This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier: zSb4RHqpEf9OuW3CG1NbfBhAN0fo5tfeOm1wCOP/HjU=
Subject key identifier: 24:D7:BF:DF:20:50:CB:B3:97:81:DF:22:8E:1B:37:41:D1:4F:CC:C4
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial: 019C420F86416CBCEF2DED437261AEA51EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number: 14E0
Signing time: Mon 09 Feb 2026 11:00:39 +0000
Manifest this update: Mon 09 Feb 2026 11:00:39 +0000
Manifest next update: Tue 10 Feb 2026 11:00:39 +0000
Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: FEgJXuN0s00/4U7UFLEjhYxdWh89NXdHGKzkms9xFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:86:41:6c:bc:ef:2d:ed:43:72:61:ae:a5:1e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Validity
Not Before: Feb 9 11:00:39 2026 GMT
Not After : Feb 10 11:00:39 2026 GMT
Subject: CN=24d7bfdf2050cbb39781df228e1b3741d14fccc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:83:2e:fd:5f:af:ad:ae:2d:fd:75:53:70:b7:
6a:b5:5a:0f:01:56:0a:0b:95:e1:f1:0c:b3:3c:fa:
9c:9b:92:2a:e3:56:b3:4d:ae:9a:c6:95:78:19:d8:
d0:01:42:f8:a9:40:ea:d9:f0:76:91:6c:5f:7d:77:
57:1a:7f:7d:74:21:f7:00:1c:ff:cb:51:a8:db:3b:
7f:77:51:b4:e9:03:2c:57:85:e1:1a:bd:8e:2d:40:
93:66:18:12:50:03:b7:ef:40:e3:31:48:dc:a1:03:
11:16:00:2c:09:dd:cc:53:34:47:07:93:df:83:da:
e2:75:5a:0c:93:90:76:ec:41:0b:ee:75:ff:01:2e:
78:22:15:fc:16:0a:2e:73:7e:5f:5d:85:32:95:92:
25:27:31:c8:65:03:9a:8a:42:8d:5d:58:aa:01:5e:
2d:d8:68:91:05:0a:4c:65:c8:df:f7:e6:bd:3d:da:
8c:f9:da:75:79:2f:31:26:76:26:ce:f8:e1:9a:b9:
f1:13:7f:19:8e:44:36:56:0e:ab:d5:b3:a0:7e:ab:
f2:62:bd:da:b1:09:23:6e:53:02:3d:d8:4a:cf:3a:
ee:f9:35:ec:93:7b:d6:d1:b0:0c:09:be:aa:b3:47:
ba:ab:ed:d2:94:60:0d:98:2a:4b:6c:61:8b:d0:c4:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D7:BF:DF:20:50:CB:B3:97:81:DF:22:8E:1B:37:41:D1:4F:CC:C4
X509v3 Authority Key Identifier:
keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:48:c7:33:e2:a6:39:98:af:bc:55:b0:6d:83:b8:da:2d:71:
ef:4e:a5:1a:bc:59:a8:0c:4b:8e:24:46:e2:1c:fd:15:c8:a1:
27:48:b6:3c:2e:73:60:e4:00:1d:5b:b4:67:c9:5e:8c:33:ad:
27:57:32:9f:b7:1f:ee:4a:2b:9c:a0:5c:9a:ef:9b:a4:3d:13:
dc:af:ba:b3:70:97:ac:b5:a7:07:e7:cf:13:f3:b9:ff:50:9f:
19:1f:27:19:72:05:e2:d5:7b:27:b0:ee:89:32:80:9b:6f:59:
59:15:ca:71:8f:98:98:5c:10:03:98:9b:f8:fe:d7:10:11:6d:
a5:a9:54:ed:8a:cb:c9:bf:f5:db:bc:c4:ee:ad:78:28:2c:11:
22:68:58:3f:1d:1f:ac:f7:07:e7:8f:53:5d:34:0a:01:8d:5d:
5d:ca:4d:1c:6e:a1:2a:64:d7:59:7b:d6:ba:78:da:e1:8b:8a:
9e:a5:62:13:3f:aa:78:6b:b6:c0:9f:f4:6e:b5:cf:2b:5a:0d:
30:a2:2c:f7:c3:9f:62:75:eb:c2:db:6d:a4:e9:b4:d0:2f:9c:
dd:a2:2b:c1:9e:72:dc:f1:7a:a5:b2:05:bf:c9:b6:bb:3e:ad:
c4:1c:08:8b:3d:a7:66:53:50:5c:8a:50:c2:15:7d:f2:8c:a7:
57:03:9b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:18 2026 by rpki-client