This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier: F3UskVJTx7N66qdDaG6Y1QO519qHMtPhspJ5+FA7q6M=
Subject key identifier: 69:25:48:B5:62:BD:D9:7D:49:40:BD:BA:9A:DD:01:B7:BE:83:AF:5E
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial: 019C44A29A29993D4560EE20AD533DE3FCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number: 1324
Signing time: Mon 09 Feb 2026 23:00:32 +0000
Manifest this update: Mon 09 Feb 2026 23:00:32 +0000
Manifest next update: Tue 10 Feb 2026 23:00:32 +0000
Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: l2l6qo6rbsvFWysY3GOuTvYMC9ANzVggOpJS8Cls/cw=)
2: 8JzTv1sEWJzgKBh6hP5zrOespe0.roa (hash: nGLxJDi43LNGHyCGN8ILdukMd6pDlSBvmxCeyBz73IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:9a:29:99:3d:45:60:ee:20:ad:53:3d:e3:fc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
Validity
Not Before: Feb 9 23:00:32 2026 GMT
Not After : Feb 10 23:00:32 2026 GMT
Subject: CN=692548b562bdd97d4940bdba9add01b7be83af5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:47:ed:8c:13:6b:3c:da:64:28:26:9b:86:
6b:28:38:83:98:b3:8d:c4:3f:bb:7c:ae:57:eb:2f:
99:ac:86:da:0c:bd:37:b3:ca:e7:2d:a8:05:14:fa:
20:24:cb:57:2e:d2:5d:8c:31:1d:14:28:23:b2:df:
18:bc:65:8b:83:00:3d:29:f1:39:5f:65:f5:f9:ad:
ba:4f:a3:bf:c1:79:2a:d4:d5:81:b6:70:8d:bc:58:
4d:d9:51:81:68:5b:e2:a2:03:1b:00:06:70:1d:fb:
bd:af:6a:4d:6a:9c:95:77:87:b7:44:0e:eb:8e:39:
b7:3b:6c:25:f7:6c:2a:b0:3d:c5:04:4e:50:84:91:
d6:c2:f8:22:1d:ae:f9:65:0d:56:77:a0:d8:52:b1:
49:67:b4:fd:96:1f:b5:22:00:71:1a:a2:b5:b2:d0:
e7:af:90:19:c5:e7:5d:40:6d:93:7d:a3:22:63:11:
4f:53:b2:b3:ef:39:7a:62:ab:91:38:26:b6:c5:ab:
e5:e5:e6:75:91:31:1a:ac:6e:d3:ec:31:31:d2:a5:
9a:ac:1f:3a:59:4d:cb:1d:1c:e4:b0:eb:d2:05:79:
fe:ca:9f:4d:4c:2a:f5:61:34:86:bc:16:6d:cd:1a:
3b:2c:9a:90:15:17:ca:17:07:32:bf:30:1c:74:a8:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:25:48:B5:62:BD:D9:7D:49:40:BD:BA:9A:DD:01:B7:BE:83:AF:5E
X509v3 Authority Key Identifier:
keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:75:a9:af:62:14:e6:02:6e:4c:c8:79:3f:1e:e4:49:95:0d:
67:af:3c:1d:df:c5:44:58:43:ab:51:dc:b3:0b:54:83:80:45:
84:c0:50:1f:0c:d9:99:39:57:22:1f:e5:49:69:44:a5:29:38:
cc:4c:28:ef:99:fc:df:ef:60:aa:42:c7:c6:b8:7d:37:f7:d0:
ca:f9:57:fd:02:0b:24:89:54:1e:22:6a:5e:5c:e8:35:86:be:
87:d9:44:7d:76:bc:8e:02:78:c3:01:64:1f:f2:fc:65:36:98:
17:74:7d:12:aa:66:11:c9:c6:cb:3c:1b:49:dd:ec:1b:65:d6:
bd:73:44:75:06:f0:d0:62:23:58:94:12:24:9b:6f:b8:13:03:
77:bb:af:6c:56:39:c1:37:6a:af:a3:19:cb:2a:62:8d:ae:74:
91:74:c4:f8:86:43:8f:e5:52:6e:df:db:9e:e0:ee:be:81:63:
3f:17:67:6a:d2:29:ed:c9:5c:ac:dd:c1:52:b7:a0:df:56:ed:
e5:f7:af:b8:05:71:bf:3e:8d:be:9e:b8:fa:50:5a:eb:6d:34:
03:d2:71:1a:6e:10:b2:ee:59:e8:09:fb:f9:46:3e:29:d1:f6:
40:c6:53:59:93:6c:cc:11:41:a9:5a:b2:1a:99:49:09:07:9c:
c2:a6:e7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:58 2026 by rpki-client