This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
File: 1s58fCGSd6ByuiaVTVyj7M6ymEo.mft (raw, json)
Hash identifier: UtB/OG7Q9gN3RYGJEg7NEHzLdYYqDZKFt+FweNpyyZI=
Subject key identifier: 36:BC:2A:BC:19:1A:8D:1F:EA:B8:67:B5:15:90:55:E8:58:57:60:B6
Authority key identifier: D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
Certificate issuer: /CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Certificate serial: 019C424669EF1FF684149A0F44A5F552FFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
Manifest number: 0A
Signing time: Mon 09 Feb 2026 12:00:36 +0000
Manifest this update: Mon 09 Feb 2026 12:00:36 +0000
Manifest next update: Tue 10 Feb 2026 12:00:36 +0000
Files and hashes: 1: 1s58fCGSd6ByuiaVTVyj7M6ymEo.crl (hash: hV5FDHVLkKy1XKD5tcmWEMbhpTmDWvjRarekCIZb2M4=)
2: PF2OCRtQsy2fSZDNKDqwzoNCB1Y.roa (hash: M52yhP6y8g0o+VHUIMWLcgdfgxWY8wSI1j3oDTkEbrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:69:ef:1f:f6:84:14:9a:0f:44:a5:f5:52:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce7c7c219277a072ba26954d5ca3ecceb2984a
Validity
Not Before: Feb 9 12:00:36 2026 GMT
Not After : Feb 10 12:00:36 2026 GMT
Subject: CN=36bc2abc191a8d1feab867b5159055e8585760b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e9:20:d1:eb:24:fc:89:6c:da:59:fe:83:c8:
b5:40:d0:30:3b:49:51:e8:48:61:b2:cf:be:19:ab:
16:c7:3f:cd:43:2c:4d:e0:ef:ea:4a:f7:06:82:40:
ec:08:10:c2:d6:23:27:0a:9a:de:d2:30:c6:68:df:
4a:5f:7d:9c:c4:bf:3f:2b:aa:25:5b:a8:37:44:0b:
b8:03:da:42:ed:3a:ca:10:b6:21:cd:58:ff:ad:d8:
a6:b6:a6:fa:85:2c:6b:80:9c:7e:fe:50:16:28:be:
c8:6d:c1:86:e0:76:25:d2:31:50:ff:83:5f:59:49:
36:c3:66:fb:6f:7f:dd:78:cf:0a:44:8a:17:51:97:
6a:72:2a:c1:ba:f8:4a:18:e8:09:c4:27:1e:ba:6f:
8d:bc:44:af:88:ef:08:04:f5:c3:eb:5d:35:48:c9:
1d:fa:35:6c:01:78:2c:b4:31:9f:e6:cb:f0:5a:1a:
71:a6:d9:63:47:81:da:dc:fc:2b:09:e9:80:30:5e:
d4:9d:4c:45:67:ea:a5:7f:33:c7:f8:75:c3:85:05:
29:0b:6c:84:c2:7c:37:13:a9:80:83:2e:3b:83:ee:
4b:40:87:1c:5a:dd:19:67:a5:f5:d1:21:97:d0:50:
27:81:0e:fc:00:b7:e6:2f:a1:96:f8:d4:2e:b2:de:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BC:2A:BC:19:1A:8D:1F:EA:B8:67:B5:15:90:55:E8:58:57:60:B6
X509v3 Authority Key Identifier:
keyid:D6:CE:7C:7C:21:92:77:A0:72:BA:26:95:4D:5C:A3:EC:CE:B2:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s58fCGSd6ByuiaVTVyj7M6ymEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/33c771-7704-46b9-bcd0-93ae0c3e2736/1/1s58fCGSd6ByuiaVTVyj7M6ymEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2e:4f:61:73:ae:cd:39:52:eb:65:11:63:56:80:e6:39:ea:
e6:97:e5:be:83:d0:4f:7e:94:97:45:8b:92:46:16:9d:d8:39:
a5:54:28:01:cd:ac:55:03:6a:ed:a8:97:81:28:f8:a5:98:2a:
ef:cf:63:a1:fe:02:0b:60:d5:a1:de:f6:c2:16:06:6c:9c:c9:
8a:52:b2:50:0a:a2:da:66:6e:a1:5b:20:af:b0:6d:ba:d0:51:
09:9e:90:a8:8e:6c:62:5b:11:cd:5a:12:3a:30:f5:4e:25:3b:
d0:7a:fe:49:ea:34:7a:62:29:28:86:71:50:5f:6b:2a:17:72:
52:25:10:6a:2e:1e:c6:48:e7:40:b9:36:1f:a7:b4:94:1e:b1:
3f:c9:8f:af:83:91:71:92:45:cd:66:12:4f:65:81:fa:8a:47:
f0:43:a6:08:4e:47:d1:09:01:93:18:52:76:b9:02:45:c6:39:
23:64:6b:85:b6:8c:04:c8:ef:94:f0:28:cb:3e:38:2f:85:29:
a5:89:18:b7:9a:9a:5d:3b:b8:e8:68:d2:de:be:4e:b5:7d:97:
05:5c:34:1d:2b:04:f7:29:17:65:8c:83:b0:6c:b7:49:93:4d:
be:37:b7:c3:95:44:04:91:da:a0:18:42:3f:9a:a0:cb:b8:de:
dc:d7:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:26 2026 by rpki-client