This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: nH6BU9BIHcOV4nIi16bgfdAEBZe4N3e5Yx8i7RZ0Doc=
Subject key identifier: 1A:AB:7C:88:41:96:9C:DA:B8:8E:FA:BF:AD:4A:1B:20:6C:A3:BB:F7
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019C43230B40C17C6B391050A8741F9D10AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 16:01:35 +0000
Manifest this update: Mon 09 Feb 2026 16:01:35 +0000
Manifest next update: Tue 10 Feb 2026 16:01:35 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: zFgvWtqAiOznQ+kWLxCcU5TyL43zjb7U9vjtOpRUy6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:23:0b:40:c1:7c:6b:39:10:50:a8:74:1f:9d:10:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Feb 9 16:01:35 2026 GMT
Not After : Feb 10 16:01:35 2026 GMT
Subject: CN=1aab7c8841969cdab88efabfad4a1b206ca3bbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:f5:45:87:2d:c6:45:ba:48:fc:05:e0:c6:
d3:59:b3:7e:e5:d5:37:b1:a0:f2:0c:ea:6e:5b:5d:
57:f3:50:70:d8:17:ea:bb:61:bb:2c:48:c6:6e:fb:
8c:ce:f9:ca:9b:a4:dd:6f:40:73:2a:36:07:a2:f2:
52:32:0d:27:a3:47:17:a3:e6:53:f4:3c:ab:39:a6:
fd:aa:73:10:47:85:f8:a8:a8:a3:70:8f:41:c5:58:
35:37:2b:17:a4:fa:84:3a:8f:e5:49:2e:68:4c:88:
83:bd:f0:b5:86:8b:8b:91:dd:2f:79:b7:05:d6:7a:
24:b4:35:88:03:c6:6f:59:33:a5:84:36:d3:e4:4d:
b8:a1:05:e9:c4:18:c5:b8:21:d6:12:ab:b6:e6:9d:
c4:69:bf:11:e8:c6:a4:f7:78:01:0e:e8:f5:f2:ca:
75:a6:78:2a:52:22:83:c4:76:6e:d5:12:cc:c7:2b:
8c:4e:13:d7:9e:d5:b0:a6:df:d2:83:53:b8:d6:15:
53:0e:b1:4f:38:4e:52:ba:e2:dc:12:f9:66:01:9b:
a7:85:1c:3d:86:34:fc:2c:03:e4:c9:04:a6:0b:df:
7d:df:b1:79:9f:5a:70:25:64:c9:f6:25:9c:9d:5f:
f5:23:d1:a2:5e:df:25:5d:89:0f:70:f6:69:a7:7e:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:7C:88:41:96:9C:DA:B8:8E:FA:BF:AD:4A:1B:20:6C:A3:BB:F7
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:03:73:4f:e3:0b:f2:6f:df:c8:ee:52:07:10:26:26:98:27:
3d:8c:36:55:43:af:46:48:02:0e:e5:93:17:c0:9a:1c:07:09:
ef:5c:97:47:52:be:74:dc:55:dc:f9:c6:aa:eb:b7:49:e3:c2:
d0:4d:e4:74:2b:d4:cb:17:41:69:3a:48:cf:b9:32:05:49:08:
2d:3e:41:db:00:99:47:b8:4c:e9:ba:85:a7:8d:61:20:d0:ac:
30:89:6e:ce:7e:6d:60:cf:16:d4:0d:7c:bd:72:f2:44:ce:6c:
e3:ce:87:fa:c0:d2:5b:0a:bf:c5:81:28:ce:60:ae:b7:a1:2b:
af:ae:6f:7b:db:7f:2e:8b:3c:a4:51:76:c7:93:2a:bb:1f:1d:
e7:eb:c7:59:e8:07:6e:10:9e:8e:a2:96:9b:eb:50:65:6c:d1:
16:d8:bf:7d:39:f8:5f:8d:9b:60:37:ce:41:ce:e4:14:bb:c3:
f0:93:e7:a9:f5:29:dd:0f:e7:db:ca:d0:1b:e2:d7:29:be:f8:
7a:27:22:36:34:c8:f4:b7:48:07:ae:99:c5:12:f5:56:31:33:
05:f7:3f:dd:3d:27:ea:b1:47:85:c3:02:d7:bc:74:34:05:22:
b4:69:95:09:8c:6f:16:8a:47:6c:a8:da:50:af:f5:8d:4d:7a:
b8:f5:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:35 2026 by rpki-client