This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier: gutGkIIsjxxJY1orMkAD8t/4+dd4baPgIGH+KRrxt2U=
Subject key identifier: C8:18:6B:21:A3:07:17:5F:B0:FE:4B:3A:CE:08:8F:37:D0:9F:40:B9
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial: 019C4359343142D6A625AE32FFCA24AC04BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number: 07EA
Signing time: Mon 09 Feb 2026 17:00:45 +0000
Manifest this update: Mon 09 Feb 2026 17:00:45 +0000
Manifest next update: Tue 10 Feb 2026 17:00:45 +0000
Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: H94RZ2Yp2ZsEC4BR6c96Mlk7BffEID8Q9Xf/L0a8SDc=)
2: nCVjTQL_SSrsbw0G75uo5yZ-_v8.roa (hash: +GwSabbywoLmkIXJSWeaDqfIdmp99ZheKDOIGajjMZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:34:31:42:d6:a6:25:ae:32:ff:ca:24:ac:04:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Validity
Not Before: Feb 9 17:00:45 2026 GMT
Not After : Feb 10 17:00:45 2026 GMT
Subject: CN=c8186b21a307175fb0fe4b3ace088f37d09f40b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:d7:6b:59:ac:2d:94:39:7a:ed:d7:37:76:
c7:3d:91:2c:33:ac:eb:07:63:8a:c4:05:3c:06:44:
ca:02:79:07:08:2e:a5:0f:f9:2c:94:18:c3:6c:86:
36:bd:5f:08:84:bb:29:84:27:6d:8a:93:8c:82:4b:
e6:59:45:aa:97:33:ae:a5:63:f4:9e:3f:3b:2a:a0:
25:c8:f5:01:0a:8a:ed:e6:0b:5d:db:a0:e0:5b:cf:
03:92:5c:bf:b3:19:f3:a8:46:bd:b5:5e:88:ff:38:
9c:ee:23:62:02:6f:19:68:1e:a5:1f:1a:3e:d4:07:
be:a5:ca:0b:ba:be:15:48:6a:be:3f:42:7f:ae:95:
b4:73:10:f5:a1:f0:19:49:73:a5:8b:25:76:85:a8:
f8:b6:9e:07:65:83:84:9f:57:42:68:ab:38:3e:72:
af:18:2a:41:9c:c6:c2:51:9c:68:52:e5:53:c3:51:
01:23:5a:e1:52:49:6c:3e:c8:90:d7:d3:60:59:75:
30:8f:3f:5d:fb:bb:44:6a:de:f0:92:2d:40:08:c7:
50:7f:82:2d:1b:1b:d4:b4:56:a7:39:6e:e5:f9:16:
d8:ee:4e:fd:f8:85:21:78:72:0a:aa:64:22:33:76:
74:80:06:18:06:be:a9:ea:d6:87:1d:90:91:01:9b:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:18:6B:21:A3:07:17:5F:B0:FE:4B:3A:CE:08:8F:37:D0:9F:40:B9
X509v3 Authority Key Identifier:
keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b2:ba:25:7c:f7:b3:cf:97:2d:af:e4:87:de:e8:05:6f:98:
a7:35:ea:70:37:cf:92:f9:6e:ac:53:35:82:bd:3c:c8:5f:2d:
23:5f:c8:4f:f3:6d:ac:65:27:5c:40:d6:ef:a1:af:50:28:f2:
d3:ec:3f:ea:0b:e1:a7:84:22:d3:f8:f6:29:8d:0a:f3:c9:14:
19:7a:01:f4:19:6a:ba:64:70:95:ed:e1:12:40:f2:0f:ab:b6:
38:5c:2b:f6:49:a6:d9:89:6b:d6:34:0d:2b:2f:2f:ff:73:d1:
5e:10:08:e9:47:4b:b4:3a:69:89:d4:21:fd:7c:a4:f7:8b:a6:
f9:f6:94:23:54:a5:5b:dc:8f:82:66:57:bb:3f:e2:aa:36:9a:
9d:da:68:9e:16:75:63:91:60:52:ca:d1:60:5f:b1:a4:9c:6f:
41:a5:c1:6b:57:bb:ac:68:e9:93:f9:88:43:17:9d:25:be:ea:
ae:87:c6:3e:67:58:b8:a8:5b:0f:4b:cb:53:98:08:c8:19:cd:
72:31:9b:8b:41:c5:f0:0e:40:8b:89:0b:81:eb:05:e0:5b:f7:
66:fa:c3:0f:95:a4:46:4a:7e:4e:4b:cd:ab:89:03:dd:1b:b8:
37:87:a4:e2:7c:89:35:8e:61:af:bd:6e:38:bc:92:a4:e5:a2:
e2:50:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:12 2026 by rpki-client