This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
File: doZr5p83cHIKbcxHkuaA_H9zIaE.mft (raw, json)
Hash identifier: TKajxQQ5xScyWX42w2vu22lYt9Laf+PTy0UcPHWqdtA=
Subject key identifier: 62:C7:C0:B3:C2:31:60:28:A9:06:60:D5:82:BA:B1:B8:0A:84:2B:40
Authority key identifier: 76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1
Certificate issuer: /CN=76866be69f3770720a6dcc4792e680fc7f7321a1
Certificate serial: 019C420F75D099CA11A5104F7B9FCBDEE43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 11:00:35 +0000
Manifest this update: Mon 09 Feb 2026 11:00:35 +0000
Manifest next update: Tue 10 Feb 2026 11:00:35 +0000
Files and hashes: 1: doZr5p83cHIKbcxHkuaA_H9zIaE.crl (hash: 2xdadaw8sa1UDWFl1/kLldoyGXiDl30CunFjuz2igWw=)
2: qyikk7bS12oqKnZ6ZpePEhFi5EA.roa (hash: iJ4m2Ce6hYzteRUMXY0l32a188WmXjWtAniRs3aLn1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:75:d0:99:ca:11:a5:10:4f:7b:9f:cb:de:e4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76866be69f3770720a6dcc4792e680fc7f7321a1
Validity
Not Before: Feb 9 11:00:35 2026 GMT
Not After : Feb 10 11:00:35 2026 GMT
Subject: CN=62c7c0b3c2316028a90660d582bab1b80a842b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:4d:fb:92:86:37:ef:74:ec:ef:87:16:0a:
16:02:b6:4a:47:7b:dc:47:82:8b:03:b2:25:16:45:
67:a5:a3:9c:3b:c3:36:44:e6:fb:36:14:5b:07:2b:
db:d7:c8:19:aa:70:0e:ad:e7:0a:1d:bc:14:e9:66:
0c:ea:a4:3d:be:97:6f:01:e0:ed:a1:b2:de:ac:b8:
09:41:e3:b3:11:ed:ba:71:75:96:56:2a:e3:10:72:
eb:ab:cb:6e:57:16:75:91:d2:18:a1:6b:86:4f:80:
b6:7b:15:1f:b3:e4:da:ec:d6:48:36:58:6d:89:8f:
53:25:20:13:fe:de:33:38:27:b5:d8:24:f4:78:72:
d1:6a:02:e1:e2:3e:ca:f7:f4:5f:78:9f:73:e3:63:
b2:16:d8:22:f5:53:f6:b7:17:10:0b:c6:89:5b:91:
99:17:a6:26:5e:2c:6e:e0:2a:89:8e:50:29:41:ae:
a7:6a:bc:dc:3c:fd:97:97:81:6b:23:a9:a1:7d:8e:
45:01:56:ea:c5:9a:02:b9:a1:8c:90:a2:2d:75:b3:
1f:11:1b:53:7a:f6:e9:bd:14:53:0f:4d:08:4a:51:
1b:fe:2f:8a:a2:9e:7c:b6:6e:34:80:a1:2f:e9:e6:
22:a4:ff:e9:70:fa:6d:36:7a:da:74:88:58:35:a2:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C7:C0:B3:C2:31:60:28:A9:06:60:D5:82:BA:B1:B8:0A:84:2B:40
X509v3 Authority Key Identifier:
keyid:76:86:6B:E6:9F:37:70:72:0A:6D:CC:47:92:E6:80:FC:7F:73:21:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doZr5p83cHIKbcxHkuaA_H9zIaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/25812d-8cd7-4707-8bdb-cfa5042dc95c/1/doZr5p83cHIKbcxHkuaA_H9zIaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:92:8b:61:b6:af:9a:ff:6f:dd:7a:ba:be:e2:a6:77:ce:dc:
c1:20:96:92:88:8f:9a:e6:e1:2e:25:d0:dc:ed:c5:8a:0a:50:
44:fe:7f:f4:67:1b:e6:04:b0:c5:d6:d7:5f:81:ce:57:d8:5d:
98:23:7d:c4:42:8a:3f:be:d6:e9:20:45:d2:a9:d5:13:0d:d4:
1a:d8:47:a2:b8:51:f2:ff:1f:ba:19:40:a5:af:06:1f:dc:ae:
5b:ea:2b:9f:88:31:29:67:c2:7a:87:90:4c:46:13:64:49:94:
cf:a5:fd:b7:bd:1a:c3:c7:e1:23:6e:13:5d:fc:19:09:cf:62:
3a:93:ae:0f:3d:86:40:98:bf:01:ae:b9:05:4c:c7:12:1e:08:
0e:07:21:0b:f2:67:d9:1d:ff:8f:da:a6:9d:77:f8:64:ac:a0:
bc:d6:fa:17:4f:e4:f9:61:aa:ac:0d:d6:aa:6d:29:9a:3f:f3:
75:d3:68:ae:de:9f:ba:6e:50:3f:0e:b8:67:a8:46:f9:e9:5f:
78:07:06:52:c7:b5:44:99:81:d2:ad:45:ab:25:58:35:7c:e6:
55:63:dc:ce:eb:aa:c1:92:8f:51:70:ee:59:3b:e9:bf:42:9a:
df:0f:d4:08:d9:77:dc:99:d5:20:30:0a:ce:31:35:44:1b:9b:
a1:68:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:06 2026 by rpki-client