This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: oPGq3Ro8RT8LoM9y97chZrIjxFxFVxWWn8RiTl01DCs=
Subject key identifier: 0D:AD:B1:D6:A0:8F:89:03:73:89:FB:E3:E3:47:87:06:74:A2:43:9A
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019C4358DB630AD6ED726FC40C1386899C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 17:00:22 +0000
Manifest this update: Mon 09 Feb 2026 17:00:22 +0000
Manifest next update: Tue 10 Feb 2026 17:00:22 +0000
Files and hashes: 1: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: GVb7KTF/vOOq9Jr+y9pl85eCt1rrMYfOn4nS7cgtpEE=)
2: X22P1NloWugtV33VklnsZASB77I.roa (hash: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs=)
3: qZ8lYrTAES5IWyxZQZaEefS3YC0.roa (hash: TigOEyk/IxeMvvOho4DCoJ6pinlkySdim2c4kDHjteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:db:63:0a:d6:ed:72:6f:c4:0c:13:86:89:9c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Feb 9 17:00:22 2026 GMT
Not After : Feb 10 17:00:22 2026 GMT
Subject: CN=0dadb1d6a08f89037389fbe3e347870674a2439a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:c4:85:cc:bb:af:0e:30:c0:9b:08:ef:0c:
02:1c:1b:d9:1c:b3:24:b0:dc:db:92:01:dc:cc:81:
af:22:d3:d3:4a:5b:f9:37:21:0f:68:f4:9c:cf:84:
87:e5:de:4b:00:19:23:c4:07:fa:a1:6e:7c:ee:fc:
bd:1f:9a:a1:ad:2c:fb:6b:72:55:ea:da:9e:40:cb:
6f:94:10:8b:94:c3:45:62:71:88:7c:f8:82:91:4a:
8c:ff:4e:0f:59:f8:07:71:a7:52:7e:b1:1d:5e:e1:
ac:aa:90:32:10:3a:c7:46:6c:c3:47:53:54:63:d0:
56:33:59:3f:37:d9:e0:21:a7:31:ee:10:90:60:b6:
49:b6:1b:7e:ab:ff:94:b7:01:ba:3c:7d:aa:b1:eb:
b4:78:f1:c8:35:50:ea:4d:ef:6f:01:ef:01:a0:25:
8e:fe:eb:ad:80:4f:46:7f:b5:f3:cc:56:33:16:9c:
89:fb:f7:22:f6:a6:70:27:c4:98:06:d9:2e:1a:37:
f3:81:76:05:bc:62:21:61:65:07:50:09:7a:87:93:
2e:29:a5:5d:98:28:d3:ee:b2:d9:f7:ef:55:98:2e:
e3:79:44:d5:01:57:0a:10:99:fe:53:ba:0e:7a:de:
5e:af:e1:5c:de:d7:80:57:08:94:8d:02:8b:68:65:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AD:B1:D6:A0:8F:89:03:73:89:FB:E3:E3:47:87:06:74:A2:43:9A
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6e:b7:0e:ba:b0:62:24:78:d1:d8:63:9d:41:e5:b4:d3:6e:
e9:c6:1f:cf:a3:b1:79:1c:d0:18:d1:89:d3:e1:16:1a:98:79:
f9:ad:84:74:cf:8f:53:f0:12:ff:92:ec:0d:d9:bb:94:c6:8d:
d6:06:ef:ce:41:2a:75:f0:3f:85:83:ae:56:3a:e9:7f:97:b6:
58:94:22:0d:55:7a:61:4a:74:7c:73:44:e3:12:81:ff:ea:d6:
c7:a4:2f:18:51:c5:50:e0:03:71:85:44:54:cd:a6:36:c0:25:
c9:45:55:aa:a8:14:9b:6a:5b:2d:8f:4a:72:7d:4b:db:de:73:
03:31:95:95:ec:21:46:c5:12:50:04:d8:30:7d:ca:3c:bc:38:
e3:24:22:79:4c:ed:8f:57:70:47:26:18:7f:39:6e:cf:db:7f:
74:0b:b2:d7:dc:61:4f:68:c3:4d:47:d7:f5:35:ab:4e:e9:9f:
6a:7c:ff:bd:a6:12:5d:4e:c6:ec:87:7a:08:42:fb:e3:a5:a0:
ae:06:5a:f5:a9:ae:cf:a0:6e:4f:44:99:5e:4f:48:ca:d5:13:
42:79:d4:38:fe:ae:7e:c5:7c:64:2d:51:75:50:91:0e:37:c5:
96:d7:17:4f:ed:4f:e0:6b:61:6c:2f:a9:b0:d0:9b:84:d1:15:
91:9a:5f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:05 2026 by rpki-client