This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: vGNPeW21DN1lnnlWug9c2NYeGsez3bezLrDakZLXg2Y=
Subject key identifier: 0A:68:93:A0:B7:32:B2:9B:AC:E5:3C:CB:C6:58:C2:BC:C5:5A:D2:B8
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 019C42EB97DC84B69E06555D7822AF00A453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 16C6
Signing time: Mon 09 Feb 2026 15:01:01 +0000
Manifest this update: Mon 09 Feb 2026 15:01:01 +0000
Manifest next update: Tue 10 Feb 2026 15:01:01 +0000
Files and hashes: 1: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: XZsnutSGRqaQunorgGQlgPVSCkWmrWuNP8ZiyC+HnhY=)
2: y8suQO3vpggb8SQxYQwAFafoDS8.roa (hash: EDpf6LTQFooyZUqxXXBv0qWQ0K8M8GX1XuFaFPpkkiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:97:dc:84:b6:9e:06:55:5d:78:22:af:00:a4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Feb 9 15:01:01 2026 GMT
Not After : Feb 10 15:01:01 2026 GMT
Subject: CN=0a6893a0b732b29bace53ccbc658c2bcc55ad2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:0d:9e:4e:13:7f:9f:9c:42:16:2c:a4:fb:
03:6e:cf:44:11:14:4d:e8:20:d5:9e:0b:71:07:25:
d6:e2:cc:b8:b4:fb:5f:a0:f8:b8:da:77:81:31:b0:
67:08:50:c0:13:8e:22:58:ed:77:02:a8:91:b4:15:
0d:48:5f:42:05:d6:1c:39:65:01:bf:f5:cb:2e:4c:
c9:96:ac:8e:75:7f:a3:24:95:b6:d9:3d:90:01:85:
30:34:44:d4:a5:96:3d:bc:50:d1:8d:1f:93:56:a3:
80:84:ec:35:71:5b:47:84:48:5e:7c:1a:14:eb:a1:
c5:f6:56:55:98:90:26:18:4c:52:59:7a:4c:08:80:
da:14:5d:38:56:96:62:43:c5:e5:9d:b0:ba:fc:1e:
6c:cb:a8:ae:43:9b:58:17:43:3f:73:9e:08:da:9c:
24:b0:18:88:54:5c:7a:ca:af:21:7e:ac:10:a9:21:
48:ca:55:1b:9b:bf:9c:60:98:db:3c:4d:a7:d6:c6:
4a:f7:1f:37:25:d2:cd:83:9d:9f:39:f3:f7:4b:bb:
a4:4d:f5:6e:f7:62:da:d5:28:27:55:03:82:0d:c6:
cc:ca:8b:e2:04:0f:3d:a8:88:65:4c:b5:9d:52:6a:
07:59:af:44:f2:bf:4c:03:fa:7c:3a:5f:95:62:be:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:68:93:A0:B7:32:B2:9B:AC:E5:3C:CB:C6:58:C2:BC:C5:5A:D2:B8
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:55:f4:b0:6b:83:6d:99:f8:11:7b:cc:a9:de:39:3e:38:e6:
52:36:82:20:17:87:9d:0a:b7:ca:ab:40:d5:f2:09:4d:94:c2:
a4:fd:fe:76:12:91:3b:c8:48:78:e5:e5:6f:67:d2:39:07:92:
d3:b0:9b:68:0b:05:1e:e5:82:d4:05:29:2b:4e:88:8c:bb:0b:
ea:e0:76:79:a9:b6:e2:83:5b:8b:bf:14:2f:48:99:4e:31:da:
bc:08:98:cc:67:db:fa:df:31:57:ce:b0:ac:ec:50:89:fd:2c:
15:14:d9:99:f2:0f:18:f6:ab:d0:99:26:7b:b8:0f:41:11:c3:
d0:69:14:3f:1e:e8:84:50:62:2b:c0:bd:45:d0:69:d3:64:ff:
8f:9f:a2:d8:b2:1d:e4:cc:e5:13:ac:98:31:80:fc:eb:15:39:
ae:1c:a5:86:fc:6f:e4:0f:fa:eb:62:44:c5:54:54:3f:28:81:
9e:4c:88:e5:7b:03:21:19:36:5e:8d:b2:4e:5f:9b:e8:dd:ca:
6b:2d:05:d2:a3:05:90:5e:41:b3:c8:fc:1f:40:b5:dc:bb:52:
d8:fb:c5:e5:fb:72:76:59:18:a6:4e:93:26:b3:37:5a:25:2c:
52:18:e2:1f:12:79:9a:bc:8d:b0:86:d0:7c:b9:76:77:27:81:
68:77:02:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC65fchLaeBlVdeCKvAKRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmMyZGE0ZmFjNzdiYmFhZDI5YTU5ODZiNDEwN2Y1MzFl
ZDJlM2UwHhcNMjYwMjA5MTUwMTAxWhcNMjYwMjEwMTUwMTAxWjAzMTEwLwYDVQQD
EygwYTY4OTNhMGI3MzJiMjliYWNlNTNjY2JjNjU4YzJiY2M1NWFkMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5gNnk4Tf5+cQhYspPsDbs9EERRN
6CDVngtxByXW4sy4tPtfoPi42neBMbBnCFDAE44iWO13AqiRtBUNSF9CBdYcOWUB
v/XLLkzJlqyOdX+jJJW22T2QAYUwNETUpZY9vFDRjR+TVqOAhOw1cVtHhEhefBoU
66HF9lZVmJAmGExSWXpMCIDaFF04VpZiQ8XlnbC6/B5sy6iuQ5tYF0M/c54I2pwk
sBiIVFx6yq8hfqwQqSFIylUbm7+cYJjbPE2n1sZK9x83JdLNg52fOfP3S7ukTfVu
92La1SgnVQOCDcbMyoviBA89qIhlTLWdUmoHWa9E8r9MA/p8Ol+VYr5I2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApok6C3MrKbrOU8y8ZYwrzFWtK4MB8GA1UdIwQY
MBaAFKy8LaT6x3u6rSmlmGtBB/Ux7S4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEt
ZTkyMzBlNTg4NjI2LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEtZTkyMzBlNTg4NjI2
LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlX0sGuD
bZn4EXvMqd45PjjmUjaCIBeHnQq3yqtA1fIJTZTCpP3+dhKRO8hIeOXlb2fSOQeS
07CbaAsFHuWC1AUpK06IjLsL6uB2eam24oNbi78UL0iZTjHavAiYzGfb+t8xV86w
rOxQif0sFRTZmfIPGPar0Jkme7gPQRHD0GkUPx7ohFBiK8C9RdBp02T/j5+i2LId
5MzlE6yYMYD86xU5rhylhvxv5A/662JExVRUPyiBnkyI5XsDIRk2Xo2yTl+b6N3K
ay0F0qMFkF5Bs8j8H0C13LtS2PvF5ftydlkYpk6TJrM3WiUsUhjiHxJ5mryNsIbQ
fLl2dyeBaHcCFA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:55 2026 by rpki-client