This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
File: MryjKc1OJWX_DRPoNVpuxMwXlOE.mft (raw, json)
Hash identifier: YV/iYprEOHRsRI6CCHUlAr+Iv0MvSmDdcCnEZE2sF0I=
Subject key identifier: 73:D8:C8:AD:DF:05:3C:81:2E:94:A7:71:EE:25:46:15:4C:A1:3C:E2
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Certificate issuer: /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial: 019C427DEB612D58E243449CDACAD126260F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
Manifest number: 0EC4
Signing time: Mon 09 Feb 2026 13:01:14 +0000
Manifest this update: Mon 09 Feb 2026 13:01:14 +0000
Manifest next update: Tue 10 Feb 2026 13:01:14 +0000
Files and hashes: 1: MryjKc1OJWX_DRPoNVpuxMwXlOE.crl (hash: KiHaj++TCkqMSM5KCHMy6JgcMnXyK3iSYVr8bVhF4m8=)
2: wHtvJqmwNCY-vCxa2otVGROt_P4.roa (hash: aFdCOkuMBYohLf36Al1bb/5mWntH9RuXNV5T0j1Zh/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:eb:61:2d:58:e2:43:44:9c:da:ca:d1:26:26:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Validity
Not Before: Feb 9 13:01:14 2026 GMT
Not After : Feb 10 13:01:14 2026 GMT
Subject: CN=73d8c8addf053c812e94a771ee2546154ca13ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:6b:bb:61:6c:b9:36:23:ef:85:c6:5e:37:
bf:19:11:af:c8:7f:99:80:65:c9:22:3a:3a:83:e5:
f3:6a:cf:cc:0b:25:52:89:22:0f:5f:15:c3:18:28:
dc:3a:7d:35:48:6d:00:9b:89:35:cd:05:f6:18:7a:
b7:f8:e6:3f:8a:73:07:04:e9:b9:bd:5f:0b:f9:97:
3f:8a:14:66:7c:da:ad:37:e7:01:9c:81:49:ac:d6:
8e:25:e3:ea:32:2e:4c:0a:ec:11:af:03:af:37:92:
ff:c1:09:f2:99:bd:81:78:cd:b3:de:2d:d6:67:d8:
98:b3:ca:8c:de:4d:68:d8:7c:88:1a:3c:7c:59:12:
06:6d:27:9a:bf:fe:22:a4:d8:0c:e3:cf:2a:0c:e0:
f8:dc:42:05:bd:e4:0e:50:37:13:c9:87:e8:b3:f7:
e0:b8:54:11:95:2a:81:57:11:a5:17:89:cd:f0:99:
ce:dd:ed:1c:e5:0e:8d:96:32:2f:bd:88:95:c5:65:
de:cb:09:e0:70:e4:af:dc:ea:c4:98:6b:7b:93:5f:
08:01:04:b9:98:b6:44:c3:f3:ed:32:32:7c:45:24:
6f:c9:03:66:b2:36:21:ca:70:3d:84:f2:8a:03:90:
3a:29:8d:b6:92:fc:62:0e:c5:5f:fe:93:49:80:69:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:C8:AD:DF:05:3C:81:2E:94:A7:71:EE:25:46:15:4C:A1:3C:E2
X509v3 Authority Key Identifier:
keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a6:53:08:de:14:1a:56:07:89:f3:c2:64:95:77:b7:b8:0e:
7f:ed:e8:18:ab:ba:52:69:4d:ce:18:f6:44:e4:14:08:13:2d:
9c:3c:68:06:95:5d:c6:ed:13:bb:0e:a0:de:3d:11:31:58:88:
ca:be:03:e7:39:a2:5f:54:3d:39:6b:18:f7:3f:15:01:86:9c:
a4:7b:d6:9d:e8:65:31:2f:4d:eb:c4:d4:88:39:dd:eb:22:e4:
3a:11:14:76:c8:be:91:70:f8:4f:97:8c:68:fa:85:88:89:f4:
a2:eb:f4:58:12:11:7f:9e:5d:1a:10:8c:6d:1c:18:d9:f6:b3:
90:f8:14:e7:1a:83:06:d3:ec:d6:27:ef:f4:9e:52:23:78:2e:
15:b0:1f:a8:f7:c1:f8:ce:65:01:ae:3b:73:e4:0a:e9:a0:bf:
48:70:d7:ec:a9:46:d0:b8:24:de:28:2c:5b:32:92:01:97:4e:
2c:a8:55:e2:12:ef:2e:16:ad:06:78:2b:7f:f2:2a:67:ef:1b:
06:92:b4:14:c6:ce:b2:1c:8c:27:90:5c:aa:6d:61:09:09:ff:
bd:1f:d0:77:28:e6:a0:9d:fc:5a:2d:b6:e7:27:49:12:62:c5:
8e:6c:79:1b:93:8d:3d:95:23:b9:39:ec:c3:d0:70:5d:e6:f3:
9b:8b:aa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:39 2026 by rpki-client