This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json)
Hash identifier: tFcI6IaO+qpodZsRdRD3+Ch5Kr0XBez3I7lxkgHprAA=
Subject key identifier: A2:0D:FA:B0:A8:71:54:2A:96:BD:E3:36:0F:13:AA:90:5D:85:B1:39
Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Certificate serial: 019C432204F46FCC0905149F966A896A3D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
Manifest number: 014D
Signing time: Mon 09 Feb 2026 16:00:28 +0000
Manifest this update: Mon 09 Feb 2026 16:00:28 +0000
Manifest next update: Tue 10 Feb 2026 16:00:28 +0000
Files and hashes: 1: 5J389UyqW1b94uh4FuAIuqwlPUA.roa (hash: aw+kCmWxUaXaIpH7kpNdjRvksPfxjNXmAFu1gmqQxDA=)
2: cVEXe3iItcs_ytuvCM3LzRLl4Hc.roa (hash: 0Mhpsego3oBlftLGeLis3rtKxmokj6hoesUfbRFFHng=)
3: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: kztCaQW2dO6oGLl87tI2lA0lk0079FbDl/c4Onn6hOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:04:f4:6f:cc:09:05:14:9f:96:6a:89:6a:3d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f
Validity
Not Before: Feb 9 16:00:28 2026 GMT
Not After : Feb 10 16:00:28 2026 GMT
Subject: CN=a20dfab0a871542a96bde3360f13aa905d85b139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:69:c6:83:24:35:6a:20:71:27:c6:24:9a:
80:73:a0:91:de:e7:61:71:76:a9:2b:54:c6:d0:ba:
a5:c7:ca:7e:6c:19:4d:29:76:43:06:d8:b8:bd:b5:
ac:91:c1:69:30:33:f2:3b:23:b1:1a:5b:76:d9:76:
87:20:d6:02:92:79:4c:c9:98:3b:fa:2b:7a:09:48:
dc:13:77:36:e2:7d:54:8f:85:42:ca:1c:a1:a8:f8:
e6:56:dd:2d:80:e9:86:f1:78:0a:83:46:be:02:68:
ee:45:e1:f7:8f:bd:d4:09:d7:8c:d0:5b:a2:a1:a9:
54:22:66:97:3f:d8:3f:d4:3f:75:f3:0d:de:35:ae:
19:89:3a:0e:02:e0:25:9b:7a:20:5a:12:25:3b:5e:
19:2c:3c:af:d9:8b:ea:ce:a6:96:1b:88:63:6a:b6:
5e:fe:3b:37:2a:79:d3:09:57:20:8d:45:76:ff:c1:
d9:6a:b0:f7:a9:90:37:d8:a1:37:1f:19:11:16:58:
b6:49:5e:90:d7:fa:a7:71:48:2e:fe:77:24:16:24:
5e:c9:61:a3:43:c1:53:8e:de:c4:2d:c4:7e:ac:ed:
1b:ce:c8:b1:94:f3:51:af:89:73:8f:01:04:e0:b6:
4b:27:36:e6:53:21:57:df:2d:65:04:0d:e0:27:a7:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0D:FA:B0:A8:71:54:2A:96:BD:E3:36:0F:13:AA:90:5D:85:B1:39
X509v3 Authority Key Identifier:
keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1d:73:83:26:88:b3:97:a7:2b:ce:78:d7:d9:0d:52:7d:8e:
c5:c6:0e:fa:b9:aa:3a:8c:02:5a:df:a1:c8:ca:e2:5a:63:ae:
ca:e8:a9:83:8e:62:09:25:57:57:6f:cb:78:fd:de:5f:43:46:
3e:46:e4:ba:a2:ba:69:5d:70:78:43:d6:75:26:86:ad:24:5c:
76:5e:01:16:3d:b1:6f:72:3b:00:73:62:d8:1c:6e:d4:c9:73:
51:16:9e:f2:ec:3e:84:f7:44:48:67:62:2e:9b:f2:69:52:57:
55:9a:e8:90:47:fc:7c:2a:d8:af:60:82:d0:35:e8:bf:91:62:
e8:61:b7:07:08:a5:90:cc:3c:a0:e5:b1:3b:c6:27:6a:e1:c1:
01:31:4c:b1:00:e7:39:b2:7d:1c:bb:30:d8:c7:2b:69:9c:98:
c1:16:06:f0:3f:17:1a:69:31:5b:1b:77:36:73:ea:a9:e5:44:
b9:29:b6:44:09:0a:c1:33:79:e5:1c:9a:32:03:81:b2:d5:70:
b5:01:2e:79:61:c7:99:0e:21:6f:97:d1:d5:5e:7c:3c:07:4b:
52:80:b1:d4:1c:f2:02:e8:31:6d:39:7a:84:3d:fc:4e:b8:e5:
92:85:29:3a:b1:27:97:2e:cf:0a:f1:2e:9a:cf:67:84:09:59:
68:42:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:32 2026 by rpki-client