This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
File: RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft (raw, json)
Hash identifier: 560iUO1MeuaHhucDsUawyAOz78f5GTVkGxBajQaFd68=
Subject key identifier: D2:4D:78:BF:75:69:22:7F:3E:9E:F8:26:92:4C:69:49:E9:89:69:8D
Authority key identifier: 44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
Certificate issuer: /CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Certificate serial: 019C42468E9775B0DA37891CC4A64DAE9EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
Manifest number: 026A
Signing time: Mon 09 Feb 2026 12:00:46 +0000
Manifest this update: Mon 09 Feb 2026 12:00:46 +0000
Manifest next update: Tue 10 Feb 2026 12:00:46 +0000
Files and hashes: 1: RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl (hash: 2OeZpUqF9usbIhI3D8gN36swe6KuL/Ib7RVjro0rHDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:8e:97:75:b0:da:37:89:1c:c4:a6:4d:ae:9e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Validity
Not Before: Feb 9 12:00:46 2026 GMT
Not After : Feb 10 12:00:46 2026 GMT
Subject: CN=d24d78bf7569227f3e9ef826924c6949e989698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:a9:2a:62:32:de:cf:f1:6c:fa:3e:c0:1c:
43:c4:e7:63:20:71:86:60:bd:71:08:5f:0a:36:2f:
99:91:3f:e3:31:3c:c1:1a:66:af:ed:5e:8a:3e:6b:
e8:23:1d:a3:f6:5b:74:f4:c8:86:6c:de:83:34:72:
eb:8c:45:d0:a1:0c:2a:de:ee:00:ce:65:4b:f9:15:
2f:5a:e5:f7:ad:e0:9e:0a:9c:6b:b8:d3:b6:57:41:
3d:d4:21:0e:bd:4b:2b:91:39:e1:93:00:af:c2:8d:
90:c8:3d:d3:fd:52:df:6d:d7:51:72:a0:80:19:ed:
17:67:9d:34:a1:13:a8:ea:47:99:9b:40:b3:70:87:
cf:1c:46:10:68:73:c8:55:fc:4e:93:07:18:66:ff:
cf:6c:91:73:08:ae:bd:ec:54:0c:6f:3a:f1:ee:70:
ca:84:b6:56:3d:ab:25:4c:05:be:07:88:88:97:3b:
cd:99:6c:d3:98:d8:2a:f0:6b:61:74:8a:18:21:f4:
6b:41:08:39:77:08:2b:e7:0c:46:f7:c9:57:7e:7d:
80:37:16:e3:19:b0:43:ed:c0:14:20:8e:7c:f9:0a:
18:aa:37:a2:4e:14:52:56:65:78:a2:10:aa:02:3c:
66:6d:c7:19:56:2a:3b:2a:e3:a0:16:c6:6b:ab:4b:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4D:78:BF:75:69:22:7F:3E:9E:F8:26:92:4C:69:49:E9:89:69:8D
X509v3 Authority Key Identifier:
keyid:44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:55:31:b8:52:67:94:89:a3:44:d2:e7:ca:4b:e7:a4:65:db:
33:72:41:04:ac:d6:0d:65:74:33:8b:66:3e:af:b1:ff:2e:63:
7c:8b:ac:ba:3e:88:e6:e0:5d:bf:35:72:c1:8d:15:f3:e2:2e:
5b:a7:3c:ec:01:cd:e9:c3:c7:f5:79:46:06:22:14:50:89:e9:
c1:57:c6:20:a8:0d:b2:d2:e7:56:6c:ff:1a:95:db:07:a8:46:
2e:ee:22:33:4c:8b:a8:d4:9b:5b:f9:e6:30:9a:38:5d:21:76:
f3:bf:9e:c3:8b:d3:45:ad:2c:b5:3c:b9:e6:41:42:8f:23:96:
88:e4:1f:b5:45:6e:f3:c7:cb:a0:ea:9d:77:b9:29:ea:b3:48:
a3:5b:ad:e0:bb:4d:4c:1c:10:ef:75:ba:b2:76:ad:3c:80:f8:
00:45:dd:de:a3:eb:fc:63:19:f8:b2:de:fe:59:eb:1c:ea:47:
97:8b:7d:80:86:19:a0:07:bc:2a:36:7a:20:26:95:98:7f:fc:
66:0c:64:72:a5:ce:85:cf:ec:1d:6b:6e:d2:36:df:9a:bd:c1:
ab:c5:03:01:fa:84:32:09:f0:24:99:ae:c0:76:68:c5:9d:8d:
59:6e:3e:58:49:21:f6:85:ec:74:b3:90:bd:fa:b7:7d:4a:01:
08:c3:3a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:17 2026 by rpki-client