This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
File: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json)
Hash identifier: x74+u/Ype9zZNQMUCzDq8uG3fZSkeT9kHr0TMA/whZs=
Subject key identifier: F2:A7:D6:2D:3B:6D:DB:76:2D:B8:F0:01:C5:B8:00:56:DB:6A:A9:05
Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
Certificate issuer: /CN=e43957deba816c9600ce0a4d07fca7d306efee61
Certificate serial: 019C44D9F7AF61938CC45F45EB45B86C9ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
Manifest number: 02C7
Signing time: Tue 10 Feb 2026 00:01:01 +0000
Manifest this update: Tue 10 Feb 2026 00:01:01 +0000
Manifest next update: Wed 11 Feb 2026 00:01:01 +0000
Files and hashes: 1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: MyZT8eSnC0KqK0Xstas7Anb9VzcWif6YQNS9rBD42uc=)
2: jXP7E3ZhCPS-nhI96RhyBYQFCsE.roa (hash: TPYf0iiW2OcHHUnh4b/qsDWeDvydotieDoi8cPyorB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d9:f7:af:61:93:8c:c4:5f:45:eb:45:b8:6c:9a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61
Validity
Not Before: Feb 10 00:01:01 2026 GMT
Not After : Feb 11 00:01:01 2026 GMT
Subject: CN=f2a7d62d3b6ddb762db8f001c5b80056db6aa905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:0f:cd:b5:34:71:31:1d:c4:5a:36:47:7d:
1a:57:14:7e:31:c8:bc:b1:63:15:2a:47:71:ad:84:
09:8a:72:1d:f9:04:c3:71:ba:4c:2e:54:0e:4a:c9:
10:dd:29:1a:20:39:b6:1d:11:fa:16:49:e5:70:ed:
21:03:32:e4:fb:67:1b:3e:42:ba:46:5c:29:31:2b:
22:38:d0:02:f6:df:a7:79:ea:55:0d:ed:2d:57:3b:
05:0c:7b:1a:bd:77:e6:7f:71:72:00:f7:d2:d0:ec:
f0:56:fd:19:ce:a2:b8:7f:48:ac:a2:ed:f4:8a:48:
de:a7:72:e7:54:1b:4f:fe:eb:b3:ea:56:de:64:a4:
db:9e:30:3f:10:76:d4:67:3c:8b:7f:ec:2c:ed:78:
ad:69:66:d4:06:6e:e0:d2:a1:e1:8a:62:b9:85:83:
4a:4e:8c:b6:6c:5f:af:be:c4:7e:b9:c6:f6:69:99:
2c:b4:8c:fd:23:28:d5:56:56:cf:aa:19:0b:5a:ab:
0a:41:81:e8:75:bd:99:4a:86:85:1d:59:1c:6d:23:
e4:2a:2c:d9:3e:38:06:14:56:33:02:9e:62:2f:9f:
f8:5f:e2:a5:d7:10:a3:9c:ff:61:37:13:b6:3b:b8:
25:ba:4d:9a:4a:77:2a:49:de:ba:87:a3:74:ad:64:
cc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A7:D6:2D:3B:6D:DB:76:2D:B8:F0:01:C5:B8:00:56:DB:6A:A9:05
X509v3 Authority Key Identifier:
keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1b:45:e7:25:e8:ef:48:78:eb:ce:b4:ba:79:ed:f1:2c:e6:
37:e5:f8:4b:c8:1e:2f:91:22:4f:9e:37:2f:49:11:26:21:30:
c4:fa:57:67:c4:28:b5:0d:ab:96:e0:70:c6:c9:c8:90:d7:14:
f0:44:e6:38:06:a9:07:ee:36:6a:e1:0e:30:14:46:b3:ae:1b:
86:a5:2e:ae:7d:79:c0:11:c6:a7:ce:bc:c9:38:5f:19:8d:51:
c3:32:4e:21:5c:09:16:da:77:fa:33:d9:9d:5d:a7:b6:97:c4:
2c:95:c3:74:0f:e2:fd:68:ad:0b:63:aa:c1:9e:84:5c:5c:a1:
9a:f6:db:e9:83:2f:ff:37:61:91:f4:f6:c6:a7:a3:91:a2:2e:
8d:d1:f8:c0:43:93:84:62:82:06:63:bf:22:46:34:b8:07:5e:
6a:30:94:b4:90:97:85:0b:21:f7:ba:08:0e:bc:ad:31:a4:0e:
bc:66:18:86:26:93:c3:75:c2:d5:fc:f2:cb:f1:49:d5:8b:d8:
cb:01:2c:fd:be:96:46:4b:fb:7a:f3:0f:57:d5:52:ba:2b:91:
bb:bb:04:d9:53:50:f5:0b:bd:52:22:67:c5:95:5c:94:cf:16:
9f:c5:14:21:bf:7d:4b:e7:90:97:a4:54:97:af:53:bb:f2:45:
cb:82:07:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:50:12 2026 by rpki-client