This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
File: R1oGyte9DD25-KOB8euc1sdaqyg.mft (raw, json)
Hash identifier: h0LglzZm51tMRNULnJPyS1Sk7VE9TIVcRlX/P55FRsU=
Subject key identifier: 1F:C7:90:B0:3F:42:CF:6D:EA:CB:1F:E6:79:0C:58:AD:B4:2C:58:09
Authority key identifier: 47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
Certificate issuer: /CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
Certificate serial: 019C44A2BDBA4BCE8F0808BBFBB640F92856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
Manifest number: 03CC
Signing time: Mon 09 Feb 2026 23:00:41 +0000
Manifest this update: Mon 09 Feb 2026 23:00:41 +0000
Manifest next update: Tue 10 Feb 2026 23:00:41 +0000
Files and hashes: 1: R1oGyte9DD25-KOB8euc1sdaqyg.crl (hash: puW5zdK5P5jeNSbtW3uuxS+vYZFkIanwP9zCDW6vwhM=)
2: WssIiJPoFY7lcNnyGVymIImcWDA.roa (hash: k9Vj39pdgub01PhKYMQsaWQH2pHY+R5nnRnCmdZFUMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:bd:ba:4b:ce:8f:08:08:bb:fb:b6:40:f9:28:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
Validity
Not Before: Feb 9 23:00:41 2026 GMT
Not After : Feb 10 23:00:41 2026 GMT
Subject: CN=1fc790b03f42cf6deacb1fe6790c58adb42c5809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:a9:16:42:09:05:43:d2:a7:f6:c4:7c:4e:
d0:28:24:b6:b5:5d:88:f7:b6:46:a1:bf:85:08:e8:
f6:22:67:03:6e:d7:a7:d6:f4:62:c4:4d:b9:be:e3:
d5:37:a9:35:ab:5f:55:f6:db:df:6c:8c:ae:f1:74:
e6:4f:d2:c4:17:fd:39:7a:ee:68:2d:7e:6d:1b:fc:
bf:e0:2d:20:6b:c4:70:7c:a5:c7:64:82:fa:b6:0a:
89:14:6d:81:59:6d:82:f3:82:4f:e3:1e:3d:03:04:
9d:17:f9:14:04:83:9e:55:b5:18:2a:41:6e:89:b0:
8f:17:f2:48:f8:a9:0d:fb:82:fc:c4:45:00:93:03:
03:14:5e:b7:b5:d7:86:e0:a7:bf:32:95:e8:4f:cd:
90:72:08:c0:43:b4:d0:38:76:25:fd:fd:65:aa:f2:
d0:c7:05:fd:34:65:dd:55:ea:bb:8e:81:e2:63:1a:
ce:dd:75:5a:52:cf:a4:c2:63:60:62:6e:b0:8a:cf:
60:a6:5a:72:dd:3c:d0:a2:18:a5:3d:89:2d:ab:aa:
f0:e5:00:5b:ff:49:9d:50:a2:c2:ad:a9:3e:50:0d:
db:da:0e:8f:0e:49:46:2c:25:93:13:72:78:47:93:
a6:d4:ad:07:4d:22:2d:16:38:f5:e7:b9:3a:1a:ee:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C7:90:B0:3F:42:CF:6D:EA:CB:1F:E6:79:0C:58:AD:B4:2C:58:09
X509v3 Authority Key Identifier:
keyid:47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cd:ca:3c:df:5f:dc:3e:37:75:94:c6:7b:7f:98:4d:a4:91:
30:8c:c5:53:8b:34:f7:78:03:05:6d:d0:ac:15:87:1d:92:49:
7c:63:1e:81:cc:59:56:db:26:c1:93:f4:8e:5a:75:8e:70:b8:
d8:82:1e:10:4f:78:c9:ef:fa:bc:dd:5b:91:66:a3:b7:7b:40:
ec:bf:ac:0c:c5:d6:2c:4f:76:09:db:90:96:13:58:58:7a:26:
82:1f:94:c8:55:43:43:45:4f:bf:81:77:b1:d1:f0:58:e9:5f:
a7:01:e6:59:51:3b:fe:da:d9:29:9f:a4:5d:e5:52:e3:e3:71:
49:3b:97:89:51:64:c2:31:7e:f1:27:de:2d:05:87:ab:3d:c0:
d6:1d:1a:19:ad:a7:fb:1f:5b:90:2e:99:d9:1b:1d:ea:35:b5:
a9:bb:4d:75:4d:1f:15:16:8a:38:8f:c2:ab:da:89:00:88:d6:
c2:4c:63:36:ea:65:3c:c3:47:31:36:26:e8:7f:be:e9:85:06:
46:bd:28:7a:2f:f1:48:08:60:0f:ee:39:cd:d2:6f:4a:f9:34:
6a:43:13:44:9d:4d:e1:1b:21:df:5f:c6:cc:76:69:f4:93:2c:
e6:ec:85:3b:3a:0d:c6:9e:a7:8d:a4:86:55:5c:86:7c:f2:f7:
d0:0a:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:04:55 2026 by rpki-client