This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: PZtS1GIqZ5VWBuCr7kV5EYTsrcTksfzJkMFcnWk41Z8=
Subject key identifier: 5E:48:1E:AD:15:08:8E:F5:F5:62:EC:03:7E:BF:16:2A:57:67:DB:46
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019C4511550E427D50D6CE8E7FADEAB85F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 180D
Signing time: Tue 10 Feb 2026 01:01:29 +0000
Manifest this update: Tue 10 Feb 2026 01:01:29 +0000
Manifest next update: Wed 11 Feb 2026 01:01:29 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: QTLJX3Mbkk3UHndRdqA3r2YXeeomN4j8aafdvEGdCEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:11:55:0e:42:7d:50:d6:ce:8e:7f:ad:ea:b8:5f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Feb 10 01:01:29 2026 GMT
Not After : Feb 11 01:01:29 2026 GMT
Subject: CN=5e481ead15088ef5f562ec037ebf162a5767db46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:3a:d1:25:c9:3c:4d:17:45:88:42:bf:da:
7c:b5:8e:ab:10:0a:d2:be:10:a1:95:cd:bf:dc:51:
0d:63:8a:b9:97:3a:10:85:23:cd:dd:6d:40:7e:a5:
71:24:54:47:f0:b3:53:d8:8e:7b:f3:05:40:9a:1b:
e2:fb:32:26:c2:42:37:dc:0e:76:1c:06:16:8a:9d:
6b:eb:38:df:8a:ae:9d:7d:02:f5:14:95:da:31:bb:
5d:d7:29:22:a0:40:71:00:9c:0a:27:4d:4f:8b:62:
43:03:22:15:3f:29:aa:36:9f:3c:63:ae:b9:35:d7:
cb:66:35:b2:a0:30:1f:76:60:9e:76:e9:46:d0:7f:
14:58:9e:da:85:bf:c0:15:f3:40:8c:e6:ce:e9:55:
35:c5:6b:b9:e2:39:44:4c:db:ea:74:fe:21:01:21:
6f:f6:2a:d6:09:7b:7b:10:f3:d7:a5:da:57:29:9a:
bd:2d:bb:82:da:5c:60:27:e0:d8:a8:02:6a:ef:e1:
9d:d7:2b:35:6c:68:40:2a:56:1e:01:f0:0a:b3:18:
a9:d4:2c:7d:ba:8c:69:3c:d7:a6:90:7a:a1:a3:d3:
58:79:e9:f0:da:e2:61:bc:21:40:a6:c8:ff:76:b8:
be:b8:39:0e:62:51:21:e7:bb:04:3e:a2:f8:41:8b:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:48:1E:AD:15:08:8E:F5:F5:62:EC:03:7E:BF:16:2A:57:67:DB:46
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:43:0d:d3:74:b8:8a:96:90:d6:89:13:36:1e:03:48:fb:de:
22:5d:47:78:52:f6:89:13:43:38:83:9e:45:7c:38:78:59:2c:
87:aa:6b:3d:c7:0f:b5:74:66:31:de:9e:73:2f:c5:37:e4:66:
9a:cb:db:ec:8f:56:ad:67:c9:7e:d0:81:df:8d:bd:2c:f5:ff:
69:cc:fa:29:7b:6f:9e:db:ee:58:6b:1b:17:0b:6b:01:0f:52:
67:f3:3f:f2:0c:74:f6:be:c3:1a:52:57:a0:fa:0f:70:e4:6f:
69:1c:c8:fb:94:0f:51:7f:20:9f:dd:0a:cc:8f:07:8b:e0:62:
19:de:d7:04:e5:c7:89:ad:47:dc:77:75:b6:d9:e5:68:8b:51:
63:87:b1:8e:51:a2:bc:80:fa:b8:a4:dd:48:f7:80:8d:fe:12:
51:ad:cc:49:e6:e1:01:d9:69:fc:b1:8c:aa:62:8e:18:75:3f:
2a:82:96:b9:32:a7:40:12:82:2d:3d:41:c3:15:94:9f:a1:11:
09:36:e9:c7:9e:f8:6c:d1:d5:2f:8a:c6:98:97:a3:1d:09:41:
1c:18:2c:48:10:ab:62:d4:11:4c:da:71:bd:a1:fd:0c:bf:97:
50:96:a7:5f:dc:de:c6:ee:e4:4f:75:d2:c6:76:97:cb:4b:43:
e7:7c:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:55 2026 by rpki-client