This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: srQsqTMOFbzIkCJHgKhGqxqSAjl2YXyUAlswLu8qeXE=
Subject key identifier: 2F:41:B4:93:AC:CA:DE:EE:61:E8:68:D9:AC:25:3A:F2:5D:6E:8B:48
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 019C42EB19577BFF20D2C125DFA5983664B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0EE4
Signing time: Mon 09 Feb 2026 15:00:29 +0000
Manifest this update: Mon 09 Feb 2026 15:00:29 +0000
Manifest next update: Tue 10 Feb 2026 15:00:29 +0000
Files and hashes: 1: 7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa (hash: AUUlni3UcNfoUVifNt5f8cw2030rnuTziXI1bU77ERs=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: Ktkq8Iq6EuCsAqTdYJ1aMr9Uird0pX/cFhwqP+dlH7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:19:57:7b:ff:20:d2:c1:25:df:a5:98:36:64:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Feb 9 15:00:29 2026 GMT
Not After : Feb 10 15:00:29 2026 GMT
Subject: CN=2f41b493accadeee61e868d9ac253af25d6e8b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1d:51:c2:f9:ac:6e:ce:d8:e9:1c:ea:7c:e0:
52:8f:53:ce:9c:d2:0e:74:49:8d:30:1c:50:e3:ae:
3f:6b:b8:4a:fe:68:a7:a1:ac:c6:6e:d4:74:bd:43:
c4:14:8b:d8:38:d1:e8:c0:a3:14:59:55:d1:82:5c:
41:7d:a5:42:ae:2d:a6:c8:31:c8:f7:3a:f7:99:c2:
48:b2:04:f6:19:a0:ee:4b:e8:87:74:21:67:77:10:
dd:80:0f:1a:a2:24:77:73:a0:ea:7d:51:22:0a:36:
05:eb:68:da:09:70:26:22:42:e7:5a:db:7f:f3:de:
f9:d0:fd:0e:29:0f:d7:24:5f:88:f0:1e:cd:80:f8:
b9:4c:08:3b:de:de:0e:d4:65:52:01:fd:74:86:eb:
24:56:0c:da:ae:b3:39:03:0a:80:19:1e:82:a5:d9:
b0:2b:e5:6e:7f:66:70:60:09:eb:71:09:c8:5a:9d:
18:3a:f4:0c:d7:5c:89:e8:23:53:ce:09:5b:1a:ad:
31:a7:02:ae:ed:50:19:87:e4:52:2c:fa:9f:15:3b:
d6:62:93:80:c2:a3:0d:03:6d:28:6f:04:9f:48:b4:
50:30:f6:cc:b9:1b:a4:14:a6:96:2d:9c:7f:e9:6f:
5f:34:30:15:60:9d:e8:bd:0b:ba:86:29:09:e0:7b:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:B4:93:AC:CA:DE:EE:61:E8:68:D9:AC:25:3A:F2:5D:6E:8B:48
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:0e:41:1e:a2:4f:fd:5c:dd:a7:93:d4:0f:5d:bf:c7:fd:
29:fb:bd:a4:5b:d0:fa:5f:4d:41:51:fb:af:bd:77:55:a8:8d:
7c:22:fe:92:4a:f4:3a:1a:7e:11:8d:2f:2f:05:92:4a:5a:93:
e4:5f:52:10:6a:df:7d:2d:e9:1b:e7:cf:33:aa:a4:23:a8:52:
c9:1d:7b:2b:2a:77:2a:f1:cd:de:6a:f0:6f:1c:2a:e4:a0:9b:
63:8f:ca:78:08:d3:d0:77:80:02:e7:84:37:2a:3a:5d:a6:c9:
a8:63:1c:03:7a:ea:08:5a:ca:c8:2c:0d:ac:32:a2:aa:fd:e7:
c5:5d:22:a7:7d:3e:28:d9:f1:3f:41:54:33:76:30:e9:15:7b:
ca:54:8e:8d:96:34:79:9b:6b:9a:75:72:e3:1c:6f:98:42:68:
55:19:c1:33:ad:62:22:7e:2a:59:5e:95:37:05:42:3f:5c:3c:
4a:44:96:14:ef:ad:44:b2:11:1b:db:c4:4f:67:d5:a3:84:c6:
5e:86:5a:f7:57:55:19:6a:7f:be:db:11:5a:0d:76:42:65:e0:
70:c3:f4:62:a9:51:dc:55:d8:75:63:98:ec:e6:af:83:cf:88:
ba:a6:ee:c9:31:62:db:77:cd:09:1f:03:9c:a5:5e:2e:01:a4:
80:0e:2f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:45 2026 by rpki-client