This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
File: rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft (raw, json)
Hash identifier: zU+A9I1nhvQTDc7fNK4w5ecWIhOMNmJT1v4iv7wWn3o=
Subject key identifier: F2:61:89:F2:58:88:CC:82:DA:75:C6:E3:FD:86:35:6F:B9:1C:B9:C6
Authority key identifier: AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
Certificate issuer: /CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Certificate serial: 019C45103067DDE94EF2C950D13D46260DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
Manifest number: 0800
Signing time: Tue 10 Feb 2026 01:00:14 +0000
Manifest this update: Tue 10 Feb 2026 01:00:14 +0000
Manifest next update: Wed 11 Feb 2026 01:00:14 +0000
Files and hashes: 1: rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl (hash: giYiVjnrvGOUgHG9gJcjg4ALbEorlUNxQXZ1SQaObF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:10:30:67:dd:e9:4e:f2:c9:50:d1:3d:46:26:0d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Validity
Not Before: Feb 10 01:00:14 2026 GMT
Not After : Feb 11 01:00:14 2026 GMT
Subject: CN=f26189f25888cc82da75c6e3fd86356fb91cb9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:f1:57:bb:7c:fe:04:60:27:8e:24:39:95:
e0:7a:c2:dc:12:a7:65:c7:6c:3d:b4:f7:3a:d2:27:
96:e6:84:74:62:66:f6:ee:71:6c:a2:c2:51:de:e7:
70:b6:3c:5c:e9:de:67:14:69:73:2b:07:0d:0b:d4:
4d:60:02:57:8d:02:2e:e1:51:e9:b1:8b:69:7f:62:
af:28:c7:fd:23:0d:10:4e:a2:8e:d1:69:1a:8e:ba:
2c:63:09:d4:3a:67:25:75:48:7b:4b:4a:dc:51:0a:
53:9d:5e:f4:80:e6:cc:13:ed:f5:bd:87:a6:dd:1d:
78:06:75:ba:93:28:f2:36:7b:07:f6:dd:06:43:75:
4c:99:a4:6b:5b:10:bb:9a:84:8a:1b:45:62:48:cd:
b7:80:84:f6:9b:5b:5a:4a:d8:76:24:bc:7d:ad:4b:
48:d9:86:bd:9f:51:a9:73:04:90:cb:67:6c:2f:bb:
e5:08:94:8c:b9:b8:2f:95:c5:70:0f:88:68:6f:b0:
b0:73:c0:6c:73:81:2c:81:44:ec:08:8f:1e:a7:35:
4b:e3:83:b1:9c:a1:1b:14:0e:14:a8:96:1a:bd:48:
65:52:b0:ea:96:47:6e:16:5c:da:ba:12:9a:91:ca:
8a:89:64:66:82:19:57:a8:43:16:d5:5f:74:48:ac:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:89:F2:58:88:CC:82:DA:75:C6:E3:FD:86:35:6F:B9:1C:B9:C6
X509v3 Authority Key Identifier:
keyid:AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:43:4f:9a:fd:25:05:cc:bc:56:06:a8:ef:25:2c:91:d2:3c:
4f:aa:49:71:f5:be:cb:23:ea:ef:ae:8e:b9:21:dd:8d:5f:66:
05:39:a5:97:a5:71:4b:a0:93:e3:89:d9:f6:07:f4:85:96:bd:
2e:7f:46:d7:77:1b:ff:cd:e7:05:d9:e2:38:04:cc:fe:46:a0:
69:f2:7b:1c:d8:79:97:4b:fb:e6:02:c3:fd:7c:14:02:f8:25:
eb:c8:c1:bd:d1:d7:52:03:21:4c:75:b5:0c:15:61:66:2e:f0:
b1:6f:60:1d:8b:4e:6e:61:ba:f0:2f:9c:92:ed:0d:04:a5:a1:
ae:d0:96:a2:3c:6e:8c:c6:88:61:3a:b4:5b:38:80:7f:63:af:
e9:16:ce:2c:af:b3:bb:02:81:b1:6f:9b:12:47:ed:9c:82:b8:
cf:93:d8:db:43:ed:ee:77:89:5e:e1:a0:e0:b2:62:b6:ae:a8:
f7:d2:5c:95:30:10:a8:3f:22:92:2c:b6:65:1a:9d:c7:e6:84:
e2:ae:34:09:78:3a:bb:81:ed:f1:c5:64:04:ec:d7:cf:23:37:
59:43:6e:a7:98:31:4e:74:06:80:04:fc:33:56:f7:7f:ac:ba:
d9:f2:8c:0c:72:35:c4:e9:b8:23:78:1c:77:0b:46:c7:7d:9b:
6a:11:e7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:24 2026 by rpki-client