This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: Po4BqeHEwbUM3XB9ec6kNKvgJX3lOkmHmsKbBRhe/UE=
Subject key identifier: 37:60:99:AB:15:2F:BC:44:4F:F2:AD:22:E7:CA:F2:B9:23:70:42:01
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019C420F7D03DC493054F5A7574B5450019F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0B53
Signing time: Mon 09 Feb 2026 11:00:37 +0000
Manifest this update: Mon 09 Feb 2026 11:00:37 +0000
Manifest next update: Tue 10 Feb 2026 11:00:37 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: WjNlNuhCtLWxGbqflPaocb715qWkApCfO1iZKrFE3co=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:7d:03:dc:49:30:54:f5:a7:57:4b:54:50:01:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Feb 9 11:00:37 2026 GMT
Not After : Feb 10 11:00:37 2026 GMT
Subject: CN=376099ab152fbc444ff2ad22e7caf2b923704201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:e3:cd:42:a3:09:f1:90:61:71:cf:5a:ae:
a5:ef:62:1a:e8:7f:2f:d4:fd:ad:ae:ab:74:81:a9:
27:66:c8:a1:fe:6b:1f:ab:2e:b0:80:80:ce:6d:40:
9a:08:9d:97:90:5e:41:6c:ac:3c:86:2e:2a:ac:1e:
48:5b:d0:7e:c8:f8:c7:6a:ca:b4:8e:a8:72:c1:fd:
17:7b:6a:37:6f:f1:9a:64:22:96:fd:13:20:5c:45:
ea:17:a6:37:44:53:20:f2:1a:e0:b7:e9:29:14:ad:
b9:93:cc:98:e2:23:0c:89:e8:32:26:b8:08:8f:98:
e5:a0:89:35:1c:2f:76:66:70:3f:41:bb:d2:51:7a:
8c:30:6b:f7:fa:eb:36:86:f6:7e:55:a5:16:4c:3f:
3f:f0:7c:dd:1b:a5:6a:42:3a:e4:e0:c1:fc:b0:0c:
4e:53:49:cf:f5:b0:61:d0:3f:4c:8c:e7:da:46:a8:
6d:c9:64:ad:fe:9b:28:9d:87:bc:40:f1:79:33:55:
92:78:05:40:ab:e1:b8:e7:ef:ac:bf:67:55:25:53:
07:98:a0:e8:74:fd:d4:cf:95:78:68:a6:7d:8f:83:
76:b0:e1:7e:e4:f6:f2:fd:42:07:02:b7:ac:6b:03:
ca:3a:1c:7a:a5:e4:06:c3:ac:9d:2a:93:e6:e4:ed:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:60:99:AB:15:2F:BC:44:4F:F2:AD:22:E7:CA:F2:B9:23:70:42:01
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9d:cb:0c:ae:93:24:d1:c7:e0:b6:68:92:09:0b:25:09:05:
ea:87:0e:6c:94:0a:65:2c:88:f9:5a:a4:11:5c:43:6e:5f:ec:
7a:cb:b4:7a:67:22:1b:63:d2:bf:af:f3:31:e8:1d:00:ff:a0:
fe:2c:01:9d:eb:de:9f:2b:9e:37:94:d2:fa:ba:ef:13:1c:88:
f3:da:e1:81:95:60:e1:c6:8c:12:f5:76:b9:b3:d8:2e:b8:7f:
fe:79:39:f1:1e:2b:70:69:ab:0c:22:85:7f:ac:37:97:69:96:
b4:f9:7e:19:19:af:1c:46:ec:f4:dd:f2:85:40:75:f6:de:39:
4e:e3:22:04:28:a0:16:da:38:56:65:19:b0:cb:51:79:42:d3:
55:c4:b7:d1:aa:07:3f:8d:06:82:7c:0e:71:02:03:81:e0:43:
94:cd:0f:e5:92:ca:8b:92:09:c4:00:d6:4e:fa:06:61:e8:e4:
84:9b:76:69:3b:2b:97:09:9a:06:8a:7c:0d:12:53:fd:35:20:
50:22:16:9d:32:52:d4:dd:c1:80:d2:f1:7d:84:36:ea:84:b8:
7e:a0:47:e3:92:08:ac:be:b3:5a:33:95:cf:f3:6c:47:0b:74:
cf:f8:52:66:61:40:94:f3:15:09:9b:b6:09:de:73:79:9d:64:
ba:12:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:15 2026 by rpki-client