This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
File: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft (raw, json)
Hash identifier: sFCCo3NPVcKEUCh9iSnidRFPESld4SX7T3sk47MewQo=
Subject key identifier: E8:9E:83:0E:08:40:64:65:99:D9:26:DD:67:9A:DF:37:24:EA:E6:83
Authority key identifier: B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
Certificate issuer: /CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Certificate serial: 019C4321F8C4399013825EF51D7037BA72F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
Manifest number: 0A8B
Signing time: Mon 09 Feb 2026 16:00:25 +0000
Manifest this update: Mon 09 Feb 2026 16:00:25 +0000
Manifest next update: Tue 10 Feb 2026 16:00:25 +0000
Files and hashes: 1: kRCAFZBrRoONasIbXU7cwNRHK_w.roa (hash: FRFbyFJqSQc0W6om6W1H1sQ3Wt2tS+CaPxjLXjaHs5w=)
2: sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl (hash: /2HL3Sm3cLEjjCiy1CYhilTSBM0y3QtVt3F//bbVgR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:f8:c4:39:90:13:82:5e:f5:1d:70:37:ba:72:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02b1f76e8c2ba4928ac280b27aa84d5967a3504
Validity
Not Before: Feb 9 16:00:25 2026 GMT
Not After : Feb 10 16:00:25 2026 GMT
Subject: CN=e89e830e0840646599d926dd679adf3724eae683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:c2:f0:38:05:01:d5:b4:8b:93:12:b8:6f:
10:19:fa:f4:61:da:09:95:a5:43:6e:0f:de:66:b4:
ca:3f:1f:93:dc:a8:8c:09:bf:33:1a:08:4e:34:3e:
24:c3:ab:5d:d6:c3:34:2a:62:78:18:96:da:6c:0f:
9b:23:89:81:02:3e:4f:a9:28:37:cf:7e:3d:d5:9d:
b5:af:71:e6:79:cd:77:08:fb:57:b2:c1:7e:5e:39:
4e:35:47:e5:38:f5:90:90:c9:49:d6:84:4d:36:d0:
50:2b:b6:b8:66:b2:5b:2d:ea:66:7e:16:bd:b7:4c:
52:ec:37:df:f3:72:1f:45:ed:e5:42:ff:de:9f:85:
bd:4a:03:f5:da:7e:b0:f3:20:0d:28:d5:ad:ea:27:
9e:ee:68:82:8b:2c:7b:15:aa:20:6e:c9:f3:b0:22:
30:20:7d:ff:01:da:58:ed:31:e8:b7:e0:ba:cf:e3:
15:6c:95:8f:d8:a9:6d:a5:8b:53:96:80:93:ba:18:
ea:23:ee:bd:ab:8e:59:67:38:5c:0e:46:93:6e:b2:
70:e4:c1:0a:62:4a:1a:be:b8:15:a7:a2:7c:e7:ed:
7a:8a:33:b9:45:82:ba:08:c9:13:c8:e4:9c:d9:f3:
0e:94:c4:f0:0c:d9:71:01:b4:eb:fb:dd:a7:c0:dc:
13:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9E:83:0E:08:40:64:65:99:D9:26:DD:67:9A:DF:37:24:EA:E6:83
X509v3 Authority Key Identifier:
keyid:B0:2B:1F:76:E8:C2:BA:49:28:AC:28:0B:27:AA:84:D5:96:7A:35:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/08cd46-1019-4f7d-867b-297e03066f7d/1/sCsfdujCukkorCgLJ6qE1ZZ6NQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:63:5c:bf:2d:df:b7:b6:94:c8:32:d1:1b:fc:c1:f6:e3:84:
eb:a8:6f:77:af:d6:72:75:69:c3:bf:4f:cb:dc:9f:a9:0c:39:
a0:c4:bb:29:14:23:7c:51:41:92:d2:aa:63:d0:8e:bf:c0:7e:
31:63:0f:b3:a3:8a:5e:06:c3:89:06:35:20:d9:fb:55:20:e4:
b8:08:36:d3:d0:24:c6:12:f3:8e:38:9f:29:58:9b:36:2a:ce:
b2:6a:b9:92:e8:29:8d:f6:c0:34:fd:26:cb:ec:7c:cf:16:ed:
9e:86:c0:49:39:f2:d0:e5:9e:53:be:4c:3b:d4:f3:9d:b4:c4:
10:fb:45:e3:d2:5a:88:b3:56:c3:c9:6f:6f:fc:e3:cf:5f:79:
93:3d:bc:6c:77:26:9a:47:8e:0a:25:50:07:b4:67:aa:ab:db:
24:77:74:e5:9f:43:3c:b0:9c:23:44:c9:8c:76:9c:a7:dd:66:
47:bd:bb:15:e7:e2:20:aa:3a:6c:d0:85:ee:7d:9c:62:8d:da:
68:5f:0f:98:fb:a5:b8:02:7f:d0:13:7a:f1:b1:12:97:b0:d5:
ef:1b:f7:fb:e0:95:ce:79:d4:4c:92:27:54:24:d0:57:c9:3b:
9f:34:37:e7:8b:cc:de:4d:43:c9:25:3c:2e:29:2f:82:d2:c3:
dc:71:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:01 2026 by rpki-client