7e:18:9b:bc:e7:a9:92:
81:00:85:d3:53:6e:1c:4b:bf:b1:e4:5f:6d:2b:bf:
90:c4:dc:a6:8e:f4:84:75:39:e3:eb:6b:85:5d:2d:
2b:62:f0:92:40:f5:41:19:6c:04:c4:a6:5a:cd:21:
7e:f8:e8:a0:de:fc:74:25:57:dc:4e:48:03:02:f2:
bd:4f:83:6a:90:c1:e0:f5:57:17:a9:d2:c3:44:06:
f6:6f:10:dc:84:2e:54:25:04:31:01:57:c5:f9:40:
7b:52:7a:a8:b4:e5:1f:d2:68:4b:2d:fe:73:b1:83:
ff:0f:45:08:78:c6:82:e0:d6:10:8e:93:20:5c:2d:
d4:da:4d:e1:59:aa:7c:f1:4a:c0:62:9b:2c:59:57:
7f:4f:93:e6:3e:76:80:d4:85:d6:e3:10:39:b3:a7:
03:f9:a5:da:4e:ea:58:80:23:20:11:3a:be:12:49:
0d:41:7b:28:45:d4:da:9d:09:53:04:d0:0e:45:43:
44:cb:19:31:34:c8:02:eb:00:1c:16:45:1f:59:1d:
10:68:ac:ea:8a:01:d6:a9:4d:e8:8c:b8:24:d2:0d:
b5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:56:AB:5D:7E:98:CA:C8:7C:DB:BB:E5:05:84:0B:A6:AE:8B:E8
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3a:82:9d:f1:df:5e:0a:90:a8:25:8e:f9:60:86:8c:f1:6e:
53:a1:ef:35:41:83:a4:f7:b2:67:7f:96:55:43:77:71:ec:1c:
b8:d9:66:1a:79:65:17:74:5f:47:0a:d3:d4:74:46:ae:95:95:
4e:af:77:74:31:f8:93:2d:e9:64:9c:e3:73:e0:67:db:1e:e1:
25:d1:60:90:02:48:1e:a6:0a:0c:9d:90:0d:bf:79:fa:8f:9f:
db:3d:6f:bc:db:b2:15:fa:b3:b0:e8:a4:34:4f:79:f2:ca:72:
5b:ef:e5:f8:9d:e6:37:4d:95:b8:b0:82:4d:43:5e:d3:1a:df:
5f:b6:2c:8b:4f:99:9a:16:3f:c5:16:33:ee:ed:a1:ee:af:ba:
ea:9e:c8:c1:c7:84:3a:bc:57:be:84:bb:1e:5a:d2:a6:a9:8b:
c7:ae:bc:d7:d6:ae:e2:22:c5:f6:46:8a:2f:0a:3b:75:66:fd:
68:22:ff:d5:8f:52:dd:81:9f:fc:a6:68:8f:f8:22:c9:0e:8c:
c8:5c:f1:ef:e9:10:a5:28:56:80:8d:15:09:0c:48:f3:76:d5:
d9:9d:71:51:d3:fc:f5:b3:7c:49:e5:8c:d4:12:d0:4d:bb:95:
87:df:0a:7f:ea:46:85:6e:88:c3:0a:a6:3d:17:6a:f2:f3:f3:
5e:90:8c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:14 2026 by rpki-client