This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
File: SUqFZSdrSiUbpXPdbV9fh4I469I.mft (raw, json)
Hash identifier: Us0/qiCU8X0NFAcxkOAvk7ZfJ1u/mq9fj7NIlIEWBYA=
Subject key identifier: 23:E2:F6:CD:20:31:97:0D:FA:3D:A3:41:4E:23:07:08:70:E2:FF:80
Authority key identifier: 49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
Certificate issuer: /CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Certificate serial: 019C42EB5D48720DD6E4F3211173804BDD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
Manifest number: 138D
Signing time: Mon 09 Feb 2026 15:00:46 +0000
Manifest this update: Mon 09 Feb 2026 15:00:46 +0000
Manifest next update: Tue 10 Feb 2026 15:00:46 +0000
Files and hashes: 1: SUqFZSdrSiUbpXPdbV9fh4I469I.crl (hash: RIpABpmYMomBYsKhwOzsr/5EH4PomN9Wd4DZfClo7Kw=)
2: aq077HDVuYpFz4tohOgQZVXtR0I.roa (hash: lmR3p1MzRx0IGSbTUTZO/Vwf3/td5VWtWsrVAx4InFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:5d:48:72:0d:d6:e4:f3:21:11:73:80:4b:dd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494a8565276b4a251ba573dd6d5f5f878238ebd2
Validity
Not Before: Feb 9 15:00:46 2026 GMT
Not After : Feb 10 15:00:46 2026 GMT
Subject: CN=23e2f6cd2031970dfa3da3414e23070870e2ff80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:a9:1d:b3:02:3c:16:8a:94:bf:23:19:8b:
47:e3:f3:c7:fd:c5:80:9f:02:9d:88:2e:56:f3:f0:
27:3d:eb:ab:9b:0e:3d:ca:ad:5a:b7:58:a2:a0:25:
03:68:cf:5c:4c:09:1e:8a:84:0c:5c:7f:06:e1:3d:
eb:b2:b5:a4:26:3d:7b:0b:18:2f:e3:75:77:7b:f3:
f0:29:02:7e:1c:64:35:0f:f2:b4:c1:a1:c7:0f:fd:
2a:5b:da:7d:c3:a7:ff:8d:68:63:84:09:72:b4:5a:
f1:96:2a:06:a9:3e:10:59:57:3b:e3:d0:19:ec:8a:
b5:d2:ee:d8:ab:8a:50:27:45:3c:e7:70:c9:8a:20:
5c:bc:b0:bf:a0:08:f6:5d:29:42:4f:7b:04:a1:3a:
48:e9:6d:f7:03:3e:08:5d:0e:d9:b1:fa:c2:43:42:
c4:1f:81:c1:f4:f1:8d:5b:19:b3:eb:7a:9d:1c:cc:
1d:8c:a7:4d:f2:07:45:46:31:92:58:37:7b:08:79:
38:c8:95:33:88:8b:4f:16:17:1a:85:2d:68:f1:bb:
d4:76:81:c9:0f:0e:6e:c9:87:c4:2a:55:e2:b7:f1:
b7:ea:74:95:29:6a:28:cc:21:7c:58:7e:87:98:7a:
4b:a8:57:d8:b9:2d:d7:7f:18:f8:a7:43:c0:1a:97:
fc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E2:F6:CD:20:31:97:0D:FA:3D:A3:41:4E:23:07:08:70:E2:FF:80
X509v3 Authority Key Identifier:
keyid:49:4A:85:65:27:6B:4A:25:1B:A5:73:DD:6D:5F:5F:87:82:38:EB:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUqFZSdrSiUbpXPdbV9fh4I469I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/18a2fd-15f5-43e6-b786-c6d9f915bd8b/1/SUqFZSdrSiUbpXPdbV9fh4I469I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d2:1d:2f:4e:f1:f2:6c:9f:8c:2c:b8:77:b8:8b:ec:9c:ae:
f9:3f:9f:ff:ff:50:ba:1c:62:d8:43:f9:6a:74:ec:66:57:d5:
06:9d:d9:5f:99:14:17:03:b5:8f:6d:f9:6d:f7:5e:c7:ce:c6:
ca:cb:c7:43:f8:7c:73:7c:58:0c:10:c6:b2:79:b5:ca:82:d0:
aa:0e:a3:69:af:24:2f:21:3b:78:73:27:46:05:1c:c9:8b:1f:
59:c4:c2:0f:6a:ce:70:c9:5a:03:d7:04:40:ee:51:19:8f:d6:
3a:b0:69:88:9e:e8:79:c9:93:6f:d5:63:5e:b6:b1:32:c6:a5:
a9:59:9e:bb:2f:10:12:f4:a8:a8:af:2f:f5:fa:df:51:09:59:
67:cc:01:1d:4a:77:c0:d5:31:04:aa:54:a7:e0:36:5d:76:12:
18:88:57:51:54:dc:ff:29:fd:6f:70:ca:ad:70:ac:f9:0d:98:
8f:13:00:98:fc:be:d9:ba:3b:49:0b:09:15:1e:53:82:8e:b2:
ab:ea:8a:67:1b:fb:b6:2e:82:c0:bc:7b:8f:85:0a:7e:c0:72:
5c:29:07:d1:10:77:8a:fe:fb:ff:a7:89:e6:1d:f9:ce:11:27:
bf:6e:75:ad:2a:60:f6:d6:91:c2:0b:c1:41:67:1f:62:eb:ef:
86:f3:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:26 2026 by rpki-client