This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
File: 2x2jIYQ_n60TjmEV2FvuipILjh0.mft (raw, json)
Hash identifier: XSp2FUA2ItiYW6VGaOIPGHxvhUBeE32qsuguENtYZkU=
Subject key identifier: 3C:F6:E5:8A:1C:1F:C8:3E:0A:3A:39:06:B7:7A:09:BC:10:77:3F:FA
Authority key identifier: DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
Certificate issuer: /CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Certificate serial: 019C41A191191A6F2BE2F16B8EBE30235A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 09:00:33 +0000
Manifest this update: Mon 09 Feb 2026 09:00:33 +0000
Manifest next update: Tue 10 Feb 2026 09:00:33 +0000
Files and hashes: 1: 2x2jIYQ_n60TjmEV2FvuipILjh0.crl (hash: W3LBdsPyR7/Z9aJOlAARe3rQTqREeNXiS6QMuASKGOY=)
2: VEbdeDBfoS7OV3q8Pyt7XMZlTvw.roa (hash: ryGpV2N0yjPTa2J+772hPmPtDVApuFyLbz9EHlqw2ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:91:19:1a:6f:2b:e2:f1:6b:8e:be:30:23:5a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1da321843f9fad138e6115d85bee8a920b8e1d
Validity
Not Before: Feb 9 09:00:33 2026 GMT
Not After : Feb 10 09:00:33 2026 GMT
Subject: CN=3cf6e58a1c1fc83e0a3a3906b77a09bc10773ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:51:bd:ce:07:c6:8a:1c:d8:5a:8b:07:f7:
e7:fd:db:f3:ce:66:0b:0a:b4:84:a4:d4:23:20:65:
e7:d9:92:74:57:37:f4:e0:74:ec:ea:18:be:15:3b:
e4:84:9c:df:2d:32:db:4e:0b:c6:6c:95:49:08:20:
cf:12:0a:47:bd:30:77:94:d2:39:00:fd:10:16:dd:
9f:27:3a:f9:40:3b:f9:af:0c:43:d7:3e:25:5a:be:
33:67:e4:ee:a3:6d:ec:4b:37:20:65:22:3a:a8:92:
c3:60:e2:ed:fd:b8:0c:38:1c:f2:ec:6d:8d:ee:cd:
17:ab:bc:bf:06:19:ba:e9:2a:b9:a8:18:d2:9e:a9:
cb:11:74:03:62:54:e5:96:8f:e7:b0:82:40:fe:8e:
ae:f7:f7:35:d0:27:26:f2:eb:74:71:43:3e:24:3b:
ca:45:01:96:49:aa:6c:56:48:66:d4:81:00:ae:5c:
25:cc:de:50:dc:a0:7e:db:61:fb:92:04:48:3f:14:
7a:ca:4b:02:b1:c3:7c:83:0c:10:6f:98:ec:05:59:
79:5a:8b:38:d5:39:69:b2:c6:e2:91:f1:c8:4f:b5:
a5:9e:22:38:32:3d:7e:4f:d2:67:5a:fb:d3:dc:3a:
3c:f4:82:e7:bd:37:f4:65:88:62:2c:80:0a:21:8f:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F6:E5:8A:1C:1F:C8:3E:0A:3A:39:06:B7:7A:09:BC:10:77:3F:FA
X509v3 Authority Key Identifier:
keyid:DB:1D:A3:21:84:3F:9F:AD:13:8E:61:15:D8:5B:EE:8A:92:0B:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x2jIYQ_n60TjmEV2FvuipILjh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/064794-2c36-43d6-b800-739d62669f91/1/2x2jIYQ_n60TjmEV2FvuipILjh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c6:4b:2b:e3:d6:fe:98:b4:ff:bb:69:53:32:44:8b:3f:ee:
c2:0f:10:8a:e8:ec:1c:42:ea:81:19:b3:af:81:91:61:24:e4:
98:23:ba:73:ad:9d:f9:8a:5b:dd:f4:0e:8f:1e:70:33:0a:f0:
dd:6b:74:92:3e:48:c6:9d:ce:36:b2:e6:00:39:2c:52:29:34:
5f:6a:18:42:14:f1:d7:01:d2:8c:f3:d4:df:29:21:18:d1:20:
ab:82:07:db:74:0e:a0:15:9d:ab:f5:b7:35:6b:d3:2b:8f:39:
1a:6b:a7:15:29:e3:fc:02:2a:a9:78:f0:92:3d:dd:cf:84:b9:
98:95:1e:9d:4e:8b:59:a2:ef:1c:94:ca:30:20:af:aa:d4:b1:
33:08:bf:03:ac:42:b4:9e:ad:71:0c:65:81:a2:3a:f6:86:e8:
aa:3f:58:d3:cb:4e:c9:10:dc:6d:cd:31:fb:16:54:c2:8d:34:
9c:68:20:8f:56:20:c3:2d:89:68:0a:4e:99:20:a5:7c:8c:e9:
08:ec:69:97:92:1f:d6:1f:ce:fe:84:c2:c5:cb:af:7a:56:c5:
ce:9e:87:de:57:e7:2c:69:63:d1:63:81:cb:b2:5e:72:ab:5f:
1e:06:13:2b:7e:7f:ea:6e:bd:5d:bf:a3:26:47:8e:74:80:66:
5e:be:7b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:41 2026 by rpki-client