This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: DgFZO55knXcrU6aHQBe7atrVAanYaMbIhDa/9glJw5U=
Subject key identifier: 2D:D7:AD:6F:1D:E8:DC:A5:16:4B:BB:5E:4D:A2:19:CF:20:BF:89:B2
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 019C424653D294AC2562A6FD1D694AE12CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 12:00:30 +0000
Manifest this update: Mon 09 Feb 2026 12:00:30 +0000
Manifest next update: Tue 10 Feb 2026 12:00:30 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: zquGiu5rNbGwkfCsg9DRZgxIue8B58Z5LWvGapcUHUo=)
2: oB9vecBEFrYggxsxtq3fiITzJ2Y.roa (hash: dq4CVE4zFGUyDpHFmLkSZ9sIR2d8JjqnFKVgnpPDCIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:53:d2:94:ac:25:62:a6:fd:1d:69:4a:e1:2c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Feb 9 12:00:30 2026 GMT
Not After : Feb 10 12:00:30 2026 GMT
Subject: CN=2dd7ad6f1de8dca5164bbb5e4da219cf20bf89b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:9e:6f:b7:2b:2f:6f:62:b7:46:b6:35:24:
60:9f:17:11:78:70:d1:a6:77:69:b7:4f:c9:c2:7f:
81:38:5b:bf:ec:83:5b:39:ac:8a:19:25:9e:a7:5a:
3f:cf:62:67:e0:58:5a:94:29:dc:d6:ec:bf:92:ad:
e4:53:96:51:29:b2:79:4b:b1:75:17:14:3a:66:25:
b5:9c:77:c4:cc:f9:d6:58:06:3e:94:77:af:54:03:
0c:81:e3:44:45:c7:e8:95:b6:c5:8e:b7:ca:53:d7:
43:86:b7:c0:52:6c:a5:42:d5:f3:84:db:1e:1f:69:
0d:90:c5:3c:b5:b7:5c:ae:2e:9a:6c:a4:b8:a5:72:
f0:b1:ca:b1:04:e3:23:b6:99:a3:ca:76:10:8a:79:
cd:a4:04:47:0c:73:f6:7f:df:e2:68:07:e4:68:5d:
2e:c2:7b:8e:27:2b:90:16:98:b4:86:89:46:fb:ed:
28:3f:de:57:2e:c3:5d:2d:ab:d4:91:6a:9a:48:1f:
b4:59:ea:49:75:f6:e9:85:02:68:55:4d:9f:8e:cc:
97:c3:75:1c:be:a4:c5:a2:62:00:cd:91:4d:bc:0f:
fe:17:e5:57:45:09:db:a9:44:63:33:77:6a:3e:f1:
4c:b8:48:17:c3:18:1d:6a:14:b9:96:35:01:1f:cd:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:AD:6F:1D:E8:DC:A5:16:4B:BB:5E:4D:A2:19:CF:20:BF:89:B2
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ed:07:3a:aa:d1:7f:cf:05:a9:2e:5b:8a:9d:36:a5:10:8f:
88:72:80:2c:20:96:49:78:db:0f:8d:9b:21:5f:0f:e0:5d:5f:
31:70:ed:06:13:7c:c8:c8:e5:41:58:d5:b0:3c:ce:82:91:1b:
0f:6e:d0:eb:f5:48:fe:aa:75:51:01:af:b5:60:4c:54:89:90:
43:3f:2c:d2:d0:30:3c:8e:ed:06:13:cf:6f:22:4c:7b:b9:12:
06:1a:75:57:36:ba:71:48:88:1a:d2:2d:72:6d:5d:bf:4b:2b:
aa:b7:30:90:9d:bb:b6:31:ad:10:0b:14:c4:28:0e:a3:ad:f4:
79:f9:69:8a:50:57:2a:de:36:03:2d:89:d5:28:ab:4f:01:2b:
f8:6b:04:ed:a9:00:95:fe:28:5d:84:77:4b:e6:64:1f:56:41:
d7:38:76:64:99:e7:d4:7b:b0:12:90:41:51:e5:a2:e1:5e:17:
00:68:77:98:55:11:76:86:ba:18:92:74:9d:17:40:41:c5:b3:
c6:9a:9d:38:62:98:63:8e:48:9a:61:74:8d:4f:e5:47:51:09:
a0:48:6d:8e:54:91:b9:f7:30:dc:16:32:73:79:c4:68:97:67:
88:04:dd:7b:60:eb:3c:a5:e5:1e:db:1f:5f:75:a6:10:2c:bb:
bf:0f:de:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:50 2026 by rpki-client