This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
File: MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft (raw, json)
Hash identifier: n9FCAGWD+Y40Xf113IATF6UYRxQEvIclR/Ce9bSKleA=
Subject key identifier: EB:8B:24:6E:DE:2D:22:E9:C8:57:DE:FC:DA:35:60:B4:59:B2:58:9A
Authority key identifier: 32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
Certificate issuer: /CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Certificate serial: 019C42EAF76CD623918EEA8D71734DC1A126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
Manifest number: 0105
Signing time: Mon 09 Feb 2026 15:00:20 +0000
Manifest this update: Mon 09 Feb 2026 15:00:20 +0000
Manifest next update: Tue 10 Feb 2026 15:00:20 +0000
Files and hashes: 1: DyptUUOjRm_2m8zgbMvoHA1UrBI.roa (hash: K5rbZpcZwUPf7XJmogvvHN54DVEPkHI7+lgGEgRM/BA=)
2: MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl (hash: j+6jyGW0Yep+l7gd1daQz5eRLDKrig+quuZF6KTGnTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:f7:6c:d6:23:91:8e:ea:8d:71:73:4d:c1:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d4b0281c4a56b276faf46f2850fe0cf4e1cc4f
Validity
Not Before: Feb 9 15:00:20 2026 GMT
Not After : Feb 10 15:00:20 2026 GMT
Subject: CN=eb8b246ede2d22e9c857defcda3560b459b2589a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:72:81:5a:e8:72:b7:81:d2:fb:91:29:b8:
d1:3b:52:5a:1c:26:fc:03:dc:45:cd:00:71:bc:39:
8f:78:ee:33:bb:05:2f:38:75:84:42:e0:f3:4b:8c:
a0:78:c2:92:79:31:88:b0:9a:e0:be:9d:29:bf:42:
44:d6:88:a4:eb:70:43:5c:ea:b7:67:ef:43:95:bd:
0f:9d:80:fd:ac:44:c0:7c:8c:54:7b:47:74:30:4b:
6e:5d:2f:36:39:79:39:23:37:fd:e5:06:c0:31:bc:
26:68:83:a2:0b:07:74:f5:65:4f:ff:3a:2a:e4:89:
8c:d8:70:59:ba:e3:17:8c:4c:ee:85:09:8b:c7:0c:
fe:fd:a5:90:63:03:07:a1:de:95:6a:56:6d:a9:e4:
df:a9:fa:55:6e:ee:57:7f:77:ca:86:20:68:79:21:
ca:6a:d8:39:65:45:9b:16:60:5e:4e:a3:a0:c4:8a:
47:ac:9a:75:6c:61:fd:f3:a0:1b:5a:93:29:6d:48:
fb:b9:ff:27:ce:a0:1b:22:b0:b9:72:27:fc:ab:7d:
0b:e2:8f:20:6c:c1:4e:6b:46:62:18:54:6b:d9:3e:
eb:1e:e6:f3:1d:9f:4c:85:ea:49:5a:38:97:89:8d:
cc:ce:ba:5c:72:6c:2d:ea:62:fa:26:2a:37:ce:03:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8B:24:6E:DE:2D:22:E9:C8:57:DE:FC:DA:35:60:B4:59:B2:58:9A
X509v3 Authority Key Identifier:
keyid:32:D4:B0:28:1C:4A:56:B2:76:FA:F4:6F:28:50:FE:0C:F4:E1:CC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtSwKBxKVrJ2-vRvKFD-DPThzE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00ebf2-ebeb-4e46-876c-2d9cd5f25145/1/MtSwKBxKVrJ2-vRvKFD-DPThzE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f8:d6:10:07:21:dc:36:a3:cf:58:e2:5c:d3:a3:42:02:c6:
e6:1b:da:49:68:81:dd:87:45:ff:51:34:80:ca:53:4a:e0:47:
cf:69:9b:01:0d:01:a6:ba:90:44:19:89:e2:69:d8:ae:42:2d:
07:51:5b:7e:8e:7d:c4:ae:1a:8e:0e:e6:be:8d:42:a9:16:ca:
44:34:88:0b:be:fd:14:31:fe:cb:b5:05:c8:f3:58:69:55:be:
df:5e:38:07:d2:75:73:8b:eb:64:3d:00:89:fb:fa:eb:74:66:
02:08:d5:3f:a2:52:86:6f:99:81:cb:55:8d:67:ce:6b:99:4c:
79:5d:78:de:4e:b7:e9:20:dd:20:e3:1f:3f:cb:b9:ce:ca:b8:
07:0f:ab:94:e3:03:de:e2:8e:8d:a4:dc:0c:7b:ee:f5:71:bb:
0a:dd:3f:f3:cb:05:e2:c2:46:41:69:12:85:88:a9:d7:c3:92:
98:76:db:2d:9c:7c:7d:89:29:d6:0b:14:e6:5f:e7:e3:b1:8b:
77:41:0f:6e:3b:45:db:4e:7c:69:44:74:12:47:27:f2:d4:4a:
3a:96:0b:42:d3:08:56:7c:8b:62:7e:4e:76:0d:f6:44:85:d7:
d3:7f:df:54:f3:8f:5a:3e:d5:ab:91:41:bb:44:4a:d1:aa:39:
36:1b:bb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:27:15 2026 by rpki-client