This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: sdovVlNVasRmRxMJQ+91oYRvhH9a4qZRX8RDln0mEe4=
Subject key identifier: 2C:65:E9:63:59:4D:7E:6C:61:43:86:35:E6:BC:CB:3D:47:0F:32:16
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 019C41A2066C85DE43EFEADD29B3CABF278C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 09:01:03 +0000
Manifest this update: Mon 09 Feb 2026 09:01:03 +0000
Manifest next update: Tue 10 Feb 2026 09:01:03 +0000
Files and hashes: 1: H3TYAMLFFlNCp3XM0jhoUoBeQy8.roa (hash: J5xTusXlhkXdt1S3mE6QU/UGZ2zGPT9Q3Ow+NVkju+o=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: g1R9srDaaqueQgFU3Wsv7zxhHQoSDRcchQCw1bsUQIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:06:6c:85:de:43:ef:ea:dd:29:b3:ca:bf:27:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Feb 9 09:01:03 2026 GMT
Not After : Feb 10 09:01:03 2026 GMT
Subject: CN=2c65e963594d7e6c61438635e6bccb3d470f3216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:28:b5:f7:4c:74:77:31:8f:19:a1:90:47:
80:bb:a2:b4:2b:ee:35:0a:9d:24:e0:f7:22:05:7c:
4d:95:60:2a:02:2a:9f:b3:74:78:6e:6d:54:d8:ab:
b5:04:02:7d:db:15:31:f3:a2:b5:5e:85:c8:cf:32:
e9:be:95:23:e1:8d:6c:3c:ca:47:b5:9c:de:93:68:
a0:d9:44:04:2e:3f:33:8e:2d:be:22:ba:63:d5:66:
90:f1:75:98:8e:b3:79:5a:28:d4:32:bf:8f:9d:94:
f4:b3:0a:84:5a:b2:0a:36:16:79:bd:f2:2f:11:1e:
e3:01:83:6b:80:da:79:b2:e2:b0:37:fc:d0:cd:e1:
17:66:25:8a:70:fb:f2:bb:49:85:01:cd:42:a3:87:
57:ca:f7:f9:3a:8f:80:c9:6a:19:e2:8b:b2:4a:99:
13:fe:cb:be:26:e3:c4:ab:f6:2d:6b:00:1e:6c:59:
54:63:cc:fb:c7:e2:fc:26:ee:1b:d6:7c:db:ab:09:
66:09:f5:d5:ae:3b:b7:67:27:98:e6:cb:c5:32:ef:
6b:71:3e:5f:bb:aa:56:22:1b:c7:cd:34:f6:7c:ea:
44:9e:9b:77:a1:6c:02:f7:3e:a2:8c:c9:32:28:ca:
a1:04:d0:35:db:f9:f4:b7:6e:cc:2c:17:a7:6e:81:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:65:E9:63:59:4D:7E:6C:61:43:86:35:E6:BC:CB:3D:47:0F:32:16
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:45:49:e6:5c:96:d6:ae:3b:96:09:61:a5:64:a8:d8:cb:32:
10:70:fb:de:d9:82:27:a9:f2:17:f7:63:40:2b:37:5d:ae:f7:
ed:df:a7:42:2b:bc:1f:fb:cb:d6:bb:98:2f:93:73:ea:94:bf:
69:87:f1:a4:08:20:61:2f:35:6f:68:57:b1:3d:a0:ad:4c:bf:
ff:0f:f7:92:10:95:79:20:1f:81:28:da:11:8f:fa:04:47:14:
16:19:f1:c1:3c:37:3a:51:06:8a:27:ec:bc:43:fa:1a:6b:e3:
26:2f:fa:ad:29:86:5c:e8:7c:5b:c6:9e:39:40:2d:46:33:20:
01:42:62:07:19:ae:a7:c6:7e:f4:8f:5e:49:a1:b5:14:ea:8e:
ec:54:a9:30:aa:69:44:c2:2d:c0:23:80:e9:44:ae:25:f1:de:
4f:af:5b:56:1c:b2:7a:06:74:ab:be:90:c6:a0:59:9a:c7:54:
b7:ca:cd:b0:4b:28:a1:4c:f3:1a:f3:3d:df:f0:15:2c:7b:69:
e9:b9:f1:73:a5:0b:49:eb:31:6d:9d:2e:2f:d2:bf:9d:5a:10:
6a:6b:b1:61:cf:7d:bd:29:59:7b:56:65:64:4f:33:c0:49:b6:
80:4e:cb:b0:fa:9a:80:6e:d4:e9:da:d7:e5:93:63:0e:ca:0c:
90:dc:d1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:32 2026 by rpki-client