This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft
File: I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft (raw, json)
Hash identifier: damyVk3oUwl2//xrkbiE9t96YdjEIvUYstbSgO9yDmM=
Subject key identifier: 50:8C:E8:C9:05:1C:1F:19:3A:E4:2F:BA:D0:33:8A:55:E3:1E:C4:43
Authority key identifier: 23:F9:10:84:05:88:19:88:9A:4A:8F:32:EA:34:77:59:54:31:34:F0
Certificate issuer: /CN=23f91084058819889a4a8f32ea347759543134f0
Certificate serial: 019C41A1BA1528515F2938D7819BE8EA704A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_kQhAWIGYiaSo8y6jR3WVQxNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 09:00:43 +0000
Manifest this update: Mon 09 Feb 2026 09:00:43 +0000
Manifest next update: Tue 10 Feb 2026 09:00:43 +0000
Files and hashes: 1: I_kQhAWIGYiaSo8y6jR3WVQxNPA.crl (hash: ypjszqumwI7NJezDchYZt/gIS7zIaUN2Q1BObDnVlD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_kQhAWIGYiaSo8y6jR3WVQxNPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:ba:15:28:51:5f:29:38:d7:81:9b:e8:ea:70:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f91084058819889a4a8f32ea347759543134f0
Validity
Not Before: Feb 9 09:00:43 2026 GMT
Not After : Feb 10 09:00:43 2026 GMT
Subject: CN=508ce8c9051c1f193ae42fbad0338a55e31ec443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:02:68:d4:c8:a5:a4:f4:40:23:c7:32:a1:
2a:23:3e:9f:d2:1d:4c:89:70:c8:93:7c:9c:5d:ea:
8e:b0:ad:44:7a:7f:16:1b:89:df:8f:a7:77:e3:21:
f5:38:44:02:b0:b5:41:10:1e:69:9c:b1:52:d6:c5:
50:98:0f:6e:f0:2d:5f:3d:be:4e:a4:89:a8:0a:ad:
36:0d:e3:2e:20:c6:8a:b5:40:b7:2b:95:54:f8:56:
96:7e:8c:bb:0c:ad:7c:ff:d0:d7:f3:8e:af:99:05:
b3:d0:12:d1:d5:b1:b7:c1:35:57:c7:35:52:20:7c:
1e:25:af:45:67:10:a9:b6:1d:6d:c7:a9:a5:e1:6e:
67:1a:6a:60:ba:ad:2e:14:4a:e3:a4:d4:14:e1:4f:
4b:fd:30:f3:c8:80:f8:01:d2:d8:7d:73:f6:88:e7:
7f:71:af:ec:46:7f:c4:f9:d9:99:a4:52:22:71:a4:
d0:75:a1:43:ea:35:60:b6:dd:cb:48:aa:58:11:af:
92:c4:14:de:d2:85:09:d7:d9:92:ff:82:e9:b5:2d:
88:56:0d:9e:ee:2d:9d:21:41:3d:a8:17:9f:5e:0b:
fa:fc:14:17:23:b0:a6:54:b6:59:0c:20:76:d9:78:
1d:b2:9b:76:10:d6:75:80:66:d9:74:3a:46:7d:2b:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:E8:C9:05:1C:1F:19:3A:E4:2F:BA:D0:33:8A:55:E3:1E:C4:43
X509v3 Authority Key Identifier:
keyid:23:F9:10:84:05:88:19:88:9A:4A:8F:32:EA:34:77:59:54:31:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_kQhAWIGYiaSo8y6jR3WVQxNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e3:5e:80:bc:59:de:1b:ea:1e:e6:3e:b4:33:c5:b0:ee:65:
23:56:3a:b6:48:d5:5f:bd:69:19:d7:cc:4c:d6:56:68:fb:47:
af:26:4b:7a:e2:5a:69:f3:44:d5:b5:f7:05:21:bd:16:ab:65:
73:76:18:17:3a:01:60:26:71:f4:d1:52:db:e8:d8:5b:e2:dd:
9c:68:48:31:2e:5c:bc:d3:c2:37:cc:fd:b4:ac:13:0b:42:b1:
dc:93:c0:26:8f:a4:7d:8d:cc:50:cd:e3:9f:c8:2c:dc:29:9a:
6f:f0:d2:b2:a1:26:07:4c:b1:e3:49:c6:d6:97:76:96:ea:8a:
f1:ef:4c:13:d7:52:2e:1a:1c:b9:62:43:9f:5f:15:b7:cc:5a:
09:32:6d:50:6d:ba:7d:99:91:3a:8a:1a:26:89:f5:40:ca:29:
fc:1d:cd:84:78:1e:c7:33:c8:4d:84:f1:c6:9b:d2:65:10:51:
c2:68:c7:36:7f:29:b0:c3:bf:82:4a:5a:f4:2d:78:0f:82:5f:
39:59:21:29:64:74:fa:b2:6e:1f:02:9d:70:9e:7e:58:9a:53:
29:cd:7c:ea:df:a8:7f:b9:b1:03:e9:36:2f:4d:0c:fa:8b:ee:
9c:10:2b:1e:7f:58:ca:c2:98:2c:2f:f1:f4:78:87:10:59:53:
3c:7e:e7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:35 2026 by rpki-client