This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json)
Hash identifier: GESXotGMrMAeOEWEsmhtNL7GzzLbJHcNZX5wSsiwjEQ=
Subject key identifier: 9E:4D:DD:81:5D:91:4F:C7:D1:81:E9:E3:39:6A:8A:E5:86:EF:CD:3C
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 019C43FDACCBA848AAB350F81010B1E590EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
Manifest number: 1209
Signing time: Mon 09 Feb 2026 20:00:24 +0000
Manifest this update: Mon 09 Feb 2026 20:00:24 +0000
Manifest next update: Tue 10 Feb 2026 20:00:24 +0000
Files and hashes: 1: 6i6ktqVxfMyBeyrlkS73upvx9Ho.roa (hash: BlC62l60c6T9hNk8muoKRRCAtq61HWPcoGQIb8d33sU=)
2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: js1bavBxI5P/MAOFE++RSi/jrRptVuX3+RHqaUX/pdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:ac:cb:a8:48:aa:b3:50:f8:10:10:b1:e5:90:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Feb 9 20:00:24 2026 GMT
Not After : Feb 10 20:00:24 2026 GMT
Subject: CN=9e4ddd815d914fc7d181e9e3396a8ae586efcd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:15:bf:21:43:72:6d:f6:f9:23:f4:aa:8f:
93:99:0a:b9:fe:5f:bd:b3:80:76:3b:f0:0a:13:85:
58:8b:bf:64:1c:41:34:65:ce:a8:ec:7f:f4:91:49:
0e:2f:ed:b0:ac:1f:0f:21:11:14:da:a0:76:f5:a6:
14:5c:30:35:6a:df:68:a9:32:da:a4:ea:51:03:87:
0f:63:e7:f9:d2:84:23:a6:f4:52:54:b7:db:b0:4f:
a2:8b:16:8b:41:98:1c:9f:b8:5a:01:6d:a7:98:cc:
54:01:5d:ca:cb:94:18:86:50:e0:20:a7:13:0a:56:
3a:81:fc:8d:a4:c2:21:8b:ea:7a:1c:4a:f7:36:45:
7d:26:c8:4d:0e:2c:e4:84:27:ce:e2:ef:79:0b:cf:
b3:ee:fc:59:fd:ef:3e:f9:1b:8d:d6:71:12:10:9e:
9f:06:eb:c8:8f:e9:1c:fb:14:1e:51:2e:6a:31:00:
08:74:b1:c3:ca:69:30:b3:30:08:e0:b1:bc:47:48:
0d:f8:21:08:37:47:6a:41:6e:30:61:31:bb:e2:61:
b6:43:7b:5d:c7:47:b7:96:e0:ab:82:91:4c:2c:9c:
4c:92:0a:4f:b0:c6:0c:c8:5a:3c:08:9a:a5:b3:c3:
63:de:98:63:fb:e5:12:b1:63:9d:51:73:13:7f:61:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4D:DD:81:5D:91:4F:C7:D1:81:E9:E3:39:6A:8A:E5:86:EF:CD:3C
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:af:de:93:14:4e:ff:5e:a5:0f:96:6b:e9:12:f0:f4:c7:59:
6e:c4:53:99:80:b0:8d:cf:97:5e:59:84:37:a3:66:aa:be:3a:
4a:2c:f7:50:ee:7e:f1:84:26:af:2c:b0:5d:f1:67:13:d9:a4:
e2:8f:ff:bf:a1:4b:37:74:b5:0b:f0:5c:1c:86:62:46:28:64:
81:88:15:db:ba:f6:24:74:a4:4d:b4:6c:4a:fb:6a:3b:07:c4:
7b:61:75:66:8d:a6:2c:3b:8c:e9:20:6e:44:7d:ad:ff:5b:26:
82:16:22:aa:2c:7e:8c:0b:66:11:33:75:e5:c8:a3:1d:98:9a:
80:e4:cd:d3:e7:81:38:a8:4b:c6:49:97:11:37:03:88:90:b1:
4e:95:96:08:66:51:10:65:f6:17:46:6c:0c:35:71:82:3a:1c:
2a:f0:ec:c7:c0:e4:d1:8c:01:16:fb:00:eb:e3:a2:77:35:cf:
81:51:e3:b8:a1:cf:6e:8d:8e:f4:8f:f7:34:bf:43:4d:35:93:
47:c8:6c:c2:d3:a9:8f:73:a8:c0:1f:a8:6b:06:e8:1b:78:5a:
da:b9:d3:58:fa:f9:08:d1:0a:90:27:39:ba:6d:2b:19:c2:a2:
82:3c:56:3c:d6:da:aa:17:f3:2b:4c:85:61:48:d5:6a:60:32:
6b:d2:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:58 2026 by rpki-client