This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
File: I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json)
Hash identifier: xro7bdBsfI5X1kHkuoza2vziHH9/uNhKm9JM0AkZcyg=
Subject key identifier: CC:89:E3:65:09:2C:82:B1:4D:CA:61:AF:43:20:D0:08:77:38:5D:CC
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 019C420F9E6F40DDE608187002FE5D303D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
Manifest number: 157E
Signing time: Mon 09 Feb 2026 11:00:45 +0000
Manifest this update: Mon 09 Feb 2026 11:00:45 +0000
Manifest next update: Tue 10 Feb 2026 11:00:45 +0000
Files and hashes: 1: 3DT3B1NHAodibv8HfsiWBpQZkkw.roa (hash: be2IZuet6G8U53Y1IKjxfCGpLOGP/WsLRkFMJumAGEg=)
2: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: AY2AysB69Nx2z9hBXJ2is1W8HUfKIEHeCUztuf6D1r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:9e:6f:40:dd:e6:08:18:70:02:fe:5d:30:3d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Feb 9 11:00:45 2026 GMT
Not After : Feb 10 11:00:45 2026 GMT
Subject: CN=cc89e365092c82b14dca61af4320d00877385dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c4:aa:28:64:61:39:42:48:df:6b:7b:1f:51:
37:48:71:73:da:fe:af:d9:e0:fc:15:00:df:30:08:
cb:03:41:96:db:0b:39:9c:d6:c1:dc:fd:87:4a:b5:
ad:5c:1e:7f:12:d6:d3:14:09:ed:ea:a9:36:e2:2a:
0d:be:36:f9:2d:39:0b:67:be:1f:ca:71:63:61:db:
5c:10:ca:27:a0:9e:8d:9c:c9:25:f0:63:44:85:43:
fc:7d:88:00:4c:da:83:16:5c:ee:d9:9d:ad:70:8b:
95:f3:a5:3d:2f:20:11:10:f2:30:dc:fb:42:c8:8b:
50:45:1f:be:cd:34:6e:50:e1:63:0e:6d:11:13:7d:
0b:4e:57:d8:69:5e:c1:03:69:0a:f0:6e:c3:dd:83:
f6:74:08:41:cd:e1:a3:45:20:f0:e8:92:5c:b1:b8:
c9:98:b4:79:b5:32:72:df:33:93:a0:6d:06:c9:cc:
55:01:99:61:2f:bc:bd:3e:d1:c9:f0:d9:1d:53:61:
5f:6b:13:68:04:74:d1:97:80:5f:2c:20:80:38:9f:
50:59:46:b6:f7:0f:eb:be:03:c6:bf:14:d8:a7:7b:
43:63:d1:05:4f:f2:e7:c6:ce:2f:e2:0d:bb:2a:29:
68:86:6d:c8:9d:bb:eb:6d:cb:82:c3:b5:f1:95:fc:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:E3:65:09:2C:82:B1:4D:CA:61:AF:43:20:D0:08:77:38:5D:CC
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:93:f0:e0:d1:8d:98:13:3b:6e:dc:e9:64:80:c3:f9:0f:f3:
ee:ed:8c:35:22:88:56:51:30:4e:84:17:d7:5c:c7:bd:2b:93:
15:fc:e0:25:9c:01:82:ab:bc:ba:f6:a2:4e:c5:2e:e1:85:7a:
d5:e2:ea:cf:04:24:f3:48:32:2f:0d:f5:e3:8c:c1:13:8b:cc:
9b:06:db:00:89:93:45:13:eb:7c:4e:08:93:db:5d:a6:a3:f6:
7d:67:75:7d:73:d1:09:da:2a:35:67:e6:53:66:2a:72:6c:53:
49:fd:be:4f:5a:69:a4:d8:6e:f5:a2:8d:8e:4f:5f:56:39:0f:
a4:03:50:b2:1c:9f:9a:50:8b:ac:7c:48:c7:18:53:36:eb:b3:
80:fb:23:f5:e4:ba:8e:51:42:fd:39:86:7d:6e:26:68:f5:48:
2f:a3:5b:5c:1e:0b:8d:2e:ba:c8:ea:dd:e0:6e:aa:d2:d4:2d:
50:de:ba:10:c2:c0:f8:34:fd:69:64:6e:55:cd:c9:3b:0f:cb:
78:42:de:03:5d:f6:05:42:1f:89:b0:35:c3:7c:fc:87:c8:57:
2f:31:0d:c8:84:ff:97:5d:71:7a:b8:25:9a:d5:53:53:13:d2:
47:09:54:1a:33:65:ab:51:23:02:fa:e6:28:7e:76:75:f1:51:
bc:c2:7e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:44 2026 by rpki-client