This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: sZ9CAvbnz1mJdP+Jj0wPy5esx5b57r5XQkv/fjuKY+g=
Subject key identifier: 70:C3:4E:BB:26:8B:36:8F:57:E1:69:9F:26:D6:40:B0:7D:4E:9E:E8
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 019C42EB019AF399957D584F1B924C9043E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0C1C
Signing time: Mon 09 Feb 2026 15:00:23 +0000
Manifest this update: Mon 09 Feb 2026 15:00:23 +0000
Manifest next update: Tue 10 Feb 2026 15:00:23 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: WKFrHoexND92n+/p23rebhyFMJ9ev9KNQj1w9f7yFzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:01:9a:f3:99:95:7d:58:4f:1b:92:4c:90:43:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Feb 9 15:00:23 2026 GMT
Not After : Feb 10 15:00:23 2026 GMT
Subject: CN=70c34ebb268b368f57e1699f26d640b07d4e9ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:85:56:06:f7:00:4a:e0:79:99:de:08:d5:
9d:1c:0f:3d:7f:ba:ed:78:02:10:56:a9:94:da:b1:
1c:1f:ae:c2:29:6f:15:55:ab:19:cd:c9:30:14:1b:
fa:eb:a2:77:d6:eb:f9:e6:89:71:6c:69:f6:1e:25:
44:2f:22:f6:6a:a0:ef:30:47:b6:71:18:78:23:29:
67:d9:e1:28:c6:e2:a2:93:68:06:1d:e2:71:15:27:
16:6b:94:85:3e:04:2c:4e:d8:d0:54:0f:65:57:81:
aa:e6:46:db:5e:1e:b3:1a:7a:1e:11:8e:1b:46:ef:
b9:95:1a:69:0c:b8:83:e1:48:7d:13:14:30:f9:d5:
76:26:e6:4e:ab:1c:49:75:67:45:59:02:2f:4b:ce:
35:77:3a:cc:06:8b:72:77:47:a8:ce:da:24:1f:67:
9b:ba:a9:fb:c3:23:82:da:2e:91:14:2c:1f:39:10:
66:f4:c1:42:c7:eb:9e:0f:c6:05:32:3d:60:49:92:
d5:78:f3:ad:25:d6:44:7c:db:9b:bd:8b:0f:f2:6b:
e6:e9:81:27:18:ba:a2:9b:08:0a:f3:54:ff:e9:d0:
f8:66:bf:8d:e0:fc:fc:36:12:e5:0d:b8:b8:7c:d6:
2a:96:89:ed:44:32:8e:55:45:89:dc:6c:4f:b7:63:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:4E:BB:26:8B:36:8F:57:E1:69:9F:26:D6:40:B0:7D:4E:9E:E8
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:00:66:09:99:d3:f5:27:7d:d8:51:54:43:9e:38:8d:95:ec:
8c:39:77:fa:78:89:85:77:df:c4:61:6e:7a:f9:50:6a:ef:65:
5d:01:af:55:4b:6a:3f:31:27:f6:f3:3a:bd:f2:c7:f9:f5:32:
39:a6:29:a1:cf:c4:a7:9f:1f:ab:c7:c8:8b:34:d9:05:6c:7f:
89:7d:e0:f6:1f:eb:e7:ad:b1:94:24:8c:d1:dd:a3:44:88:3e:
ac:bf:af:7f:42:52:1d:af:f4:7f:47:c4:38:e0:89:2b:db:42:
52:29:26:e8:3d:fa:b9:03:c1:63:1b:93:4f:e0:e6:89:4f:ad:
36:b5:23:db:03:19:b7:c0:a7:95:a7:24:8c:e0:64:74:d7:92:
5a:20:80:88:6d:aa:9d:39:05:9a:f1:26:21:04:df:77:3f:8f:
30:46:d8:d0:5d:42:4d:b1:17:2a:eb:17:ec:8d:e6:fb:33:51:
7b:fb:f8:d1:fd:eb:89:e3:aa:07:6a:42:5e:ec:37:3f:6e:79:
4a:e4:e6:2e:83:dd:17:5a:8b:0b:e3:42:5c:4e:ae:4d:09:b2:
6d:d8:7d:e4:18:29:ea:e4:ce:93:91:bd:f2:24:24:a3:2f:54:
e4:9f:bb:47:f5:c0:d7:ce:7f:23:05:03:68:98:2b:e5:ef:bc:
31:e0:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:01 2026 by rpki-client