This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
File: AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft (raw, json)
Hash identifier: ABMN+CA5He1ENuIW8qkVr30533I8rbnHm0BoIGW6OOc=
Subject key identifier: 8D:97:8A:75:12:DE:6C:29:C6:89:9A:F2:FD:5C:AF:8D:26:5C:12:DE
Authority key identifier: 02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA
Certificate issuer: /CN=02e5ee3fdb169535419e794ee8c813d9293581ca
Certificate serial: 019C42B45BD33A11B1159AA7B9E11E253366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
Manifest number: 2F
Signing time: Mon 09 Feb 2026 14:00:42 +0000
Manifest this update: Mon 09 Feb 2026 14:00:42 +0000
Manifest next update: Tue 10 Feb 2026 14:00:42 +0000
Files and hashes: 1: AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl (hash: 9T5ur9a+CU51SjXQiXYyh+7/ESLhivt5rdlkYWYIvdU=)
2: PSP80WvoeTaK8qKEzf5_rBtjRiA.roa (hash: LuMRxihjGgulFR1nfBGt4wCkEt33UifqQX3zhBk0Gig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:5b:d3:3a:11:b1:15:9a:a7:b9:e1:1e:25:33:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e5ee3fdb169535419e794ee8c813d9293581ca
Validity
Not Before: Feb 9 14:00:42 2026 GMT
Not After : Feb 10 14:00:42 2026 GMT
Subject: CN=8d978a7512de6c29c6899af2fd5caf8d265c12de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:02:dd:94:50:0a:bb:73:15:e9:57:2a:6c:
01:70:2d:83:1f:14:de:76:45:19:f6:1e:50:bc:5b:
ff:24:c7:ec:8b:78:0d:c2:2a:19:7d:f7:38:43:ed:
ec:2f:b7:b7:da:8d:8c:8c:78:9b:9c:0e:d0:e1:95:
30:6b:bb:62:e4:16:f8:ce:2e:40:25:13:17:57:a1:
cd:2c:94:a7:37:26:df:6b:0a:0d:78:00:8c:69:10:
89:1b:50:b3:ab:13:60:89:32:06:cc:f3:2e:6b:62:
df:9b:c8:ff:d7:3a:52:3d:f9:ae:c6:30:fc:29:c1:
fe:61:1d:be:58:d9:a5:2e:92:97:8b:54:41:44:83:
3c:e3:36:05:04:02:4e:75:8a:0c:9f:2c:e6:c8:ea:
49:f6:1c:eb:dd:fe:0f:35:fc:b0:1c:24:6c:31:fe:
0f:2e:c9:2d:a7:c9:53:c7:10:79:1a:b7:a0:ad:ce:
48:23:42:79:6f:f5:29:25:4b:8c:99:58:25:1d:ac:
54:ea:5c:14:ae:c7:a9:94:23:d0:ab:28:af:41:c3:
9a:1e:af:37:1e:4d:2b:1d:35:1d:9c:7c:c1:ca:ff:
46:d5:d8:7a:4c:4e:26:56:5a:40:5f:46:15:bf:cc:
e2:ea:33:c8:67:70:68:65:c7:de:bb:da:67:b0:d5:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:97:8A:75:12:DE:6C:29:C6:89:9A:F2:FD:5C:AF:8D:26:5C:12:DE
X509v3 Authority Key Identifier:
keyid:02:E5:EE:3F:DB:16:95:35:41:9E:79:4E:E8:C8:13:D9:29:35:81:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuXuP9sWlTVBnnlO6MgT2Sk1gco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd60d7-96fd-4128-8b8b-d7e287d86fce/1/AuXuP9sWlTVBnnlO6MgT2Sk1gco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7a:51:f3:63:e9:8e:45:5f:37:da:01:10:e2:ad:9c:e0:fd:
93:08:9d:cc:b8:d1:2e:84:d4:04:d6:e1:56:12:ea:89:83:9f:
43:a2:d3:f1:18:72:17:fa:da:88:fd:54:d6:5d:94:a1:83:75:
1c:fc:d8:8a:0f:6f:b7:a5:43:d3:e8:ae:38:de:ca:8d:68:d2:
ae:50:c5:c4:66:87:2d:ac:39:7c:fb:a1:1d:0a:1f:4b:e7:ae:
67:24:78:ca:cb:7e:0d:ef:71:e9:1d:69:93:77:25:96:2c:2b:
61:63:b0:95:95:cf:b1:26:db:98:fb:ad:dd:dc:f0:58:ca:70:
d8:3a:af:81:93:56:72:ce:8e:82:c8:31:b9:e6:ac:7b:64:f8:
3b:a0:13:93:77:98:ce:8d:5c:56:e3:b5:71:2c:6b:10:84:e1:
f0:84:0e:c4:c7:17:4b:df:1e:e2:f7:88:85:b4:7b:bf:48:7d:
3c:0c:58:d6:05:4e:bd:91:c6:9e:b4:5b:c7:ff:9a:2b:4c:a3:
a7:f6:88:2b:76:a3:84:03:87:c9:aa:c2:de:9e:09:dd:5f:97:
92:a6:8e:7b:6f:4f:25:f2:7f:65:b9:33:b7:ae:86:ec:90:52:
d3:f5:37:90:aa:b3:94:b6:65:04:df:e2:ee:14:c6:98:c9:7b:
ee:9e:72:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:11 2026 by rpki-client