This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: SQS5z/avvHaboRUffvbRVgFXNR4tpMdgAWMiB4mJolM=
Subject key identifier: 9C:3C:57:C8:63:84:11:E8:CA:C5:F2:58:17:D0:28:85:14:2E:20:59
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019C1E3A3FB66D0087513F685FDE6B871790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 17FC
Signing time: Mon 02 Feb 2026 12:00:59 +0000
Manifest this update: Mon 02 Feb 2026 12:00:59 +0000
Manifest next update: Tue 03 Feb 2026 12:00:59 +0000
Files and hashes: 1: aoOpVJxHaq6lirDB7KBfHBY1mPg.roa (hash: yU+Zr+0ARyapGrg/EO3GqqfA2M5mqsDqcwUrOhZ27aQ=)
2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: Wos2pke32Fytbl+rsr7qL2PgIbzzvILZ8Khh0hiS+Ow=)
3: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:3a:3f:b6:6d:00:87:51:3f:68:5f:de:6b:87:17:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Feb 2 12:00:59 2026 GMT
Not After : Feb 3 12:00:59 2026 GMT
Subject: CN=9c3c57c8638411e8cac5f25817d02885142e2059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:56:e6:d4:e2:31:ac:8b:6c:cf:0c:79:e5:
30:fd:5c:a9:be:91:0c:e1:8a:6d:61:fd:15:8d:e6:
f1:64:ed:ea:a5:c3:bc:0a:08:58:db:f5:2f:93:0b:
48:8f:ab:f7:ff:0f:af:c7:18:a7:48:e7:06:cc:a4:
1e:92:87:c2:05:7a:f1:d4:44:ca:eb:d9:20:e9:93:
a4:3b:2c:39:27:79:a6:f9:01:71:64:56:f0:89:67:
1c:ec:f4:ea:3b:91:ba:20:ac:d9:26:f5:92:15:3b:
39:5c:66:c4:1f:26:84:e5:a7:6e:ad:b4:ff:5c:81:
d3:b3:5a:f4:46:2b:4a:c3:57:67:30:ff:f1:bc:cb:
a6:5c:46:c7:93:a7:34:98:62:86:8b:37:56:78:ce:
dd:38:e6:9c:18:d1:32:bc:99:2f:5e:b5:82:0c:6f:
31:0f:32:0f:7e:d1:88:6f:57:8e:d5:86:c7:f1:6d:
19:8c:2b:e8:58:12:91:66:82:67:d9:40:f8:83:da:
22:a4:7d:bc:10:94:95:46:1b:c3:ea:3c:a6:1f:9b:
f3:99:36:0e:c5:1d:b9:e4:34:24:68:67:c9:da:30:
c1:0b:90:97:ce:15:47:b8:b3:cc:1d:96:1a:36:93:
a3:57:67:03:10:f4:a8:d9:aa:09:36:01:77:c4:0e:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3C:57:C8:63:84:11:E8:CA:C5:F2:58:17:D0:28:85:14:2E:20:59
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:99:29:c1:1d:d2:de:65:c9:05:d5:f5:6e:08:cf:1d:57:3e:
66:69:85:77:b4:e3:c3:36:58:9b:bc:32:0c:d5:cf:56:5b:dd:
c9:25:f4:ea:5e:84:f4:11:cd:dc:72:bc:82:6c:1d:b2:1a:22:
b8:f9:d6:ed:66:44:89:5a:a3:f3:50:93:d7:d9:58:91:24:52:
7b:9c:c7:cd:20:5f:3e:1a:d8:a9:1d:7b:b9:09:fc:e9:a4:47:
a8:fd:aa:b9:ce:32:94:c1:9f:14:6c:8f:9e:1c:e4:fe:ec:a5:
8c:af:d8:f2:31:02:56:3f:84:78:4f:38:70:89:e9:d8:0b:da:
44:a6:4b:5c:5d:a5:2c:57:82:26:9b:ab:87:c4:25:42:f4:90:
d8:00:00:66:65:30:54:58:72:e3:6e:63:01:cd:61:14:5d:7a:
af:2c:67:9a:3b:52:22:bc:75:22:c0:ee:8a:a8:45:38:56:58:
75:31:00:b1:df:ad:c2:cf:74:86:f9:54:a8:cf:2b:b7:ed:6c:
ef:73:7d:4b:0a:28:55:59:c7:4e:55:e1:22:64:23:d4:93:e8:
ad:17:d7:74:1f:12:93:ed:2d:e0:03:b1:97:7f:ee:2f:fd:85:
ad:f8:a2:05:27:60:0c:43:99:34:1a:82:60:fe:27:22:0f:ee:
4c:dd:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 18:59:03 2026 by rpki-client