This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: oRrPG5aPTbObrLTyyVZgmq1GzD3TaQYlzh2JsvQ3HV4=
Subject key identifier: A3:D0:CA:D4:11:16:94:B2:EA:CB:57:08:2E:0B:4A:B3:A0:12:D8:E2
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019C4210043620A7DCBC4E3DB1895B454683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 180B
Signing time: Mon 09 Feb 2026 11:01:11 +0000
Manifest this update: Mon 09 Feb 2026 11:01:11 +0000
Manifest next update: Tue 10 Feb 2026 11:01:11 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: Ort62ssUASdOOFs7kEDrH1ipSpg46WwQw1Wt0Vr79+g=)
2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:04:36:20:a7:dc:bc:4e:3d:b1:89:5b:45:46:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Feb 9 11:01:11 2026 GMT
Not After : Feb 10 11:01:11 2026 GMT
Subject: CN=a3d0cad4111694b2eacb57082e0b4ab3a012d8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:b5:47:48:2f:0b:67:fa:ff:72:d5:03:46:
25:a8:dc:25:eb:ce:7c:aa:54:db:8e:a5:8d:7f:e8:
b9:f4:bb:86:64:9a:d6:a5:d7:4b:90:43:e9:2e:ea:
2d:f5:52:b9:82:8f:26:91:f9:0b:b0:5b:e6:9e:bf:
7a:60:c1:f9:9d:0b:e6:20:6e:34:0a:8d:08:10:9d:
15:a7:22:ea:08:3d:40:3a:f9:14:67:82:f6:a2:9b:
ac:9a:b1:46:cc:9c:57:5a:0e:3f:f5:2b:ac:a0:46:
9e:5e:1d:fb:97:e0:60:42:4b:26:ea:07:7c:d8:34:
40:24:13:81:2a:74:58:45:23:d9:e9:25:0d:6f:48:
e1:94:4c:95:ed:c8:96:4d:d0:f3:89:30:ab:1b:51:
56:4f:28:3c:df:14:11:63:41:c1:a8:d5:9d:53:68:
11:e1:ec:28:81:80:17:7e:3b:5a:da:05:1f:fc:0c:
c3:ff:ab:fa:e9:2b:70:24:c0:17:cb:5d:0c:cd:34:
19:f5:95:25:69:bc:02:10:f9:8b:ec:ac:78:be:bd:
3a:c1:03:2c:57:8b:86:45:5d:4c:7d:0c:05:a1:73:
a5:ef:ae:55:73:30:9c:b0:24:65:0b:84:f5:db:c2:
0c:e8:f8:7c:bd:ed:e0:38:d1:10:3e:70:a5:ea:fe:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:CA:D4:11:16:94:B2:EA:CB:57:08:2E:0B:4A:B3:A0:12:D8:E2
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:36:01:1c:c2:12:56:ad:69:b3:aa:9a:ff:08:a1:9a:00:cf:
15:02:f8:c3:6c:d1:dc:41:e0:48:a3:14:7d:28:e3:c5:27:92:
67:bd:fe:be:45:f7:5e:7e:ab:53:a1:be:d9:c1:e5:a1:93:9c:
87:a0:33:0d:c1:c8:09:4e:39:56:54:17:50:3a:32:81:58:70:
f9:8d:21:cd:49:3f:5b:90:5f:4e:57:d7:fc:02:79:ab:4d:a5:
8e:2d:1d:22:59:4d:38:bd:96:80:a2:62:3f:9a:21:8c:d8:74:
63:0b:47:84:37:3c:53:65:8d:9c:86:3d:06:51:e2:46:93:e4:
36:32:ff:e5:5f:f3:df:3b:cd:16:04:ac:80:2b:88:89:01:0c:
b3:b6:64:18:8c:d0:02:6c:e3:d6:17:1c:65:90:f8:b4:2c:c3:
7d:dd:e1:4e:ec:ab:24:e4:3b:96:1b:9f:c7:3b:37:ee:ee:64:
cd:23:38:40:3e:ec:05:9c:9d:f0:8b:02:aa:61:e7:8d:80:5a:
28:be:7b:d7:04:b4:36:92:18:87:cf:f1:dc:85:f8:b8:a0:d3:
16:66:4c:d6:1c:a4:8f:be:40:13:d6:f3:a2:81:12:d2:0d:20:
47:6f:a6:73:1b:1a:11:b9:2e:9d:52:86:e3:8c:01:55:19:93:
9d:77:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:00 2026 by rpki-client