This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
File: dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft (raw, json)
Hash identifier: 2B+a80reGExRgRpNvgpwQ+c9XfHsPnTwNOTvIQiFWlw=
Subject key identifier: 17:3A:CE:EB:21:73:97:30:AA:B1:5C:44:81:68:19:B8:63:11:8C:E8
Authority key identifier: 76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4
Certificate issuer: /CN=7668fe49ae9747257150015be43e29628c6316c4
Certificate serial: 019C427D7830F908A66201CB0717FB379CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 13:00:44 +0000
Manifest this update: Mon 09 Feb 2026 13:00:44 +0000
Manifest next update: Tue 10 Feb 2026 13:00:44 +0000
Files and hashes: 1: 7PU06grVngn__PyWKKvtWslEGAM.roa (hash: uvFJtYim7HXN6krTzVc4QD8VUGVl3D711DAfuBRhXa0=)
2: dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl (hash: EJNnF+Ykaw5MecPDpwnwezVqaOyjbTwoc8d/dcZ+lfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:78:30:f9:08:a6:62:01:cb:07:17:fb:37:9c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7668fe49ae9747257150015be43e29628c6316c4
Validity
Not Before: Feb 9 13:00:44 2026 GMT
Not After : Feb 10 13:00:44 2026 GMT
Subject: CN=173aceeb21739730aab15c44816819b863118ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:e6:cf:16:69:59:2d:2c:cf:51:9d:82:aa:
64:cb:05:8a:b4:c0:06:d7:9e:f2:40:c9:fa:c1:30:
b3:0e:6d:37:4d:e3:a2:09:c0:e3:ad:52:40:d3:54:
d5:d1:80:6b:7e:e4:5d:98:21:57:e8:d0:2c:73:1b:
0f:f1:69:32:2f:05:5a:a9:03:e2:aa:28:b0:3e:56:
b7:e6:6c:0d:b5:db:71:05:f6:be:21:3c:b5:8d:f1:
5a:64:b6:c7:33:65:1c:50:c0:71:60:62:4c:ff:67:
ce:7e:84:6a:50:c8:0c:3f:b2:e0:18:6f:b9:de:9f:
98:73:e4:41:be:11:06:0d:05:58:9f:d3:33:e8:ff:
17:1d:2f:f3:09:42:64:35:a3:99:eb:22:71:6b:42:
1a:2f:b6:8e:5b:6f:fe:f6:fc:29:0a:bf:36:68:88:
b6:6a:7f:af:64:1f:de:c2:b4:34:da:bb:3c:3e:f8:
ba:5f:bb:c5:0c:e4:e8:3c:7d:e1:26:57:4c:9f:e9:
58:df:15:9c:97:b2:7b:26:24:d3:e4:71:ea:1f:8c:
8f:86:12:da:11:d6:e6:3c:e8:04:a1:af:d3:65:ce:
c5:1d:11:a6:ef:80:e2:55:7b:84:e8:65:ac:03:7a:
82:24:7d:ee:bb:32:95:31:0a:04:3c:70:f9:b7:f4:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:CE:EB:21:73:97:30:AA:B1:5C:44:81:68:19:B8:63:11:8C:E8
X509v3 Authority Key Identifier:
keyid:76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9e:c9:67:8d:38:b0:b2:03:8e:eb:f5:fc:4a:e9:2c:59:76:
a2:6f:e7:8c:20:1d:cc:d4:d6:71:22:d5:77:e3:18:52:f3:98:
14:7d:59:9f:bd:37:ff:03:1e:fa:a3:89:32:4e:cb:4e:39:b6:
a8:40:61:71:dd:d3:36:de:fd:e6:d8:eb:e8:47:ee:96:c7:c8:
7f:3b:a6:e7:e2:c6:3a:cd:07:83:59:5c:c5:e0:ef:58:3b:cb:
c4:48:ec:a7:b4:17:ee:bb:36:e4:48:75:7c:2d:43:aa:47:1f:
ff:24:ed:dd:a5:8f:8f:be:3f:75:71:38:03:05:77:85:6e:c3:
c5:56:07:7f:4a:fa:45:4e:e8:58:e8:9e:ed:e9:61:d7:21:04:
6b:36:6e:5b:1e:a8:90:a0:5e:26:11:93:6d:ff:0b:e0:c8:b8:
d4:78:66:d0:1c:3e:23:36:49:b4:81:4f:fe:27:5e:1a:ba:03:
c9:bc:a4:78:4b:3c:2a:11:c0:a8:b0:c4:84:0d:26:c5:67:bc:
34:88:78:53:1c:27:bc:0d:62:16:32:72:ec:f6:22:a5:02:d0:
67:36:57:51:b5:41:12:3f:5a:2b:9d:f3:0d:da:72:b9:d9:e5:
66:d2:19:b2:e4:68:da:dd:bb:53:cf:d9:72:f3:1f:08:9b:04:
4a:e6:21:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:24 2026 by rpki-client