This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File: cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier: 80WEgi6bllqaMfzv9CNZw+aV6qlRgvXRp7CKi+NobnY=
Subject key identifier: D3:33:CD:BB:CA:33:3B:AA:85:07:D1:E4:FE:E9:1F:A5:89:43:46:7B
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer: /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial: 019C43FE48B67504879D340FC77076ABED4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number: 04AB
Signing time: Mon 09 Feb 2026 20:01:04 +0000
Manifest this update: Mon 09 Feb 2026 20:01:04 +0000
Manifest next update: Tue 10 Feb 2026 20:01:04 +0000
Files and hashes: 1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: tEUt1sbC7jxxvmvWEDVec6210pLuVQU1PzswahshpP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:48:b6:75:04:87:9d:34:0f:c7:70:76:ab:ed:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Validity
Not Before: Feb 9 20:01:04 2026 GMT
Not After : Feb 10 20:01:04 2026 GMT
Subject: CN=d333cdbbca333baa8507d1e4fee91fa58943467b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:c8:d9:55:02:0f:11:f8:ab:14:e4:94:ac:
db:3c:c9:16:2e:25:aa:9b:3a:5e:85:6a:bf:70:de:
5d:f2:31:12:02:f5:66:d3:2c:6b:2e:41:2e:5e:c6:
bd:0e:11:87:14:85:d4:0e:00:bd:2c:09:6a:d1:e0:
b6:76:3b:2c:1b:85:e5:20:97:67:ed:76:44:65:ed:
b9:01:fd:36:38:2c:bf:7d:57:b2:7f:28:eb:e3:da:
5a:1e:a2:11:73:16:7c:fa:22:d3:15:db:7f:6b:e3:
58:ed:9c:0a:86:41:66:c2:41:7b:d2:68:73:12:22:
31:4b:0e:02:b5:c5:83:7a:11:7c:55:8b:4a:8a:88:
eb:20:12:6b:50:b2:d5:d2:3a:04:e0:19:be:a2:3f:
8c:03:16:61:f9:96:8c:ef:7c:73:f6:49:6e:30:6e:
61:97:d1:ed:1e:a7:6c:ce:98:87:30:11:83:eb:11:
ac:34:5b:ea:3a:57:68:98:6c:0a:05:dc:9d:f0:d4:
dc:a9:7e:95:c8:f2:f6:70:f5:98:b4:12:bd:a1:de:
a2:36:2b:d3:fa:34:3d:f3:75:d8:37:60:1f:ca:88:
bc:d0:e4:3d:1a:d8:c3:47:22:c5:f8:94:84:8e:c6:
7a:81:9c:7b:9a:0f:c0:83:7a:2e:ba:e6:b3:25:f6:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:33:CD:BB:CA:33:3B:AA:85:07:D1:E4:FE:E9:1F:A5:89:43:46:7B
X509v3 Authority Key Identifier:
keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f9:66:dd:0b:1e:ee:bb:a9:db:3c:77:5a:61:1a:30:01:18:
a1:c2:b0:f5:f3:24:8d:07:21:d3:66:d5:98:a8:9f:32:08:87:
8e:9c:ec:a1:c9:14:b8:e1:00:14:c7:28:61:5e:6a:f7:67:12:
2d:72:1e:0b:5a:37:68:f3:ce:b3:3a:53:5b:8e:d7:a0:77:8b:
5b:1b:2a:02:2a:ae:6d:fb:a4:7f:59:bb:bc:9e:4b:28:aa:78:
cf:18:cf:53:8d:ef:95:77:d5:52:59:73:d2:81:65:9a:17:3e:
9d:58:a3:63:39:45:b9:3d:2c:b3:2d:61:69:46:5d:12:51:8a:
7d:c5:e9:86:03:c7:b7:ff:11:60:8c:38:80:fa:1b:1a:42:85:
31:01:7b:b3:a1:ee:4d:67:50:9b:b0:ce:b3:7c:1a:b6:a0:fa:
21:bd:21:32:1e:60:3e:85:29:8e:80:04:7a:95:71:97:1a:61:
19:1a:15:b2:5b:0e:f1:44:cf:d7:1a:27:5b:07:1a:9a:84:14:
6b:8f:d2:11:f4:42:bc:0e:02:05:03:3e:97:47:ab:89:9e:32:
d0:ca:aa:f2:ef:10:f6:d8:92:d7:46:dd:67:41:3f:aa:a4:0e:
31:28:94:05:f4:05:84:83:1e:e3:cd:53:50:9c:95:69:7a:21:
a3:d7:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:09 2026 by rpki-client