This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
File: I3ikqcUjJahZIICboaTYniHALxc.mft (raw, json)
Hash identifier: /nVWhAq9KJY5kltXKaA33LyKgUKT0cMI3Q4nq6QOR/A=
Subject key identifier: 7D:56:65:B6:66:42:92:C0:24:91:6D:AD:E2:DF:8B:D2:C4:14:94:1C
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 019C43FDCB67B050D11407E9C67C8FAC1FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
Manifest number: 1560
Signing time: Mon 09 Feb 2026 20:00:32 +0000
Manifest this update: Mon 09 Feb 2026 20:00:32 +0000
Manifest next update: Tue 10 Feb 2026 20:00:32 +0000
Files and hashes: 1: E6053yR1CqVaJr7LtSIy8wHoaGg.roa (hash: YpgpJxbI9F9bF2mcDpVeWkbBTRfl6cIoKyEc+QXfAaA=)
2: I3ikqcUjJahZIICboaTYniHALxc.crl (hash: 0KUlB+/oPmOI+4H9o/JU2F3QLmhGzeVKBjGm7rJiM8c=)
3: VdgeZDIeVNPfFDruPnZ1hu3S9e0.roa (hash: Qq2NngHafLIvO2R0hWPLxLIlO+UaWWV0xfhSeKiG+84=)
4: WfRMYNgnDvdxhv_OgYStuN6FqCQ.roa (hash: uHLuQi8KJbVs5VqNtZkcp+fIJy6HLJbaJ1btjtIY4cM=)
5: XgZUWF_JY2HTJzbvU6Cnd5y6OTQ.roa (hash: xDb3dtwGlNAHcmXCM8UYUqhwZfzy/vemU3ULkTqFlkw=)
6: vfUbYO5TjUkdIqbIG77eYeU-n-U.roa (hash: 0e4c1Mw99PsTD71HBuC9Z/Vb3JqYveh6VUI81e17S8s=)
7: vvUMzJMS3YN2PdWIsXTg73pWUMU.roa (hash: jqHmBZCizBRZOJ6dgt21LSpJ/Vl6QvBloIY8Xls6yuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:cb:67:b0:50:d1:14:07:e9:c6:7c:8f:ac:1f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Feb 9 20:00:32 2026 GMT
Not After : Feb 10 20:00:32 2026 GMT
Subject: CN=7d5665b6664292c024916dade2df8bd2c414941c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:a7:b2:26:3f:8b:5f:2d:16:d2:77:8d:ce:
ed:01:35:81:b9:33:2b:d9:b8:9c:0e:03:21:1a:04:
46:26:f8:39:46:0d:43:6c:7a:7c:83:af:2d:30:8b:
34:ba:be:7c:cc:31:6d:d3:d0:3c:68:6d:4b:56:26:
1e:92:07:3e:0c:45:f2:95:dd:75:5b:9a:55:78:dd:
b2:c7:9e:4f:d2:21:ed:61:6e:fc:0f:b3:1a:5c:11:
0e:a5:81:63:36:ec:46:f6:b7:96:92:eb:ca:f3:dc:
da:ed:46:ab:37:09:08:fa:8c:7e:03:cd:f5:bf:7d:
23:f8:59:eb:4a:30:8e:c4:d9:57:96:5c:41:d1:22:
a8:c5:88:7e:e9:b5:4a:2b:f7:48:a7:f4:e8:ea:54:
41:a6:93:b1:19:66:bd:7f:23:8e:f3:ae:26:ab:7f:
a0:39:36:2d:be:e9:8f:39:f9:a0:0f:4f:e5:af:5c:
89:34:2f:bb:2c:f0:eb:9e:ae:41:66:ae:26:5b:55:
eb:66:2a:74:fe:9a:f4:c8:99:5c:57:22:48:e6:8c:
aa:91:a8:a9:35:6d:8f:0e:6f:d0:7d:8d:e7:72:87:
d5:d2:51:e7:90:c2:a9:82:4b:75:62:69:7f:9a:79:
ed:92:d9:3a:40:2c:24:82:b5:9b:d5:0b:29:8d:42:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:65:B6:66:42:92:C0:24:91:6D:AD:E2:DF:8B:D2:C4:14:94:1C
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f6:14:7a:85:25:77:ea:85:40:b3:d5:55:d1:09:40:52:72:
f0:3a:94:c7:24:c9:dd:54:b3:07:5f:db:3e:6d:a1:6c:dd:ba:
63:e2:a1:53:a9:8e:6a:5d:f1:67:7c:d2:0e:67:af:cc:2f:16:
c7:5f:e2:ff:dc:55:9e:10:07:ea:d9:f5:19:d9:4f:e8:96:5f:
4a:ad:c4:24:4c:58:22:17:70:d5:40:20:c8:b5:7a:5f:9a:b5:
a6:32:5b:f1:d4:72:14:ca:c5:1e:4d:03:31:11:22:7c:4b:71:
8a:95:cf:2a:9c:0f:eb:02:a4:25:4b:05:8d:2d:64:33:a1:a2:
91:dc:bc:17:dc:12:99:76:ef:97:91:73:c2:6a:56:de:20:17:
25:57:79:5d:50:b2:11:52:53:7f:33:77:ce:47:b3:83:e2:c7:
af:95:1a:2a:b1:99:19:96:7a:bd:d5:9b:65:d5:ac:a6:2c:dc:
7f:b2:22:89:8d:7b:ba:41:6a:f7:e4:79:1b:95:eb:05:98:c6:
a7:e3:59:c7:19:92:44:40:30:fe:e7:6e:0f:4b:11:43:af:2b:
70:4d:1a:d1:b4:67:0b:24:ad:96:2f:9c:0b:63:37:da:0b:94:
07:49:bf:9f:46:46:14:b0:e6:1d:40:02:39:1d:39:2b:cd:3b:
65:12:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:18 2026 by rpki-client