This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File: 10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier: 9ZMBRZXYWjdO4HepiYprlg+dU7bekrodIluy6fXdx30=
Subject key identifier: 75:F0:2D:7E:3D:42:27:BD:53:01:8E:C7:EC:C9:D4:E2:52:07:E9:01
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial: 019C42EB9B03DA8DB9D1F5930D8092902094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 15:01:02 +0000
Manifest this update: Mon 09 Feb 2026 15:01:02 +0000
Manifest next update: Tue 10 Feb 2026 15:01:02 +0000
Files and hashes: 1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: jBV3IWi5QC81yYstggzN1jBNSlCsvLNXb89l4Zg9r18=)
2: bxelCDFcvnlj3q_RHWvXRa9LBvo.roa (hash: 3ikPYI75wofgR7u+U2mor2EPydTGzEdXUY4L1ZgdpHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:9b:03:da:8d:b9:d1:f5:93:0d:80:92:90:20:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Validity
Not Before: Feb 9 15:01:02 2026 GMT
Not After : Feb 10 15:01:02 2026 GMT
Subject: CN=75f02d7e3d4227bd53018ec7ecc9d4e25207e901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:1c:6a:9b:9d:11:77:9c:ce:5e:e5:03:03:
4e:48:92:fe:0e:c9:33:95:59:1a:0e:13:a3:8b:b1:
66:bb:fe:91:9c:c8:05:5e:b5:38:a6:9e:cd:eb:4c:
15:4c:98:40:1d:6f:49:51:ac:f4:7e:30:d5:30:b2:
b3:08:cf:b0:7c:38:f2:65:a9:87:dd:e9:dd:6f:e7:
62:16:e6:9a:1e:8d:05:b6:67:ec:c1:a2:ab:b7:fe:
bf:86:4f:25:57:5c:7c:4c:a4:f3:f2:11:43:8a:8d:
68:56:ee:95:f2:12:21:56:5b:3f:08:a4:2e:ba:23:
93:ac:63:72:74:92:5d:91:ab:30:32:c2:8b:a2:c1:
3a:f0:ed:8d:ae:36:ce:6d:d7:82:18:aa:92:ce:84:
7c:8d:6f:35:65:dd:ff:1c:4c:59:38:6e:1c:74:29:
65:63:74:27:61:fd:92:57:77:8b:e1:1d:ac:6c:f3:
79:6c:b1:18:af:01:aa:03:81:70:92:3d:e7:fc:39:
10:f3:9e:99:1c:2f:1b:31:d8:37:b5:47:10:ba:c5:
6d:74:e0:21:ce:22:fb:dc:9d:48:2c:18:e8:ac:d4:
1c:73:9b:64:f7:a7:92:56:a4:a0:0e:88:b9:8c:5a:
66:ec:f1:f1:67:de:fd:42:fb:29:62:2c:d5:5c:d1:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F0:2D:7E:3D:42:27:BD:53:01:8E:C7:EC:C9:D4:E2:52:07:E9:01
X509v3 Authority Key Identifier:
keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:25:61:ed:c8:77:bb:cc:e9:47:12:5c:16:0a:3b:e9:37:cc:
17:c1:a1:69:e9:37:83:b1:fd:e3:92:4c:c1:dd:47:25:42:c2:
90:72:44:2a:82:be:26:6d:6a:df:89:df:22:36:d4:79:7f:f3:
21:85:d3:9e:ae:a5:c9:34:30:be:0f:1a:0e:b7:2a:1b:ae:1a:
76:4f:39:8f:af:34:7f:a5:c9:34:8e:46:5e:c9:68:39:78:df:
4e:12:9b:ec:fa:82:f4:42:14:70:b3:6c:52:a2:a6:52:1d:3e:
8e:bd:60:e1:f4:2c:5d:f3:b8:9f:c2:c9:06:fa:04:98:d2:c7:
45:f5:b6:8f:aa:05:0b:da:cd:b0:f4:e2:06:22:8f:32:c8:0b:
64:6f:85:59:b3:97:bb:d4:2f:1b:d7:84:25:8d:5e:0f:5e:44:
ea:7c:a6:4f:b8:6b:42:8a:bf:c4:b7:16:bb:bd:96:df:d0:98:
ac:ca:e6:35:ba:bb:ca:17:38:98:d2:07:60:3b:2c:80:fd:18:
3f:76:83:38:36:4d:45:0f:fa:fd:e4:e2:00:ec:55:f4:e3:91:
16:54:71:30:4e:04:be:68:40:56:35:34:60:9c:3c:91:b9:7a:
ee:b9:54:2a:b8:48:ad:28:70:3e:c2:c6:23:fd:ce:0d:a7:67:
b4:c8:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:09 2026 by rpki-client