This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File: MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier: OAWAdK1/T7oE/rmMLRtFuUPl0UnLdObPCnhy4Ebbn14=
Subject key identifier: C0:EE:AA:D5:BA:C4:4D:98:2D:6D:F6:DB:51:21:AE:58:6F:80:A4:AF
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial: 019C41D8908F78B441A18ADE3E87BB5D30D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number: 1377
Signing time: Mon 09 Feb 2026 10:00:37 +0000
Manifest this update: Mon 09 Feb 2026 10:00:37 +0000
Manifest next update: Tue 10 Feb 2026 10:00:37 +0000
Files and hashes: 1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: RNIH0xoRhUr69ohWH2CtvpGaMjcANzlBE25sv4Jw2pk=)
2: UO3-ECp44i-4NHov7ZcCJgmk2iw.roa (hash: pq04zRZsIbyhYdzYcYCke50JhIGeXTbV4hV+QB02Ah0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:90:8f:78:b4:41:a1:8a:de:3e:87:bb:5d:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Validity
Not Before: Feb 9 10:00:37 2026 GMT
Not After : Feb 10 10:00:37 2026 GMT
Subject: CN=c0eeaad5bac44d982d6df6db5121ae586f80a4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:db:a9:40:71:9c:df:69:cf:47:6f:ce:ba:
e3:ed:17:81:80:b1:65:23:18:e4:a9:ee:2b:c4:80:
dc:57:1a:33:ad:46:08:b8:42:1d:d7:67:a7:fa:33:
55:96:09:95:7c:4e:2f:e8:18:ac:32:e7:42:44:06:
47:cc:b7:b5:0c:2a:2e:1e:d2:0d:7f:70:49:96:6a:
32:5e:0d:2e:ef:fe:6c:11:a8:e7:aa:52:27:01:e2:
f6:ef:e1:aa:f1:6c:7b:3f:01:40:d7:79:a6:6a:7a:
ce:c6:59:fb:c6:0f:dc:ea:17:41:20:df:39:79:35:
9a:b3:8c:9b:56:b6:a2:8e:50:8a:04:1e:46:c5:fb:
63:5d:9e:9c:ae:ab:69:89:73:51:8c:94:7c:3d:2d:
1f:d6:3f:f9:4f:9b:10:12:63:6c:2e:4a:35:d4:3f:
9c:a7:2c:ac:75:51:f4:5c:ae:90:5c:07:48:37:43:
e7:5b:40:05:5e:03:f9:3f:57:02:79:5c:59:83:59:
3b:d5:56:7b:98:91:9f:5a:15:70:a2:a9:e8:97:4b:
d8:ec:9c:2c:d7:cd:2d:73:fd:1c:41:37:3d:1d:be:
c4:4b:0c:de:4b:3f:1d:fc:84:59:4f:e4:e1:7e:b6:
b8:b9:d3:b4:d3:c6:97:2c:6f:f3:a0:d7:ea:50:c9:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EE:AA:D5:BA:C4:4D:98:2D:6D:F6:DB:51:21:AE:58:6F:80:A4:AF
X509v3 Authority Key Identifier:
keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f7:d9:34:de:97:6c:54:92:3c:94:b8:cd:94:d0:50:14:b0:
38:a9:93:4e:ce:dc:a6:ed:ff:cf:04:fc:41:bd:a2:15:4b:a0:
62:fb:99:14:35:cc:e1:52:2b:54:ff:fd:4a:f3:18:4d:55:fa:
a4:9f:57:9d:36:d4:4b:89:66:41:f9:d7:94:16:db:28:2a:79:
db:54:54:b0:04:80:4d:83:84:68:42:87:9b:2a:06:e3:58:af:
b5:78:35:64:52:26:aa:94:40:33:19:7e:47:d4:c3:85:7c:ab:
24:5b:eb:19:dd:ab:87:09:aa:db:ad:a3:0c:9a:c6:81:f6:75:
b8:cc:f3:df:2b:99:f5:53:6b:2e:fa:d9:20:8d:52:37:2a:86:
99:b3:35:50:82:95:84:f7:7f:a3:13:f9:39:88:f2:e3:9e:7f:
24:1b:5b:08:84:63:44:9d:8c:cc:d5:a4:e6:79:78:6b:6f:46:
df:4a:21:30:7a:24:7c:97:b2:7b:53:13:48:a4:3d:d2:ac:b9:
b8:67:61:b8:31:d8:9c:e0:bc:f9:2b:3d:aa:3d:9a:69:c6:43:
14:66:97:04:6a:cb:0f:63:51:5f:91:64:27:61:66:78:55:cd:
39:3b:ca:4c:45:40:5a:ff:bf:ac:ac:c0:55:96:9f:98:df:57:
d7:dd:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:51 2026 by rpki-client