This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File: c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier: XjuBbLqKsRC655ZpvKxprhJLPrjapn55CY9VaQ5ilQU=
Subject key identifier: 6D:57:90:80:B5:8D:40:8F:83:13:4E:FF:46:B0:46:9A:D0:92:EB:98
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial: 019C446B9D6741D7FABC7A47B3A93BC6DED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number: 1012
Signing time: Mon 09 Feb 2026 22:00:29 +0000
Manifest this update: Mon 09 Feb 2026 22:00:29 +0000
Manifest next update: Tue 10 Feb 2026 22:00:29 +0000
Files and hashes: 1: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: TTAUtkYoemYUjgPJKLWfuvkJ5S00fSysSXlVg+/rKUM=)
2: r5XWJBGKNAQjzKjZKPXr5PFoepw.roa (hash: ky24FBG3oozcNo49stCKjgR7t7k44RW8nw/ONOs9Mb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:9d:67:41:d7:fa:bc:7a:47:b3:a9:3b:c6:de:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Validity
Not Before: Feb 9 22:00:29 2026 GMT
Not After : Feb 10 22:00:29 2026 GMT
Subject: CN=6d579080b58d408f83134eff46b0469ad092eb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:5f:9b:1e:90:39:d8:c9:64:a2:00:20:e9:
c8:32:b1:0a:49:56:08:ae:6b:fb:e4:34:46:15:9a:
ef:d6:43:bc:68:58:e2:1c:22:c9:ac:82:4a:c7:01:
b7:7f:16:09:7e:4a:50:1d:33:0a:68:64:07:fe:b3:
61:14:3f:2f:68:13:81:d5:f9:cb:c5:40:9c:15:27:
ef:c4:b1:9c:7f:e9:2d:16:11:e9:54:54:62:74:3a:
e4:b8:46:cb:d4:88:8d:63:f4:30:fa:9d:60:0d:7a:
5e:1c:0a:1f:b7:f1:c4:cb:83:9d:1d:ce:85:c2:00:
b3:db:1c:29:3e:e6:5c:90:7b:67:fc:39:25:a5:2b:
dc:c9:5e:6c:3a:b7:8b:33:dc:e7:43:99:2d:d3:0e:
84:0a:b2:5d:be:58:84:9b:ff:db:33:d0:82:39:f5:
30:48:ce:e5:b8:9f:71:56:bf:be:3f:f7:8d:31:61:
fb:a4:28:39:26:42:5d:51:1c:cc:77:80:50:f8:64:
bd:97:a6:11:2d:80:22:00:51:ac:7f:ce:57:c5:e1:
32:01:1c:4f:c0:23:e0:da:df:69:c2:75:a2:dc:3f:
37:16:a2:76:8b:8f:30:09:9d:7a:d7:ae:fc:57:b0:
7c:e6:8e:43:f0:6c:74:7c:6e:e7:43:10:f5:ac:d9:
9f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:57:90:80:B5:8D:40:8F:83:13:4E:FF:46:B0:46:9A:D0:92:EB:98
X509v3 Authority Key Identifier:
keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:04:b5:8d:ac:b4:28:7c:e9:39:a0:67:fa:71:11:14:aa:a7:
f9:f3:32:74:5b:38:b8:37:90:e4:4f:03:86:6a:10:43:e8:84:
df:2a:07:ae:a2:82:5b:ed:c1:9a:0d:b6:c7:2c:82:91:3f:2a:
41:67:d2:bf:b2:1b:ec:e8:27:c6:94:47:bf:06:5c:33:1b:d4:
0e:0d:01:2a:37:55:80:c5:42:39:1a:80:3e:26:22:30:cc:d1:
13:f1:68:38:dd:c3:18:58:15:74:46:8d:b9:a3:90:36:7e:9a:
56:9f:9e:00:03:d7:7c:5e:bb:9c:4b:c4:27:64:4f:a3:5a:b6:
64:7a:e3:5b:5f:4b:ec:b3:dc:bf:37:49:45:81:0f:d8:58:61:
90:36:e2:25:be:4d:61:00:e6:ec:8a:a1:6c:5e:c6:bf:16:32:
a8:07:a2:d8:a3:5d:a3:eb:ad:1f:55:81:50:cb:da:6e:4a:bc:
f1:66:16:14:8a:68:82:72:90:36:0a:78:69:dc:22:c8:06:e8:
b4:b2:2b:0b:cb:46:28:37:4d:59:66:4d:4d:57:d5:14:e4:d6:
f6:a5:b8:4c:a8:12:6f:59:ae:74:c4:44:1c:cd:01:7b:4f:63:
0b:12:85:28:72:16:cb:79:37:f5:db:9c:66:7d:ff:56:13:66:
66:49:2d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:22 2026 by rpki-client