This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
File: cIPC79QTNUG2RbZheEzd1JxInFs.mft (raw, json)
Hash identifier: V3twDA1CeSgTMEVBk6CQOwBRgN1J3s7+7Bb41A5kgCY=
Subject key identifier: 6C:0E:49:1B:56:7E:E6:13:B0:1D:0A:E9:1F:FB:ED:35:16:E9:B1:CC
Authority key identifier: 70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
Certificate issuer: /CN=7083c2efd4133541b645b661784cddd49c489c5b
Certificate serial: 019C421038154537101A88542BBBB4C47F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
Manifest number: 027D
Signing time: Mon 09 Feb 2026 11:01:24 +0000
Manifest this update: Mon 09 Feb 2026 11:01:24 +0000
Manifest next update: Tue 10 Feb 2026 11:01:24 +0000
Files and hashes: 1: TaoqRVy7G_jEt0HESH3wN5n6mvI.roa (hash: R8307lrtH91HT+4pfCapN7jLYcBGbwE8JwAjSXA57TU=)
2: cIPC79QTNUG2RbZheEzd1JxInFs.crl (hash: hjake1fbhLSD3rIqXAIjlX0RrQo23ZzPeinYbpxiLgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:38:15:45:37:10:1a:88:54:2b:bb:b4:c4:7f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7083c2efd4133541b645b661784cddd49c489c5b
Validity
Not Before: Feb 9 11:01:24 2026 GMT
Not After : Feb 10 11:01:24 2026 GMT
Subject: CN=6c0e491b567ee613b01d0ae91ffbed3516e9b1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:12:e9:71:31:87:13:36:9e:db:94:aa:92:56:
3f:2b:a7:39:d9:46:5f:f9:82:53:2f:99:81:a9:15:
6a:68:d6:63:94:e7:8a:56:fb:fb:bf:15:33:49:aa:
ca:21:c1:41:59:3e:e3:f3:01:2e:ea:7f:d6:a7:10:
da:e9:68:81:40:a3:59:32:64:59:c5:fd:d7:53:82:
f4:17:3a:45:e0:0c:aa:e6:68:39:d6:ea:5f:99:0f:
eb:19:d0:87:0e:f9:89:45:8c:77:3c:32:3f:5f:15:
38:0a:54:fd:e4:ec:43:aa:f1:5e:78:c2:ec:ed:d6:
d7:dc:7a:5c:bc:f3:1e:22:79:52:b2:86:3e:46:85:
f0:31:b7:20:88:2c:26:c9:ea:b0:cc:50:30:c9:c1:
b4:af:2f:a2:07:cc:b5:61:2f:cc:27:80:27:4c:e0:
0d:40:3d:31:cd:08:61:36:f7:6d:5d:53:1c:38:0d:
c4:c1:39:c2:d5:0d:f6:89:6a:a1:9f:5e:34:6e:fd:
fc:11:6f:b6:cf:7c:fb:c7:0a:7f:fa:bb:dc:dd:ce:
63:15:df:73:89:fa:dd:ae:e1:9a:d7:e4:7a:45:cb:
d5:8f:88:ca:3a:1e:6f:e2:da:65:43:73:7f:47:2a:
5f:3e:88:f6:36:dd:6e:bf:3a:61:99:56:56:36:f6:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0E:49:1B:56:7E:E6:13:B0:1D:0A:E9:1F:FB:ED:35:16:E9:B1:CC
X509v3 Authority Key Identifier:
keyid:70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0e:36:de:f3:63:92:b6:7f:3b:f7:df:e2:28:b2:d8:18:e1:
be:30:51:a0:30:a3:67:31:9f:78:61:68:cd:73:aa:14:65:0c:
c2:58:c7:8f:70:89:9a:3b:ae:fe:1e:8e:c8:e5:ba:d1:5a:9e:
c4:53:af:ac:bb:85:54:12:e7:d5:fb:f6:15:35:c8:5b:fd:4e:
f9:03:69:b5:d0:2a:59:b8:ff:fe:1b:3a:5c:c1:45:e3:cb:27:
ce:32:34:a6:2d:ea:51:af:64:43:f9:0b:63:2c:67:fd:49:42:
61:a8:07:9d:00:f5:fa:28:ef:43:dc:36:c8:f0:ce:d2:7e:c2:
ac:67:c9:82:e8:7e:65:a6:c4:eb:f5:0a:de:9f:bd:53:87:8f:
f7:bc:74:19:56:47:7b:2e:d8:98:06:d3:d7:a8:66:c4:5c:20:
40:20:c7:51:cb:c1:42:fe:aa:a0:fe:56:fe:7c:82:9f:a0:d2:
f5:f0:9c:77:d7:36:f2:7a:21:72:94:98:ab:7e:aa:43:22:60:
d0:3c:82:28:38:46:03:3d:8b:39:0a:3b:1d:73:92:a2:95:d0:
7f:1e:c9:b4:5d:75:fb:f2:7f:25:19:bb:92:04:dc:55:6e:16:
c6:20:bd:51:e2:ad:8d:58:63:d0:5a:1e:d5:82:e5:67:b3:6d:
89:25:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:52:51 2026 by rpki-client