This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier: E1w3JPZug3InPB4eXBf+XaO2gpD7G4MsB+44eUINQqA=
Subject key identifier: 7D:9A:B3:C3:6C:22:54:A1:62:1C:38:04:EE:ED:83:2F:68:B1:6D:9A
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer: /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial: 019C41A22EF4BFF669317755DA9EE3A3FB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number: 15C3
Signing time: Mon 09 Feb 2026 09:01:13 +0000
Manifest this update: Mon 09 Feb 2026 09:01:13 +0000
Manifest next update: Tue 10 Feb 2026 09:01:13 +0000
Files and hashes: 1: 0NhTEIhVVHGuhHppc2WhR24nfps.roa (hash: UAiJiA/nFpUR+80xJrPSC3HfZCrrUkoKtrqsQ8RFQsc=)
2: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: 1Jipx8f5JYcCGBf0T4QM8ybLVIGmk1bXnTnLgzZ99uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:2e:f4:bf:f6:69:31:77:55:da:9e:e3:a3:fb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Validity
Not Before: Feb 9 09:01:13 2026 GMT
Not After : Feb 10 09:01:13 2026 GMT
Subject: CN=7d9ab3c36c2254a1621c3804eeed832f68b16d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:51:eb:b4:c7:bd:63:d6:1c:c1:cf:b9:d9:
fc:39:4e:e4:7e:63:ae:07:d3:0b:4a:f4:97:57:40:
56:5a:a5:b0:26:06:17:dd:14:21:07:e0:5a:77:23:
4b:1c:fd:9f:f2:6f:65:8a:2e:9e:43:ab:77:77:41:
b6:9d:a0:32:89:a9:4f:89:60:09:9e:7e:07:5c:aa:
41:01:7a:e6:b6:e4:3c:e2:0a:ff:d1:9a:4e:b2:52:
f8:b9:5c:fe:71:d7:b8:1a:eb:11:6f:cb:ce:64:9f:
78:36:50:d2:81:8f:7c:ed:e3:66:a1:3d:5d:ae:89:
99:89:69:36:47:29:cc:2e:3c:b8:07:63:a2:01:98:
55:f0:2a:5d:33:ad:5a:5f:bb:0a:6b:c7:3f:1b:a8:
c9:da:bc:d5:6a:44:9c:ed:e1:70:13:3e:e4:c4:81:
65:92:73:18:79:45:16:9e:04:8f:59:3d:ca:e8:6f:
b1:0e:ee:15:73:3b:f6:55:fc:68:99:3b:62:53:bb:
11:1a:8e:89:71:81:95:5f:ce:5d:13:84:13:e9:62:
7f:23:2e:b4:84:df:5a:94:c1:cf:22:31:f5:64:17:
66:3d:fe:d2:cf:09:04:d5:b6:e6:27:01:9f:16:53:
4b:8e:93:d4:8f:26:35:2b:b7:57:08:1e:fd:a2:33:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9A:B3:C3:6C:22:54:A1:62:1C:38:04:EE:ED:83:2F:68:B1:6D:9A
X509v3 Authority Key Identifier:
keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:35:4f:95:ed:04:ba:f4:20:83:0c:ad:09:03:1b:6a:60:c5:
e2:78:23:88:58:b4:43:1c:0b:80:9c:ab:8d:22:26:7f:ae:ed:
3d:23:11:71:e7:98:eb:c6:90:15:46:20:05:d7:dd:e0:f6:42:
78:a0:e8:f0:ac:29:fb:dc:51:78:8d:2d:9d:32:6f:10:69:54:
7f:bd:e7:f7:94:9c:cb:fc:2a:52:82:00:59:13:b4:19:c3:0d:
49:25:3e:65:3b:ae:3c:64:b3:22:a8:31:74:46:1f:0a:ee:27:
d0:d2:10:44:7f:79:39:72:b8:3c:ef:65:fe:d9:fc:85:58:38:
6f:12:8e:43:02:c6:f6:a8:de:55:8c:5c:89:76:7f:7a:57:ea:
bf:51:43:bc:c4:fe:a3:6a:0c:20:ac:4f:80:6c:53:4a:91:a1:
eb:c1:a5:43:42:f7:64:09:66:1e:8e:46:7c:bc:3c:bf:fb:1d:
89:78:18:f5:a1:09:1e:81:60:8f:53:83:41:b8:0e:95:cb:84:
bc:69:60:33:c7:8f:e9:8b:84:4c:0c:c0:04:dc:10:7d:9a:0c:
03:4b:26:55:da:2b:ac:65:b7:80:74:5f:28:d8:04:8b:c8:72:
b3:b8:06:6e:5f:6c:1d:8d:57:b6:03:b5:3b:c3:ac:93:30:01:
92:9f:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:47 2026 by rpki-client