This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: CdIVOk4plaTuo6V7sZuGDUM9ugyaZBg9/VHwyGJW+NY=
Subject key identifier: 98:29:D6:B9:0A:C8:57:53:9C:E9:65:45:FB:C0:E9:09:EC:16:9C:3F
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 019C451083E6E2B8252F90008C61EE9600E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 138F
Signing time: Tue 10 Feb 2026 01:00:36 +0000
Manifest this update: Tue 10 Feb 2026 01:00:36 +0000
Manifest next update: Wed 11 Feb 2026 01:00:36 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: +4sNeVSqoKj8utHL4zfkIEOcAgWNnFNA/CgzmHF/ShQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:10:83:e6:e2:b8:25:2f:90:00:8c:61:ee:96:00:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Feb 10 01:00:36 2026 GMT
Not After : Feb 11 01:00:36 2026 GMT
Subject: CN=9829d6b90ac857539ce96545fbc0e909ec169c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:1c:42:23:60:3d:b4:fb:df:58:12:06:5b:
e4:9e:41:68:8f:9a:1a:8f:c5:cf:c8:30:3d:9b:bb:
f6:7b:58:69:24:20:d9:c9:d1:f1:71:cb:6a:aa:0f:
5e:1d:b4:8e:46:fc:f4:d9:19:4f:aa:1b:0f:b6:2e:
e2:3d:81:46:ac:88:ba:93:d7:fa:fc:73:8e:9e:79:
6b:b7:90:0f:1f:98:c0:b2:7f:53:70:27:03:49:28:
5c:bb:72:34:6e:6a:59:42:aa:7c:2b:b9:c4:51:35:
21:0a:98:77:71:d2:43:58:37:af:f5:87:b8:6b:bb:
a1:2a:72:a3:4c:15:d3:ca:68:84:65:9e:3c:0b:ea:
f5:4f:b2:1e:de:39:4b:9a:2f:72:1e:cd:88:74:bf:
d6:20:1e:ca:34:3f:51:4f:84:91:1e:bd:ee:d5:25:
00:fa:0b:e1:bc:66:69:32:85:5b:d5:85:ba:00:11:
14:42:a7:24:8d:86:de:96:52:89:1d:30:b4:35:97:
79:3e:2c:37:59:f6:7b:cc:cb:65:87:0f:a5:60:13:
95:30:7f:3d:4b:51:99:0e:83:17:3a:7f:77:54:1b:
9f:cf:2e:5d:4b:c5:76:67:13:86:87:f4:7e:0b:6b:
75:ab:70:83:f5:89:f1:85:a6:9a:6d:fb:c9:d2:8d:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:29:D6:B9:0A:C8:57:53:9C:E9:65:45:FB:C0:E9:09:EC:16:9C:3F
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:dd:f4:a6:2b:f6:72:da:21:b4:79:d3:4f:7e:5c:d7:f6:06:
75:f0:c4:26:64:e5:96:64:28:2b:e5:93:7c:43:3c:11:68:ae:
84:41:40:e3:b3:c3:c8:24:e9:b6:3c:6d:8f:83:7d:d6:1c:12:
cf:33:43:ee:9f:a2:fa:7d:32:12:7f:45:da:cc:12:bc:55:13:
ad:37:1c:08:ff:e1:46:4c:83:44:8e:8a:98:30:92:0c:83:bb:
8a:74:62:d3:31:13:82:83:f9:cf:3e:8e:ab:07:8e:4a:63:b7:
74:10:e2:e9:03:4a:5f:22:dd:d3:ea:97:ca:a7:ab:65:40:4f:
3b:e8:96:b8:b3:44:c2:4a:4d:12:6b:0d:24:e9:a2:ef:9f:2f:
64:83:6c:6e:e5:d3:55:e9:76:8b:ff:4d:2b:3d:63:9e:47:c8:
61:3d:9e:f3:c0:82:8b:13:0c:a4:bc:98:8a:26:64:41:26:cc:
11:9b:3b:f8:7f:ea:3a:fd:0f:e3:31:5a:e6:54:7a:d2:1f:50:
f0:4e:04:a4:93:68:02:32:95:d4:f5:40:dc:33:09:4c:df:cf:
67:4b:44:82:ba:90:47:33:6c:cc:cd:dd:03:31:b5:97:08:22:
bf:4d:0d:9d:57:55:7f:3d:43:45:04:6b:5f:00:99:39:bf:84:
e6:92:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:53 2026 by rpki-client