This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: GxV8maeZnQ74T26pbem2/MKn+F72duSlToD6fFORSyE=
Subject key identifier: 34:4D:C0:99:48:64:F8:03:13:C8:D0:41:65:99:D9:FD:38:E2:9B:C2
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 019C44351B05296634D3062AC2B92D0F0C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 1252
Signing time: Mon 09 Feb 2026 21:00:56 +0000
Manifest this update: Mon 09 Feb 2026 21:00:56 +0000
Manifest next update: Tue 10 Feb 2026 21:00:56 +0000
Files and hashes: 1: JIH2hr0PFTmo-UenvIATlScnTmw.roa (hash: /Ko64eIHlbMST16GcGIM1/ka+jF/BdIAp0WDKwXJUzY=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: w0ONj81H3ne4JmlNFy7F8hEfRPFTBScLp3yfrfsrMF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:35:1b:05:29:66:34:d3:06:2a:c2:b9:2d:0f:0c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Feb 9 21:00:56 2026 GMT
Not After : Feb 10 21:00:56 2026 GMT
Subject: CN=344dc0994864f80313c8d0416599d9fd38e29bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:fa:b3:f0:d8:66:ad:0f:b8:a4:78:0a:12:
73:df:27:7d:0f:15:5d:33:37:14:62:fb:7a:8d:ad:
35:fe:45:6f:d2:26:8f:29:27:ad:b8:b9:29:55:79:
7e:9b:1b:e0:17:bd:9b:ea:a5:fb:5a:45:34:b7:2f:
ae:2f:fb:18:d5:9d:2d:5b:2b:d1:0b:ad:dd:d8:07:
1a:78:d4:72:40:40:67:fc:08:65:a5:c2:79:4e:04:
26:f9:04:26:38:a5:80:9d:6a:7b:a1:49:37:23:5b:
fc:bf:78:16:5e:a0:71:f1:7f:7c:1e:fd:bd:31:d7:
88:a5:66:5f:97:e4:a6:82:85:b6:3a:15:28:84:89:
ec:64:49:a7:5e:b8:2e:c1:a8:4d:58:0f:25:2c:e6:
9c:b9:b5:d9:a7:e2:8c:51:29:b2:45:e6:27:bf:be:
c3:cc:f8:9d:5e:41:04:53:f2:9f:95:f0:23:ad:bb:
ba:a7:1c:f1:a0:68:d1:a6:03:d7:f6:9f:95:63:0b:
e2:5e:83:ae:7d:b1:88:47:38:e4:2d:e1:67:a5:b1:
45:e2:b7:8b:c8:d0:ee:28:fb:e0:4d:d7:b2:45:3e:
be:e4:75:fd:1d:ca:06:0b:15:2e:1d:6a:c8:3e:1d:
d8:f8:75:d3:88:71:71:30:03:38:26:3b:14:07:ab:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4D:C0:99:48:64:F8:03:13:C8:D0:41:65:99:D9:FD:38:E2:9B:C2
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1d:af:ce:ea:3b:22:f1:11:6d:24:a2:ac:dd:ba:6b:8b:f6:
b9:9a:62:1d:22:ae:04:c1:af:de:6f:8c:e8:d3:3b:48:36:80:
48:db:c8:ab:c1:18:cb:f4:eb:03:fa:02:b0:c8:44:b9:5c:01:
aa:74:81:4d:01:bd:b4:b7:34:66:23:a5:3e:6b:2c:c2:f1:22:
d6:84:be:6b:64:ca:36:ce:d7:9c:f0:70:e7:47:55:f2:25:36:
a7:0f:1c:06:a6:49:b2:8d:c5:17:3b:d3:23:65:d2:6c:69:00:
84:a7:c9:c4:0a:2c:bb:db:56:c3:9b:b1:d0:0e:4f:9c:45:41:
7a:bd:fb:c5:05:42:7a:63:61:d7:4d:b0:9b:2b:9b:45:e8:d5:
f3:b8:7d:d5:f1:d8:08:2f:ac:5b:20:df:2d:a6:7f:2d:29:1b:
1e:b8:c9:d3:b4:22:8a:d0:cd:8d:21:41:a6:09:b8:28:95:26:
71:a3:58:24:64:6c:31:09:f9:a1:21:2f:a0:c1:b2:1d:4c:f6:
b6:ef:c6:3b:b7:df:24:83:59:37:d3:41:d7:e1:04:21:b8:2e:
26:c4:b4:a8:9e:65:29:03:de:e0:3b:ad:7f:6f:9d:8b:68:92:
f4:83:c6:a8:64:6b:1d:3d:ab:a4:03:65:ba:c2:63:b5:39:59:
09:59:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:35 2026 by rpki-client