This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: qIssKE8zaJ+q/DGq4nN8j92QqzPXUzXX+T6SOQu5cVI=
Subject key identifier: 70:F6:31:7B:55:03:B5:80:CC:38:03:4E:E3:FA:15:44:42:6C:7F:9A
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 019C4246C02B6B9DE2E933B95F2DDC5E1E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 17A1
Signing time: Mon 09 Feb 2026 12:00:58 +0000
Manifest this update: Mon 09 Feb 2026 12:00:58 +0000
Manifest next update: Tue 10 Feb 2026 12:00:58 +0000
Files and hashes: 1: QvbD1jOdUx6HbNUbA99645THPL4.roa (hash: S7/2P7Mm3OHJNvAa4PXnZTEjRSISksVJdSbgwYAQoks=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: 5W/li/CZVTHF57Lzy4LzOj0qhNXLBdS6gqlHFB7k5UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:c0:2b:6b:9d:e2:e9:33:b9:5f:2d:dc:5e:1e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Feb 9 12:00:58 2026 GMT
Not After : Feb 10 12:00:58 2026 GMT
Subject: CN=70f6317b5503b580cc38034ee3fa1544426c7f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:de:d8:bb:54:e9:95:6f:69:9a:79:f0:9c:c2:
f0:82:04:52:5f:a9:f7:7c:3f:6c:cc:15:1d:59:20:
65:75:02:19:5c:75:48:1c:61:b9:ff:c5:a1:df:20:
be:25:59:b1:33:a9:1b:77:53:b8:ac:3f:d0:59:f9:
d9:a5:46:8f:31:aa:0f:ca:73:7e:5d:97:bb:65:a2:
d5:17:a1:b0:6f:42:fa:75:be:be:1f:86:57:19:a4:
83:61:b0:ec:16:ce:e1:a7:06:40:15:7c:55:ba:94:
ce:ea:b6:66:57:fc:7b:eb:b0:09:8f:9c:37:a1:00:
ad:af:94:63:9d:b9:b9:8e:3d:8f:2a:32:b2:59:28:
aa:07:a5:17:22:f2:b1:cb:19:74:e7:8b:b3:52:27:
e2:e8:4e:23:37:ac:20:ac:88:64:3c:3a:8a:6d:5a:
46:83:57:8c:3a:ec:8f:12:12:67:ab:60:fb:bd:7f:
1e:35:18:86:ce:5c:15:66:9d:14:be:08:f5:9d:9e:
f2:06:33:ee:2b:66:73:28:b7:79:f6:48:d6:63:4b:
08:07:b0:7b:b7:de:f6:4c:77:c5:2c:21:65:bf:b2:
b1:8e:47:4b:7b:6a:49:3f:6f:00:e8:ef:6b:21:d6:
06:ec:a2:43:1a:c7:57:a6:b3:32:3f:c3:7c:0a:52:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F6:31:7B:55:03:B5:80:CC:38:03:4E:E3:FA:15:44:42:6C:7F:9A
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3d:13:2d:16:c3:e2:fe:e0:45:27:22:f6:52:d1:33:11:f7:
fd:df:c2:dd:04:45:81:ea:60:72:0f:1f:34:d8:fc:a2:3f:a5:
33:24:bf:c3:95:95:4e:b4:95:08:cd:80:59:15:ff:ac:be:5c:
77:bf:8f:4b:f1:cf:fb:09:93:db:04:33:a7:45:1f:53:23:67:
ad:c6:42:b4:e2:95:fa:4d:11:21:c7:c4:32:d2:6a:37:c4:a0:
17:d4:44:11:ea:5a:d7:40:2d:4f:9f:8e:5f:72:1e:a7:56:36:
1c:f5:82:d6:75:ab:39:1d:de:e6:f2:1b:70:a3:d5:cd:b8:dd:
da:f6:05:f7:f4:2c:d3:37:d8:af:81:dc:ba:f2:24:66:d4:ba:
82:82:f7:57:65:62:4a:c4:67:ba:0a:8a:9b:e4:ca:f3:c1:73:
16:a5:b2:f7:87:94:b3:e2:9f:7d:c1:cc:cc:b2:21:01:33:2a:
4e:67:36:41:ac:58:d9:4d:92:f4:da:3e:cb:2c:5b:8d:2a:53:
b6:ae:27:3f:98:3a:ad:01:2d:9f:ed:24:12:f5:ee:5c:59:5a:
85:35:85:09:d5:c2:46:6b:4c:03:b3:61:fa:aa:45:b4:59:37:
cc:71:e7:0b:40:9a:df:e5:51:fa:05:a7:d9:74:b3:7c:7e:a7:
8b:13:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:33 2026 by rpki-client