This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
File: ddUf2ReUrgygfzkwcw0Gmqwbku0.mft (raw, json)
Hash identifier: aA4NDnGV8zeS33IHxXERtzK3cG+scZjjTIex8W//+n0=
Subject key identifier: 7D:A5:BE:D9:79:EB:20:C9:63:E0:B4:1B:67:CA:F9:D5:A5:13:B3:44
Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Certificate issuer: /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Certificate serial: 019C420F265CBEC215FA8901F9AE8FA32E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
Manifest number: 034D
Signing time: Mon 09 Feb 2026 11:00:14 +0000
Manifest this update: Mon 09 Feb 2026 11:00:14 +0000
Manifest next update: Tue 10 Feb 2026 11:00:14 +0000
Files and hashes: 1: LWo5SwQvtARyJWncO-TRzt7E95c.roa (hash: 9wNniYqROde6rynnX9MuzaL+IyWSUXFFKAJlRzpQMXA=)
2: ddUf2ReUrgygfzkwcw0Gmqwbku0.crl (hash: oUrTdhzuL44IiJbSReEmGXPONHN5OzsC2quHqvxkjXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:26:5c:be:c2:15:fa:89:01:f9:ae:8f:a3:2e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Validity
Not Before: Feb 9 11:00:14 2026 GMT
Not After : Feb 10 11:00:14 2026 GMT
Subject: CN=7da5bed979eb20c963e0b41b67caf9d5a513b344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:48:34:49:72:45:fb:de:d2:31:76:ea:16:83:
98:6a:af:63:1b:37:2c:92:a4:3b:cb:49:be:75:19:
ce:28:53:4c:48:57:06:90:6c:d9:f5:b4:26:da:46:
f7:03:ef:6b:20:67:39:d6:60:95:cc:aa:df:48:68:
c8:cc:a8:06:8d:6c:98:0a:e6:f0:54:35:c0:04:08:
a3:48:bb:1b:be:64:e7:88:f1:92:c8:41:8c:28:d9:
ca:11:a8:99:35:f1:b4:94:b3:65:36:de:ec:5f:e7:
a8:67:20:1e:e0:30:80:b6:b9:59:4c:d4:ba:6e:5d:
ff:9c:a5:16:c1:5f:f4:b7:ad:26:2c:95:bf:1e:96:
0d:08:34:45:e7:b9:ad:de:78:96:ee:53:0b:b2:07:
2e:56:93:4f:1f:aa:40:cc:13:a5:b8:5b:c6:48:29:
02:20:8f:8c:6e:e0:42:4d:df:38:cd:f0:76:a4:f6:
65:04:ed:63:56:bc:f1:d8:a4:28:6d:54:f1:b1:7b:
b1:66:c6:dc:07:19:a8:ec:58:37:1e:d4:be:18:b4:
29:10:59:10:9c:04:4c:2d:74:43:74:f1:2d:b8:19:
6d:f4:48:eb:15:26:b5:ea:c2:a8:23:c2:c0:96:ed:
e3:e4:a9:62:e6:f2:4b:e5:23:d2:cc:eb:ed:d8:44:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:BE:D9:79:EB:20:C9:63:E0:B4:1B:67:CA:F9:D5:A5:13:B3:44
X509v3 Authority Key Identifier:
keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1d:50:fe:d1:00:ba:96:ee:9f:20:41:e9:06:65:15:b7:a5:
9b:27:a1:30:08:95:8b:4f:73:87:28:39:69:94:82:e5:73:6f:
07:ad:e6:8b:53:19:a8:ea:4b:59:00:32:92:38:5c:1c:7e:69:
23:d4:91:89:9a:81:50:c2:2b:95:2b:c2:23:be:1a:aa:1c:89:
51:8c:28:75:b1:42:03:ab:75:d6:7c:bf:8a:d9:cd:a5:05:e5:
5c:05:79:70:33:a0:bf:e8:b4:39:f5:c4:57:68:23:ab:5c:ad:
70:9e:c2:9b:90:75:91:63:4e:75:9d:5c:5d:e7:fd:99:58:f5:
51:62:67:63:1a:c6:59:74:89:3f:9d:d1:3d:d8:b3:34:ab:a4:
d6:90:77:fa:88:a3:5e:e8:4e:17:5e:66:d9:7b:88:1c:bd:48:
c5:1d:e2:09:1a:72:42:45:3e:df:16:15:46:95:73:12:38:0d:
b5:d2:75:4f:30:90:19:94:c1:07:c8:10:75:3a:1b:75:e3:dc:
23:ff:23:20:ab:6e:ac:c3:de:16:c2:d7:8c:f2:d9:0d:dd:68:
9c:ab:18:0f:06:f3:1b:80:47:71:2f:f8:71:e0:a8:d2:1f:61:
9b:3c:56:50:62:fa:bc:aa:4f:21:19:0f:87:54:17:0d:76:4b:
4a:ad:16:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:36 2026 by rpki-client