This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
File: 2rsdAWAvFSERMu1IGFqZs2IlEX8.mft (raw, json)
Hash identifier: DYsi9pH25LhW1lboiYmeuJm5mtDWSbfUWHFM7nXj/R4=
Subject key identifier: 8A:B1:A5:C1:30:C9:8C:B8:BD:60:DB:59:36:16:45:4D:2F:6C:44:EC
Authority key identifier: DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
Certificate issuer: /CN=dabb1d01602f15211132ed48185a99b36225117f
Certificate serial: 019C43C7060AFCE9DB118075F4AA58FEB4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
Manifest number: 107C
Signing time: Mon 09 Feb 2026 19:00:42 +0000
Manifest this update: Mon 09 Feb 2026 19:00:42 +0000
Manifest next update: Tue 10 Feb 2026 19:00:42 +0000
Files and hashes: 1: 2rsdAWAvFSERMu1IGFqZs2IlEX8.crl (hash: Y9YXMmJiEYeWH9mTlQ4B9s+r4G4tVAjFACJYzEdNCgQ=)
2: g5H3jVqYNQpriA9TInAd41VghDM.roa (hash: 3r7gHJ0JlonEqSVqkHhQarvmMlG4HS20KpOoGGPQ51I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:06:0a:fc:e9:db:11:80:75:f4:aa:58:fe:b4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dabb1d01602f15211132ed48185a99b36225117f
Validity
Not Before: Feb 9 19:00:42 2026 GMT
Not After : Feb 10 19:00:42 2026 GMT
Subject: CN=8ab1a5c130c98cb8bd60db593616454d2f6c44ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:bb:f9:7a:bc:f4:93:e1:f4:17:4e:4d:1a:
e4:7f:c6:a8:af:7f:ea:ac:ff:6a:84:e3:40:21:e3:
3e:db:96:31:60:4c:86:eb:66:19:41:69:6c:d0:cf:
f4:50:a2:7e:90:6c:0c:5e:fc:a0:d9:8e:ee:57:e2:
3d:33:35:26:27:52:77:fc:ba:d8:25:27:3d:b2:76:
ee:77:f9:51:79:49:31:7b:ee:bc:76:59:73:d5:73:
d3:5d:ec:38:54:63:4c:94:f1:30:a4:71:68:86:a8:
55:6a:c2:0f:3f:bc:35:7c:38:2c:6a:9b:8e:16:8e:
d7:49:a7:98:e8:eb:77:bc:de:69:ba:20:0f:e9:4c:
89:31:1a:68:45:5a:4a:02:d3:90:09:7b:24:98:a2:
de:e5:31:79:9d:a8:ca:96:d0:6e:93:bb:95:7e:32:
ab:8f:71:d5:ab:e8:07:84:71:38:3a:88:87:03:a4:
a4:8c:f7:e3:1f:c8:60:cd:1b:89:22:d1:a6:6f:bc:
d4:92:1a:12:12:b0:82:03:9b:27:f9:c8:a6:85:16:
84:58:0b:45:a6:58:36:22:7b:58:0f:05:2e:f6:49:
da:82:cd:85:3f:30:19:75:4b:4e:48:20:14:1c:e9:
c7:b3:99:9c:a8:67:6e:98:81:76:2c:65:72:99:5c:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B1:A5:C1:30:C9:8C:B8:BD:60:DB:59:36:16:45:4D:2F:6C:44:EC
X509v3 Authority Key Identifier:
keyid:DA:BB:1D:01:60:2F:15:21:11:32:ED:48:18:5A:99:B3:62:25:11:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rsdAWAvFSERMu1IGFqZs2IlEX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9330bf-ab6c-442c-b3b5-6a39d0ef72c0/1/2rsdAWAvFSERMu1IGFqZs2IlEX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4f:7e:ec:f1:f2:96:5b:6c:cf:1b:a4:41:81:5e:75:ad:bb:
11:c5:6d:34:73:3e:e7:77:8a:f5:d9:09:80:0d:5b:c1:ca:3b:
c5:0f:a8:83:c0:2c:1b:f1:aa:29:d9:f7:3d:08:78:08:2b:04:
9a:6e:c6:3f:c0:d4:b8:ed:e2:13:4c:b5:55:88:f3:67:86:68:
b3:fb:94:4a:23:2e:ec:06:45:78:62:e5:d1:5e:12:1e:34:1e:
f6:a3:62:d2:8d:72:24:25:9a:10:e9:1e:72:ae:bc:f1:83:23:
c0:7e:5d:d6:43:ba:33:b7:0b:d3:63:f9:04:b4:ac:90:75:de:
af:da:90:21:b8:03:2e:0e:c2:6a:06:63:64:c2:f5:8f:c8:8b:
bf:5c:da:b3:b7:58:a4:6c:a5:dc:33:9d:3b:91:f5:27:e3:bc:
bf:63:e7:c1:52:20:14:87:b9:c9:23:9b:f8:3c:b5:89:f3:26:
bd:67:5a:a5:e8:eb:9d:17:c4:0f:c5:72:3f:13:f7:04:31:3c:
61:a3:8b:e4:d1:59:f5:d2:28:7c:23:69:86:1d:3c:db:e3:72:
0f:23:0d:a3:07:ac:e1:15:d3:9d:94:1d:5c:f0:1f:b6:a1:fc:
f8:a9:70:fe:57:d2:62:c4:86:28:27:17:ff:cf:87:51:2a:2a:
bd:d8:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:03:59 2026 by rpki-client