This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
File: cmMziKelz-mnyhn9dMki3LEladM.mft (raw, json)
Hash identifier: azW26i89QzLvngOOVZtnwWSMVYsK2eOFfDkysSU9uE8=
Subject key identifier: DB:26:56:D1:93:6B:9B:8D:38:BB:D1:4C:FD:6B:5A:E1:8B:77:55:27
Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Certificate serial: 019C43FE2D0FFABDB98B1A1E5F2AC7288E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
Manifest number: 13BD
Signing time: Mon 09 Feb 2026 20:00:57 +0000
Manifest this update: Mon 09 Feb 2026 20:00:57 +0000
Manifest next update: Tue 10 Feb 2026 20:00:57 +0000
Files and hashes: 1: cYK-uT6bIecHI7P6_g6NVZTfQYo.roa (hash: o4Bgr3n7FvBubBbBgtDIrD3ZzuCpATKlkb20AtXAn8U=)
2: cmMziKelz-mnyhn9dMki3LEladM.crl (hash: OthRbowONKrPsVW3hwnCgmsCMMUdQfAGY+JjRR+EnSI=)
3: kVFojVLVm1YI6NJxxAhwn-frs_I.roa (hash: DzeJbFI8o+hinCZ6vh2cut6N8Di25xDzaQzjLygSt7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:2d:0f:fa:bd:b9:8b:1a:1e:5f:2a:c7:28:8e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3
Validity
Not Before: Feb 9 20:00:57 2026 GMT
Not After : Feb 10 20:00:57 2026 GMT
Subject: CN=db2656d1936b9b8d38bbd14cfd6b5ae18b775527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:a7:db:4f:b9:d3:06:de:4d:20:db:23:40:
b9:29:4d:ca:15:43:b6:ed:77:90:5c:78:be:59:ca:
d9:2f:84:dc:03:21:9b:a1:ab:fa:9e:f5:5a:05:37:
e3:c6:9f:40:70:d4:ae:69:46:9e:9e:94:4c:2d:0c:
28:fc:82:83:0b:66:1f:8b:c6:bf:24:e0:b3:44:45:
be:fb:8a:7f:b8:09:b0:a4:9f:27:3e:1f:8f:89:cc:
e4:f0:e8:94:0b:ad:aa:77:ec:4a:dd:42:40:88:2b:
3f:d9:01:e5:da:25:71:ba:4f:ed:c6:b5:66:ba:df:
ac:64:ec:74:92:0c:77:84:01:7e:a8:a4:2f:8e:e8:
94:2b:01:df:f9:e1:79:18:39:77:5b:81:f5:1f:81:
fa:4b:95:07:43:0d:02:c5:55:14:fc:25:f3:78:52:
a7:06:63:45:85:c8:1a:35:99:28:c8:ce:46:6c:ce:
1c:f7:8a:f6:4d:35:d2:11:18:c7:08:a4:15:7e:1a:
00:5a:86:d8:84:24:42:57:61:e9:e9:7b:d9:02:ab:
f3:99:5a:be:3f:fc:ec:da:c7:38:32:c5:b1:49:dc:
5a:cf:a5:18:03:f5:70:47:fc:aa:67:6a:0a:53:42:
38:ac:a3:3c:96:67:13:c2:f1:cb:4b:d7:d2:a6:24:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:26:56:D1:93:6B:9B:8D:38:BB:D1:4C:FD:6B:5A:E1:8B:77:55:27
X509v3 Authority Key Identifier:
keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:00:81:a0:8c:b2:a3:86:55:a3:e9:9b:dd:03:fe:a9:f6:f2:
b2:92:21:4c:63:fc:9d:c7:d1:c9:54:f1:7b:06:f0:ff:a3:bc:
83:70:d6:83:c6:43:b1:b3:cf:40:b2:b1:59:59:ae:7c:c5:22:
22:64:72:6c:ba:55:de:79:9f:3b:0c:7f:45:16:2e:fc:fe:5a:
71:68:c2:b5:f8:c1:09:a0:d8:7f:81:dd:a2:c5:cb:e7:99:af:
5d:a8:d8:62:9a:50:8c:8a:61:4c:47:d8:f9:50:9c:3c:22:67:
a4:6a:92:03:3c:3f:e0:bb:7a:fe:0f:e8:99:48:9b:3d:be:6c:
3b:e2:3c:a8:66:99:1d:5a:10:ff:58:56:37:96:41:d1:f6:be:
e8:85:0d:2c:0e:d9:ca:16:36:e5:03:4d:7b:11:ea:0b:56:88:
2d:0b:84:c3:55:f2:f9:2e:18:c9:8a:d6:b4:f6:81:1f:74:65:
08:63:87:9a:78:16:b3:49:3f:1c:05:14:05:12:71:05:fa:7d:
d0:ae:b4:73:05:f1:07:63:76:9e:2a:e6:99:6e:2d:62:76:8c:
f2:98:df:d5:bc:20:11:67:0d:83:54:96:17:f6:e4:b0:1a:94:
29:96:a8:63:da:f5:c8:62:81:c9:3a:7a:ea:45:fb:85:9d:73:
9a:a5:4e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:12 2026 by rpki-client