This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier: xkfKjF/WbFMsoYQt2RjRjmuDEwalYEEdnW8+os6TfYs=
Subject key identifier: AE:EB:E6:C8:64:50:87:79:65:A5:B2:E7:A4:9B:F8:97:E8:88:3A:49
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 019C43594F0304C054C2E3FB691895C1B4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number: 07C1
Signing time: Mon 09 Feb 2026 17:00:52 +0000
Manifest this update: Mon 09 Feb 2026 17:00:52 +0000
Manifest next update: Tue 10 Feb 2026 17:00:52 +0000
Files and hashes: 1: 5XJcsA0Yt7Zdff_LSEdl66W_iVs.roa (hash: b2S+2HR2gX8LbhzerywHZG+Oq0Xjm9O6862mVOPJiR0=)
2: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: 50tQyBz3qKNF1BtQMThoe7EGFyERlQ8GDMxuQgfKa4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:4f:03:04:c0:54:c2:e3:fb:69:18:95:c1:b4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: Feb 9 17:00:52 2026 GMT
Not After : Feb 10 17:00:52 2026 GMT
Subject: CN=aeebe6c86450877965a5b2e7a49bf897e8883a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:95:f6:24:ae:68:a5:a0:bf:67:28:11:e3:
b8:9c:b0:10:23:01:99:77:de:e2:3f:8d:c2:6f:f4:
10:38:17:4e:90:bf:7d:03:f2:16:17:04:76:d5:f6:
5e:93:47:1f:aa:9d:01:92:01:f6:6f:8c:b3:e8:c7:
6d:1f:31:5f:c5:5e:61:71:0e:80:37:d1:e6:cc:25:
88:ca:c2:fd:8e:50:39:5f:5c:46:15:d4:67:85:4a:
e8:8f:6d:0e:c7:cc:59:b4:c9:43:1c:59:90:a6:77:
f8:25:ed:06:0a:3c:54:bc:a6:48:23:da:6b:a7:36:
65:0f:a6:f7:da:6d:24:23:b3:0b:12:cb:59:66:5f:
86:b2:c0:9b:ae:d3:fa:5c:a6:05:68:10:9b:83:6e:
de:fc:2d:1f:c4:83:b2:44:b5:37:cc:ca:2c:d4:cb:
ce:22:2b:a6:da:54:66:24:cc:50:e1:55:e4:42:37:
3d:5e:6a:d5:b4:43:9c:1d:a4:27:12:29:a9:4e:6b:
71:74:a2:38:e0:2e:7c:84:5d:4d:9f:aa:6f:ef:0c:
2b:4a:68:70:92:ef:fa:64:2f:95:c4:e4:73:4c:bf:
6d:75:d2:7f:b9:62:f3:79:49:ab:90:79:51:34:6c:
39:5f:ac:48:48:54:14:46:79:8f:19:c1:cd:f5:d2:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EB:E6:C8:64:50:87:79:65:A5:B2:E7:A4:9B:F8:97:E8:88:3A:49
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5e:86:75:8f:c3:72:6c:a8:0c:cd:58:25:b9:97:be:c9:29:
9b:fd:34:9e:18:d8:d9:79:39:a8:74:6a:51:45:56:ef:4c:1e:
ff:a8:ca:4b:a6:4a:c0:2f:0a:4a:61:ed:21:7f:f9:0b:50:96:
c5:2b:0c:78:5b:a6:a0:59:9f:14:23:01:39:31:32:29:bc:00:
c0:b3:5f:d1:de:3a:9f:de:46:52:33:d0:cf:85:e2:52:82:d1:
1f:c8:13:bc:a8:47:93:fc:55:54:9c:0b:91:03:5d:b9:65:0e:
50:cc:46:1b:2b:bd:11:62:fe:4a:33:18:ee:81:4a:aa:1b:bf:
15:44:21:3f:ff:c5:60:43:ce:ac:e8:f6:50:d2:0c:6a:ac:32:
ba:37:bf:d3:af:84:56:70:46:0e:35:38:49:07:26:73:ed:96:
21:b2:03:88:91:05:30:b5:55:92:36:79:08:0f:d2:bb:ef:88:
e5:a5:71:13:2d:ed:2e:9d:87:70:cc:bc:9e:da:48:ff:6c:e8:
7a:4f:a8:dd:c4:9a:80:ae:cc:22:90:e1:a3:61:8a:88:0b:09:
a6:07:d6:4e:a4:dd:67:84:41:d9:a2:44:ad:df:1b:51:43:8e:
be:8c:eb:8b:cb:0f:93:0b:ea:a6:b9:5e:f5:79:04:54:cd:83:
0e:02:f9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:20 2026 by rpki-client