This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier: konlDYVznuveyyveQhIh1I0Z5qiUzYmtcn1HvnqiMHc=
Subject key identifier: 5C:58:E4:A6:D7:2D:50:AB:09:30:24:1D:49:FA:93:89:69:0D:83:25
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial: 019C42B417E6B3A113B2F17E4C5B85D85709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number: 0947
Signing time: Mon 09 Feb 2026 14:00:24 +0000
Manifest this update: Mon 09 Feb 2026 14:00:24 +0000
Manifest next update: Tue 10 Feb 2026 14:00:24 +0000
Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: jT6z5I23OjVnA8dyazg2LF4LI+8ZX/mvw6mZsm64Jgg=)
2: GYutIkRnUUe6rU3f0KqhJg3i2C8.roa (hash: T8JwYcJCmU9VHg+cmAioCuzk66qEr5evLlhmPjOOj8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:17:e6:b3:a1:13:b2:f1:7e:4c:5b:85:d8:57:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Validity
Not Before: Feb 9 14:00:24 2026 GMT
Not After : Feb 10 14:00:24 2026 GMT
Subject: CN=5c58e4a6d72d50ab0930241d49fa9389690d8325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:f9:2c:25:54:61:44:6b:27:b7:d4:ef:16:
35:3d:61:61:ac:80:cc:2d:56:9e:ca:7d:d1:75:89:
b9:f9:d0:3c:d8:97:70:34:fe:60:cd:e3:03:0c:20:
5d:a5:14:39:5a:ad:d6:84:47:90:71:f7:87:e3:42:
71:00:69:30:96:98:9d:2a:60:ea:fd:e4:3d:33:42:
f6:17:21:85:a1:34:b8:a0:fb:27:3a:8d:c8:47:2b:
2f:74:ad:32:c1:67:48:f0:67:76:6e:bf:ea:86:fc:
ab:e4:82:b7:1c:38:c0:63:e4:52:af:98:d9:22:6f:
39:2d:8d:b9:54:0a:a9:fe:67:cb:7a:18:22:67:9c:
2e:16:c7:06:df:3d:11:ee:5f:3b:e2:78:ab:cf:64:
3b:f1:ab:43:d2:4e:2f:ab:8b:17:09:ce:a0:3f:24:
6d:72:3d:14:25:c8:d7:25:9f:84:a7:a4:c1:2d:c4:
9a:37:ac:c1:87:2f:c5:df:28:c9:24:33:92:15:dd:
a5:a5:84:ad:d1:bf:03:be:47:af:2f:74:13:7d:1a:
4e:64:99:cb:de:90:49:60:0a:de:e2:05:7d:22:33:
49:62:df:1d:4f:60:83:a1:18:48:a9:a8:36:d9:d7:
f9:e6:29:b6:e6:53:3d:96:79:db:9d:97:9e:f8:67:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:58:E4:A6:D7:2D:50:AB:09:30:24:1D:49:FA:93:89:69:0D:83:25
X509v3 Authority Key Identifier:
keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6b:fd:05:3c:86:a7:2c:34:12:7e:2f:dd:06:ad:e2:53:95:
17:6d:c1:19:8b:c3:4d:2c:f0:c0:8a:0e:12:df:5c:60:49:44:
f8:9a:b5:6f:68:05:47:33:8b:36:48:6b:7a:b2:a3:db:21:00:
63:08:22:6f:af:15:43:7b:8f:37:ff:67:ab:28:f6:90:5e:63:
25:a0:ed:a3:f6:54:6e:bc:ad:96:1e:37:89:5a:bf:62:6f:68:
5b:c5:e2:73:2c:4a:4c:a5:e1:c2:d4:ef:44:d7:4c:92:41:ba:
b3:ab:58:4d:ec:23:bc:1b:53:b4:64:9e:da:60:66:6c:21:5b:
ad:24:45:8c:ca:95:41:c9:e3:cf:9c:2e:4a:9b:6b:29:cd:4b:
48:86:65:b5:88:07:a6:b9:7e:76:ea:f9:45:8b:aa:1c:df:1e:
9f:f9:1c:e7:bf:7e:29:a4:56:8f:cc:7c:6c:d7:82:7c:42:5e:
53:9d:ae:e0:4e:1c:84:1b:3a:6f:b7:64:9a:96:f3:c6:51:6f:
38:bc:fa:d0:31:11:7f:68:16:af:dd:2c:84:6e:69:67:09:82:
7a:8d:c2:7c:82:31:68:b2:1c:09:e1:81:de:62:8a:96:20:e8:
1b:75:e8:5f:77:53:b7:78:0f:f8:73:a7:59:a4:da:65:84:e9:
45:31:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:52 2026 by rpki-client