This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
File: dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft (raw, json)
Hash identifier: gLXNaffCapcbD7h2ONxskpEBT19GQNFchF8QEqrnBkw=
Subject key identifier: B8:37:F8:95:36:8D:F9:D5:4F:4C:AA:3C:13:DC:63:3F:F1:EA:55:76
Authority key identifier: 76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09
Certificate issuer: /CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
Certificate serial: 019C45111F3FA701D0A5DAF030F8A7324ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
Manifest number: 0F48
Signing time: Tue 10 Feb 2026 01:01:15 +0000
Manifest this update: Tue 10 Feb 2026 01:01:15 +0000
Manifest next update: Wed 11 Feb 2026 01:01:15 +0000
Files and hashes: 1: dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl (hash: S+XOD0PyteC0Q9ckFaHC0UtbqtVYgAa6kbMsDt+Jzdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:11:1f:3f:a7:01:d0:a5:da:f0:30:f8:a7:32:4a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
Validity
Not Before: Feb 10 01:01:15 2026 GMT
Not After : Feb 11 01:01:15 2026 GMT
Subject: CN=b837f895368df9d54f4caa3c13dc633ff1ea5576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:22:b7:d3:ff:11:43:a2:65:a0:d7:a7:5d:
a6:e7:0c:b7:8c:74:5b:48:ec:59:92:91:e7:15:9e:
41:fc:97:62:6b:e0:cb:1b:2d:bb:6d:0f:0d:3f:a9:
0e:38:d4:dc:75:ff:5a:6b:06:55:41:1f:0d:16:7e:
9b:67:c4:1a:7e:7b:57:79:9e:f1:a6:b9:09:4d:73:
b5:d2:f5:ec:2a:13:8e:70:02:3f:f6:89:a2:d2:31:
51:44:05:ee:0f:36:e4:c3:83:5f:3e:12:c5:c5:be:
2d:ca:a6:10:15:c0:80:91:5c:35:a9:1c:62:b8:a0:
5c:f3:97:cd:e2:6c:9a:d8:3b:30:6c:c5:8c:22:ce:
d6:f1:3e:29:fd:3b:b0:09:98:d9:39:2c:ce:d1:e5:
36:b0:9f:9e:a5:2e:a9:3a:6f:f6:a1:37:4a:e7:75:
62:d5:1f:55:5b:56:a3:0a:6a:0c:7a:94:32:d4:7a:
a4:91:e2:e0:e2:84:c7:9d:02:ab:bc:10:d7:40:ef:
aa:0f:f3:d6:2b:87:15:87:48:43:f5:1e:46:6d:7d:
1a:b9:a2:7c:c5:d3:dd:ef:6e:30:e3:d4:18:4b:9f:
68:d1:4b:6e:f0:99:f1:80:e3:8a:11:20:62:46:14:
a4:f8:66:b6:df:8c:59:65:83:46:42:a6:76:95:d2:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:37:F8:95:36:8D:F9:D5:4F:4C:AA:3C:13:DC:63:3F:F1:EA:55:76
X509v3 Authority Key Identifier:
keyid:76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:70:e2:84:48:42:fd:7b:24:c1:ba:cd:ac:a4:13:ff:5a:6f:
e0:8b:79:48:c3:c4:53:5c:3b:73:30:bb:17:ce:ca:37:cb:d1:
af:eb:b8:0f:6d:bc:c0:a4:94:90:a8:20:13:81:46:26:90:02:
d9:74:c3:28:2f:cf:51:cc:99:6d:78:48:68:a0:10:44:26:a2:
3f:31:83:3d:cd:a2:4d:32:10:67:a6:11:3d:7d:6f:17:b3:d8:
9d:be:ab:e8:8b:80:b8:35:3a:f3:ac:4d:43:11:d0:25:90:1b:
39:1b:44:da:da:a3:f7:4f:72:49:74:83:9c:b4:f0:aa:d5:0a:
83:08:a3:ca:06:56:c7:26:50:f1:53:ff:36:f1:1a:93:b0:ef:
ca:b3:c4:23:44:ce:d5:f2:71:19:05:3e:59:d4:56:95:f5:c9:
4f:7e:66:f1:77:34:bf:ea:ae:d7:eb:06:48:39:78:7a:6e:da:
9f:ea:53:1a:e2:37:59:ef:2a:71:e5:19:6c:6d:5a:3d:de:02:
84:66:ad:cd:34:6d:1b:32:98:78:34:c3:27:fb:c5:13:e7:b3:
ca:1a:19:1a:16:f8:d0:ec:a7:48:87:66:d6:9d:ec:f1:7d:a8:
42:39:c7:be:b4:07:b0:df:d2:58:d2:cf:31:f8:04:4f:f0:66:
28:06:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:20:30 2026 by rpki-client