This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
File: c3gm9t2lQDSR5IfKTut9fNdvoT4.mft (raw, json)
Hash identifier: mVsSauEPCxfuMPmD7szNu4yzNWPStWm/hqgR9aICoXs=
Subject key identifier: E0:8A:39:7D:0B:4F:5B:B4:63:47:39:91:A7:C5:FF:39:58:E3:77:62
Authority key identifier: 73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
Certificate issuer: /CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Certificate serial: 019C427D804E6D28284890B813CFB2E95FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
Manifest number: 01CC
Signing time: Mon 09 Feb 2026 13:00:46 +0000
Manifest this update: Mon 09 Feb 2026 13:00:46 +0000
Manifest next update: Tue 10 Feb 2026 13:00:46 +0000
Files and hashes: 1: c3gm9t2lQDSR5IfKTut9fNdvoT4.crl (hash: zxBncV7dfG5sGHdLf1axtOyqhy47CK7fgK5eolFXTLE=)
2: p1a-a2lNsvZGVhwRB5Q8-ie2Sjw.roa (hash: 5afAFR5HkwJfwI8pIXHWdqB0CsCFJkUcufN96ASqJRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:80:4e:6d:28:28:48:90:b8:13:cf:b2:e9:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Validity
Not Before: Feb 9 13:00:46 2026 GMT
Not After : Feb 10 13:00:46 2026 GMT
Subject: CN=e08a397d0b4f5bb463473991a7c5ff3958e37762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:d0:50:ca:57:b0:90:78:29:ac:52:a5:4a:
7d:4e:55:5c:5b:aa:cb:c9:9e:fa:b9:1a:46:70:ba:
62:1b:e9:7d:08:f1:39:a8:11:c4:1f:77:67:59:de:
62:03:07:a5:2d:ff:27:82:46:f4:e3:17:60:e1:6f:
92:0a:ff:f0:e2:db:e8:f4:eb:d8:f5:ea:ae:16:a8:
82:97:df:4b:77:c0:cb:69:5c:51:38:cf:3e:73:73:
10:0b:1c:e4:e0:6a:b4:d5:c4:b2:0d:04:88:e7:a8:
37:10:a9:c1:5c:4a:ed:d8:b4:58:8b:62:f2:04:7e:
3e:74:00:c9:02:1f:58:41:3b:6b:05:e9:bf:c0:4e:
d7:e0:cf:78:cc:51:14:ff:23:51:cf:7d:69:1b:0a:
28:b2:3e:58:9d:61:4a:de:a6:03:20:e9:87:b2:7d:
b7:aa:f6:73:0b:81:3f:44:59:ae:8e:4b:35:b9:ba:
48:61:2b:ce:43:c6:fd:92:ee:68:21:0d:85:b4:6e:
dc:ac:91:d5:34:68:76:58:5c:c9:11:03:94:93:fa:
3a:4e:11:73:e1:4e:27:ec:67:6d:13:c5:73:c4:a7:
07:fb:50:97:55:3d:30:d5:f1:33:4e:7b:ca:71:7e:
8b:4d:f0:60:bd:2f:c9:60:99:7b:30:24:1d:b9:37:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:39:7D:0B:4F:5B:B4:63:47:39:91:A7:C5:FF:39:58:E3:77:62
X509v3 Authority Key Identifier:
keyid:73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:95:33:ad:b8:ea:61:f8:0f:38:da:37:34:8c:79:ac:e8:69:
a8:ad:e6:76:78:b9:5e:d2:d5:a6:1f:e8:9d:b0:1a:a4:4a:d6:
be:1a:cb:68:3d:ff:2b:11:b1:ec:63:00:0f:56:7d:ed:0a:c9:
37:f2:9b:ab:5b:ed:d5:12:34:57:26:59:83:42:4b:e1:03:88:
6f:f9:9b:9a:de:63:f5:f9:dc:15:e8:dc:27:64:58:9c:df:14:
c7:2d:e4:9a:83:f9:17:70:51:06:c5:bf:00:46:8c:89:37:6b:
26:b5:02:c0:1b:6b:66:70:6e:19:ec:24:c2:4e:04:b1:e8:2b:
51:83:26:9f:a0:d6:03:9a:b6:f4:74:6e:30:d4:2d:9a:b4:eb:
4d:5f:22:71:d5:6d:1c:f9:d7:9e:84:25:7c:9e:dc:c1:4c:60:
62:bc:5e:f6:6e:69:07:61:5f:b6:fe:fe:8f:ca:7f:ab:d4:b7:
d5:b4:ad:60:bf:d7:b8:1e:da:ea:4f:1a:52:bb:21:17:b7:61:
63:49:1f:28:f2:56:d2:19:40:00:11:92:2f:a8:b4:4f:3c:97:
42:94:b2:d8:1c:b2:7c:2f:82:66:f7:4f:03:6b:b1:ea:84:48:
4b:c2:c3:c7:bf:df:f6:65:52:81:19:d8:a1:8b:43:a3:d1:95:
3c:b5:20:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:20 2026 by rpki-client