This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File: DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier: iG9dRYdv3UXf17+8ohIIGnA6cMWrV7mN/6cqcJCB51g=
Subject key identifier: 4B:8D:D5:FE:E2:5D:26:7E:9C:9B:FC:7C:BE:5E:B4:85:FD:53:74:5B
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer: /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial: 019C427D11E32456227CB0BBF4E67CC58D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number: 0A37
Signing time: Mon 09 Feb 2026 13:00:18 +0000
Manifest this update: Mon 09 Feb 2026 13:00:18 +0000
Manifest next update: Tue 10 Feb 2026 13:00:18 +0000
Files and hashes: 1: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: EJZO1XvhrG+Dyunuwt61qcoaHMP61yYvWKDioU1xyCE=)
2: n3TEcj2cHwyJM-ltU6Fz4mQkgOk.roa (hash: qzbLDwyzPoZSNZu2f+YOUcC/z1BsSoehvOpIyMT5K6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:11:e3:24:56:22:7c:b0:bb:f4:e6:7c:c5:8d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Validity
Not Before: Feb 9 13:00:18 2026 GMT
Not After : Feb 10 13:00:18 2026 GMT
Subject: CN=4b8dd5fee25d267e9c9bfc7cbe5eb485fd53745b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:6e:9f:21:40:15:80:24:fa:96:67:8e:f6:
50:f3:7e:4c:d0:ad:4d:2e:50:04:b6:42:91:7e:83:
fc:16:84:f0:37:13:a3:ba:e9:46:97:32:c4:14:a3:
43:75:11:12:74:e7:86:1d:db:af:72:ee:2c:df:60:
70:7a:92:29:9f:b0:9b:fd:6a:e6:42:70:9b:f3:04:
40:51:b7:00:5f:04:4a:5d:79:b6:61:7a:75:ba:3b:
17:5e:68:d5:96:4d:f0:f9:35:18:dc:b9:0b:e0:88:
ee:c3:20:2a:60:56:81:73:c5:08:04:af:d8:2c:e3:
f7:0b:47:cb:5a:f4:da:19:8a:82:2d:f7:7c:1c:49:
12:78:00:5c:73:13:4d:21:6f:fb:47:b3:f0:a9:97:
dd:9c:b3:aa:44:db:7b:bd:97:3e:71:66:a3:2e:f8:
87:76:82:f2:6d:c8:44:17:24:22:ea:25:cc:e9:24:
0d:8e:69:ea:1f:32:50:58:00:4d:2d:9e:9a:0d:25:
51:48:fc:2b:a3:9e:8e:c2:2d:7c:7e:82:51:3f:8a:
26:b5:68:ba:89:76:3a:05:56:16:11:27:ec:1b:33:
22:27:39:70:69:e0:db:aa:94:dc:0e:9b:27:42:50:
44:80:d5:28:db:0e:fb:92:b3:76:dc:6b:60:f3:99:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:D5:FE:E2:5D:26:7E:9C:9B:FC:7C:BE:5E:B4:85:FD:53:74:5B
X509v3 Authority Key Identifier:
keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8c:37:a2:92:ed:6f:92:1f:cd:58:05:e9:a9:93:a9:34:35:
80:64:ef:4b:74:84:0a:3f:1f:24:8b:82:c8:1a:4a:6f:53:a5:
3d:1c:30:cf:1c:c7:38:7c:ff:c2:72:04:17:ab:db:a6:7a:06:
d1:7d:90:f4:98:af:92:0d:5d:6e:d7:41:fe:c5:54:18:9d:7d:
4f:bf:c3:24:2d:e3:5a:8f:3f:62:8d:7f:56:e0:8c:e8:ef:ec:
49:74:71:d0:96:82:fa:cd:1b:7c:8d:29:8a:13:59:67:18:7e:
6a:72:13:df:f2:a5:bc:83:76:db:a7:45:29:c7:2f:b4:e6:44:
66:ea:6a:b7:46:1c:36:f3:63:da:70:b4:c4:bb:2f:dd:17:13:
da:ee:4a:be:61:82:b5:53:b3:ad:52:d6:3f:4d:85:b4:43:14:
b6:60:26:66:3d:d5:16:4f:fb:fa:d1:26:fe:b2:54:e4:12:94:
37:ee:54:41:0b:d8:97:48:97:01:43:6d:23:77:da:58:68:60:
02:fc:14:4c:3b:a5:65:fb:60:7d:ea:b3:9d:1a:c2:c3:7f:c7:
76:b2:54:17:8a:5a:d1:a2:6a:56:be:a7:be:c4:3d:72:6c:76:
5a:c0:4e:80:1b:d7:aa:50:de:9b:6f:10:36:00:6d:fb:86:3e:
ff:01:f2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:51 2026 by rpki-client