This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier: tYoA8YUVDmac62SX07vSlwj377yBK8j8TuBEkiM/rAU=
Subject key identifier: 5B:58:3C:3B:C2:D0:0C:FC:0F:AD:00:78:84:44:43:12:46:A0:3A:6A
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial: 019C4547944326873EE18DD957850163A270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number: 07EB
Signing time: Tue 10 Feb 2026 02:00:44 +0000
Manifest this update: Tue 10 Feb 2026 02:00:44 +0000
Manifest next update: Wed 11 Feb 2026 02:00:44 +0000
Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: umpqKf1Xbcis1yQBigiGI2G1sZd4EU3fiUOFhrANE4Y=)
2: nCVjTQL_SSrsbw0G75uo5yZ-_v8.roa (hash: +GwSabbywoLmkIXJSWeaDqfIdmp99ZheKDOIGajjMZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:47:94:43:26:87:3e:e1:8d:d9:57:85:01:63:a2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Validity
Not Before: Feb 10 02:00:44 2026 GMT
Not After : Feb 11 02:00:44 2026 GMT
Subject: CN=5b583c3bc2d00cfc0fad00788444431246a03a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:3b:2c:b5:fc:c3:a3:28:be:b1:c1:0b:7a:
0b:a8:85:0c:4b:b0:4c:f7:1a:ad:aa:5a:f8:c2:f9:
7c:bd:8d:a4:75:a6:b2:ae:42:f8:41:71:74:08:47:
d9:4a:d1:f4:6b:7a:72:f9:de:88:33:2b:5e:fd:9a:
01:d0:77:73:22:32:a1:58:40:a0:24:97:b9:20:56:
4c:2a:f7:0c:97:12:b8:4f:f0:e7:c9:4c:0d:17:5b:
a7:31:2e:a0:d5:df:73:ca:49:fa:59:a3:99:3f:a5:
de:8d:1d:54:db:71:4c:7b:b5:25:53:e3:af:98:0e:
64:21:97:16:9b:bf:af:b7:1e:1b:c9:3d:14:bf:67:
fc:ae:cc:8a:e5:de:45:27:b0:aa:d8:c1:de:da:59:
f6:5f:48:29:a7:c0:60:5c:be:c5:0b:1e:0c:6f:bb:
5c:b3:d3:3f:83:77:f0:50:87:9f:1e:38:1d:e9:3f:
8f:8b:48:36:eb:2b:dc:41:ab:44:b7:d8:b0:b1:91:
29:8c:0f:5c:6c:d7:9a:4c:95:0e:8b:07:dc:f2:dd:
c9:82:b7:92:63:dc:c6:69:ff:85:3f:57:37:7c:0f:
8f:f3:68:37:32:5c:19:02:c0:f9:78:c9:6a:45:f3:
64:42:ce:b4:0e:6f:b2:f9:19:2d:a2:b8:0d:ce:8a:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:58:3C:3B:C2:D0:0C:FC:0F:AD:00:78:84:44:43:12:46:A0:3A:6A
X509v3 Authority Key Identifier:
keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e5:e2:e0:de:ab:84:e9:10:08:30:f3:35:d2:85:ba:a3:b4:
d6:d5:a5:fb:b7:af:0d:12:86:3d:dd:aa:2e:2f:aa:64:cb:5f:
f0:6d:64:13:0e:d2:87:7c:37:26:1c:88:89:89:34:94:9c:f3:
94:58:df:09:b1:89:8a:7b:96:69:61:eb:cc:aa:8e:2f:05:1a:
55:eb:58:eb:d9:6c:96:48:1a:28:f8:5f:f1:89:d8:36:84:6b:
83:6d:28:34:98:86:c8:22:88:fe:ea:25:dd:a2:47:ea:7e:20:
cf:27:f7:9f:69:1d:9e:d5:15:b8:f8:fa:f1:7a:1b:14:f5:af:
95:fa:e0:ab:78:80:27:e5:3e:0c:db:b7:ce:4a:7c:b3:a3:63:
58:20:a0:d2:28:34:35:ab:0b:ad:7b:31:6f:cd:e4:89:5a:42:
dc:af:fc:16:db:c2:5f:a1:1b:3e:ca:47:4f:be:2a:94:d3:39:
ae:f1:4e:02:91:36:81:31:67:95:ef:ce:d0:1d:ff:69:14:db:
b1:2b:de:58:22:d7:0f:57:93:53:10:b4:1c:e3:45:90:51:2f:
4d:43:48:03:0d:84:c6:7d:97:e1:67:38:5e:dd:fe:16:40:e3:
f4:e1:de:cc:31:54:67:5b:03:bc:e0:35:b6:41:76:39:9b:9a:
02:ac:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 05:50:43 2026 by rpki-client