This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
File: d5KQMR5unPpeUX-rsNlvqaccPaE.mft (raw, json)
Hash identifier: z+u69/3Jz04XHWFBehYAGHHfA8+sRNAlwXkE1BZiITg=
Subject key identifier: 1E:8D:F9:7D:84:39:13:18:B7:09:CE:02:8D:0E:53:BD:09:FC:81:7A
Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Certificate issuer: /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Certificate serial: 019C438FB456D845467F7C3521FDA525668C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 18:00:17 +0000
Manifest this update: Mon 09 Feb 2026 18:00:17 +0000
Manifest next update: Tue 10 Feb 2026 18:00:17 +0000
Files and hashes: 1: 566D1EdYs19-3V9MiVbPg5q4klA.roa (hash: qyY7COVkvk1w1sXrRK7aY7nXKVOnf0oYO2ACeWMsGEE=)
2: d5KQMR5unPpeUX-rsNlvqaccPaE.crl (hash: aBV/UQ2BqS2S5MaGrV786yYOrQOiAbM7FEFJ8RVg9e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:b4:56:d8:45:46:7f:7c:35:21:fd:a5:25:66:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Validity
Not Before: Feb 9 18:00:17 2026 GMT
Not After : Feb 10 18:00:17 2026 GMT
Subject: CN=1e8df97d84391318b709ce028d0e53bd09fc817a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:b5:3f:d5:1b:7a:b7:48:3f:50:d0:31:13:
f1:18:9f:42:5c:32:a7:43:e9:1e:4a:89:30:1c:d4:
08:c1:37:5a:81:86:32:64:39:ae:a3:c3:c7:a9:c1:
24:ec:53:49:18:8a:ef:3c:25:79:bf:8d:15:5d:b0:
49:21:bc:7e:6c:07:47:66:f6:c8:f8:85:8d:d5:f7:
f6:9e:d6:a3:ca:ee:4d:9b:79:01:a2:b9:a5:8b:c1:
83:f0:c2:01:07:26:c1:ae:e6:3d:41:91:7b:8a:89:
a7:c7:62:46:34:44:f4:4c:d3:6f:92:17:79:54:4f:
77:a5:d2:4b:63:7b:9e:aa:7e:2e:51:e4:c4:df:5a:
ff:4d:45:5d:97:fe:24:a8:73:2c:a7:d9:54:12:54:
47:06:b5:95:a4:f9:c5:63:73:e4:93:6b:74:90:91:
30:ce:97:ea:2b:bf:37:fa:c7:d2:87:b5:5a:52:e0:
82:8d:32:6e:b1:fe:83:1f:d0:40:93:c5:fc:4f:7f:
f5:69:27:2a:4d:29:b2:10:fc:a1:5b:09:dd:78:76:
0c:48:f0:20:7a:f0:3f:50:01:ad:e4:94:82:16:b5:
8d:4c:b8:63:18:af:5a:82:22:61:56:c7:6f:c8:95:
1a:f8:26:d8:26:82:f8:29:69:dd:3a:0e:ea:17:e9:
f3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8D:F9:7D:84:39:13:18:B7:09:CE:02:8D:0E:53:BD:09:FC:81:7A
X509v3 Authority Key Identifier:
keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5a:71:58:d0:3e:89:52:1b:ed:a9:81:b6:e0:80:cf:11:3c:
92:f9:51:86:f2:36:31:d5:ba:9b:90:2b:e5:59:ab:c5:9d:43:
02:c4:37:2a:91:b0:4c:09:62:79:18:13:6d:e1:cd:47:7d:38:
f4:b2:46:e3:50:f7:91:2e:c5:bf:f4:ce:ce:a7:3b:16:99:8e:
88:61:d8:58:97:30:2d:15:97:2e:80:e3:a9:9a:aa:1e:6f:dc:
ac:a5:4e:58:58:e8:ad:07:1f:a1:ae:30:c7:dc:bd:d0:42:54:
e6:7a:1d:7b:25:79:80:ca:7e:67:ac:06:0b:a1:68:78:9f:4a:
15:e9:c2:80:a0:03:41:1e:7a:50:11:2a:5b:bd:44:c4:95:45:
45:67:e4:0a:4d:aa:0a:70:4b:24:36:69:cf:db:88:3a:aa:05:
69:58:f4:cd:06:9b:a6:a7:12:60:e9:6a:b3:35:9b:c8:b1:c0:
22:99:9a:2d:71:17:1d:af:45:35:f1:bf:c0:a4:1e:cd:05:2c:
5b:47:88:0a:09:56:c6:1f:0a:a1:50:18:b4:b4:f7:f5:69:9b:
b9:6f:c4:d8:32:f9:79:3f:30:ce:4e:7e:80:ab:a9:dc:d8:93:
5c:e7:cf:92:b9:7e:d7:0d:e9:dc:1a:ab:7f:6e:86:5b:8d:a4:
db:69:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:08 2026 by rpki-client