This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier: ODdcUB1QXXN6ui0VR9zrHqXdNh8zgf+CY1w8TyEnXEc=
Subject key identifier: 3E:A3:D0:F2:81:49:6F:38:AA:E2:70:C6:B8:90:E3:70:CB:F9:52:90
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial: 019C42EB150D6F9E2F04F941F0517F74E4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 15:00:28 +0000
Manifest this update: Mon 09 Feb 2026 15:00:28 +0000
Manifest next update: Tue 10 Feb 2026 15:00:28 +0000
Files and hashes: 1: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: huZED9jheLN50tN6jaNSmATQ4MJ5Aeq0+5GyGrFQCo0=)
2: heI6_nt9P_HwBy_T8oGJnHTTh5g.roa (hash: u5XqVFg6oCgpt4OHeWuXYXSoPOakGmDYPh6j3OSR1w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:15:0d:6f:9e:2f:04:f9:41:f0:51:7f:74:e4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Validity
Not Before: Feb 9 15:00:28 2026 GMT
Not After : Feb 10 15:00:28 2026 GMT
Subject: CN=3ea3d0f281496f38aae270c6b890e370cbf95290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:9a:03:45:a9:1e:30:ec:ad:a5:c7:bb:07:
9b:ff:48:5f:53:02:af:a5:f1:97:f0:50:86:fa:33:
b5:c1:a5:ba:ac:95:30:71:e0:ae:2c:26:4d:30:5f:
58:91:68:da:eb:dc:6e:f1:1e:aa:80:84:b3:82:17:
37:b5:bd:9b:2a:81:50:f0:4f:d3:0e:05:5b:35:7e:
e9:eb:6d:e0:ff:89:14:29:41:0d:6d:fc:91:30:dd:
22:b4:ca:8c:16:18:58:73:37:68:be:07:d8:e8:89:
7a:0c:e7:48:5b:a4:d7:43:ef:eb:93:70:4d:53:20:
e1:af:d5:44:47:28:50:02:5e:48:d0:45:05:c9:70:
88:a0:f3:58:42:30:38:6f:a7:18:b9:a8:e2:4b:b1:
ed:69:f1:17:82:6f:3e:e4:1e:87:4e:8e:c8:6a:c8:
aa:c7:8b:df:df:a3:6f:76:45:b7:cd:54:3f:d3:9a:
48:45:7e:e0:68:87:bc:45:80:f9:1f:29:14:9f:f5:
50:86:47:e0:1f:66:fe:04:bc:2b:4a:09:b0:71:30:
eb:f4:78:3a:15:0d:ac:5e:e1:34:98:20:c1:90:c1:
45:e7:0b:11:59:3f:4c:ff:53:a0:a6:7a:3a:1e:1b:
e3:39:3e:26:36:8a:55:f5:30:90:b6:bb:c7:8d:41:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A3:D0:F2:81:49:6F:38:AA:E2:70:C6:B8:90:E3:70:CB:F9:52:90
X509v3 Authority Key Identifier:
keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f9:0f:77:8b:c4:32:31:2f:f2:b7:4d:7b:11:bc:b9:7a:c1:
a3:46:ab:49:e0:1a:b5:f1:09:d8:ad:f8:57:ce:c9:99:0d:77:
89:e8:cf:f9:56:7b:a6:b1:7e:6a:24:97:6c:46:17:72:39:74:
fa:41:fe:ef:36:9e:91:e8:bf:a5:57:9c:d8:85:48:0a:2a:dc:
22:6a:e8:44:49:05:e1:17:91:ac:c8:b9:75:ac:3b:dd:35:27:
b3:5f:00:79:8f:49:16:cc:d9:66:5e:f6:5a:7d:d7:69:d5:86:
f2:31:b6:63:fb:e3:aa:08:1a:5c:56:35:95:27:04:6a:85:6f:
80:06:19:ce:bf:6f:d5:f8:8b:33:f0:e8:d9:b2:aa:e3:9f:43:
3e:02:43:d2:b9:a9:48:d4:d4:bd:45:dd:50:53:fb:e7:90:fa:
0a:77:5a:ca:16:ca:45:99:3f:e4:e6:ab:74:58:7f:be:e6:9c:
c2:b6:a4:06:6b:0b:99:a5:54:16:66:31:bd:1a:8a:e6:5c:67:
2a:9b:52:12:71:44:af:4a:3d:17:12:34:bd:09:c2:1e:8f:df:
3b:8c:fa:e7:1a:84:69:87:95:a1:f0:38:fc:cc:47:cf:d1:0b:
24:2e:84:b8:da:75:a1:b2:df:bf:98:40:98:05:95:5a:14:8e:
e0:b8:95:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:56 2026 by rpki-client