This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
File: _tPwXKP9-ef5nGXMagpnJPWTGnA.mft (raw, json)
Hash identifier: ETUCWLNk62W0k4TpgCyL3KqhM1SUmCSpg/SL54qgHqU=
Subject key identifier: 66:F4:46:D7:F3:94:F2:10:2E:90:2A:37:61:4C:A2:BC:09:E4:4C:54
Authority key identifier: FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
Certificate issuer: /CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Certificate serial: 019C4321DD67D799A5C1A00506D1C4F8F4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
Manifest number: 180B
Signing time: Mon 09 Feb 2026 16:00:18 +0000
Manifest this update: Mon 09 Feb 2026 16:00:18 +0000
Manifest next update: Tue 10 Feb 2026 16:00:18 +0000
Files and hashes: 1: _tPwXKP9-ef5nGXMagpnJPWTGnA.crl (hash: t1sIhDGUnl6M8sEEhi5STuPaYPSthTsmh7oYMiGLDJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:dd:67:d7:99:a5:c1:a0:05:06:d1:c4:f8:f4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Validity
Not Before: Feb 9 16:00:18 2026 GMT
Not After : Feb 10 16:00:18 2026 GMT
Subject: CN=66f446d7f394f2102e902a37614ca2bc09e44c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:dc:0d:13:8d:92:69:22:a2:7b:24:90:bf:
28:99:c1:84:d4:8e:a6:39:5b:0d:d9:58:11:38:20:
08:23:5f:79:18:fa:3c:75:e3:8f:52:b2:1d:2b:d4:
6d:b4:aa:9e:10:b6:c3:a8:f1:7d:27:9a:37:82:16:
b8:55:91:d0:2d:92:70:52:2f:26:11:74:b1:94:14:
6a:38:45:f9:1b:52:e3:1f:56:0c:e9:b4:c3:2b:24:
e8:cd:21:f5:1a:fe:68:6b:79:7f:0c:6f:d3:dd:98:
47:e8:f1:d3:18:97:80:56:c3:41:19:a8:4b:57:e1:
22:76:67:c3:21:8b:68:c3:ef:4c:29:eb:a4:a9:c8:
ce:62:4c:a1:35:c2:b0:6b:7d:6b:5c:47:b6:2d:3a:
c3:03:e8:ed:4c:23:d1:4b:01:e9:b3:97:b5:5d:df:
85:77:6b:21:8a:27:84:76:ca:3e:7a:13:38:76:34:
8c:0c:2d:58:b9:bc:15:73:87:25:0e:2f:e8:c6:fd:
cc:56:04:bd:e1:0c:2d:32:22:98:fd:b8:84:ca:8c:
6f:93:02:67:ff:5f:4e:68:da:40:83:b5:ac:ef:c3:
0b:d1:96:9d:87:15:51:80:7f:57:f2:57:75:ce:ab:
d3:d3:34:03:44:6f:ec:77:4a:1f:5f:90:37:1e:77:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F4:46:D7:F3:94:F2:10:2E:90:2A:37:61:4C:A2:BC:09:E4:4C:54
X509v3 Authority Key Identifier:
keyid:FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:13:4f:82:e6:76:75:7d:c0:b6:4f:58:65:05:85:3f:fe:f8:
52:00:f7:ff:40:8d:b6:a7:10:ec:9b:1b:eb:62:5a:29:27:fd:
f3:91:76:04:5c:c4:8d:91:c7:12:84:b3:d2:2f:e7:c7:18:c9:
32:06:26:cb:74:1d:8a:39:45:ca:d1:ae:73:80:75:cf:e0:55:
94:df:b8:1a:5f:ca:f8:85:44:dc:4d:12:d2:51:e7:41:73:80:
62:85:e1:d2:3f:c2:d8:e4:91:4b:fa:95:84:b5:70:7a:4e:66:
36:45:d6:23:75:67:0a:aa:d0:e4:b9:a8:84:4e:bb:22:8d:ce:
74:4b:1a:7e:df:4c:08:d6:90:ad:87:7e:d7:65:74:e0:49:3b:
55:92:3b:c5:1e:d8:f7:21:a5:3d:9d:40:57:0c:64:ec:34:43:
8c:44:23:97:73:0a:9e:b6:92:18:62:ad:2d:d1:42:64:5d:c1:
e2:eb:75:63:c5:79:91:b0:f2:33:4d:2d:b4:3a:ec:5c:e1:26:
be:4d:cb:4f:a8:2f:c1:3d:74:71:6b:81:8e:8f:a5:7f:e2:43:
17:52:a1:a5:e1:c3:c3:4d:0b:cd:14:4b:54:76:9d:3f:9c:33:
85:b3:a3:76:1a:5a:8c:6c:9e:e7:cb:d1:c3:d4:99:7a:bd:e7:
a1:52:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:24 2026 by rpki-client