This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File: 49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier: gN5Qn0S2mBH/nvIryxvOZeHuRF7REuIigwRXM6yODRw=
Subject key identifier: 0E:F7:EC:0D:F0:A8:A3:B6:13:AE:E8:5C:D7:82:19:8A:B8:A2:F7:25
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer: /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial: 019C4322779367261EBCA2EDCE50ED87E0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number: 10E3
Signing time: Mon 09 Feb 2026 16:00:58 +0000
Manifest this update: Mon 09 Feb 2026 16:00:58 +0000
Manifest next update: Tue 10 Feb 2026 16:00:58 +0000
Files and hashes: 1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: ZDXSs6q8pTbztw6NIukVqkVgR1i34CPGYWvPNVt6h6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:77:93:67:26:1e:bc:a2:ed:ce:50:ed:87:e0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Validity
Not Before: Feb 9 16:00:58 2026 GMT
Not After : Feb 10 16:00:58 2026 GMT
Subject: CN=0ef7ec0df0a8a3b613aee85cd782198ab8a2f725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:a0:2c:48:57:3b:1d:8d:3a:ce:e4:59:4a:
b6:b4:dc:8c:05:72:bd:58:c6:82:a5:85:da:17:80:
b9:fd:81:21:89:82:0b:05:4a:47:1c:b7:ff:ef:ba:
f1:6d:07:d3:ff:4d:05:2a:4b:34:9e:a8:70:c3:a6:
bf:27:ca:27:18:bd:04:c3:38:5d:57:9f:43:a2:83:
56:5d:21:45:eb:79:1b:7e:b6:91:de:8b:3f:71:8e:
73:81:a9:24:d5:c0:e3:9f:6f:ba:f3:52:ac:ed:36:
06:21:24:38:dd:a4:aa:5b:11:e2:be:c9:77:d8:b8:
dc:2b:b5:1b:cb:ba:2a:37:11:7e:eb:d3:85:78:a1:
0f:15:4e:6c:55:9b:01:d2:08:13:d0:84:ac:29:26:
0d:bb:d2:f1:27:e4:60:cb:eb:5b:8b:ae:84:e8:7e:
86:a0:11:e5:36:bb:be:f3:7e:d0:78:a6:dd:e8:6e:
b0:a0:7d:95:0a:ed:36:76:7c:86:94:bd:38:46:f8:
06:95:38:6a:a0:5c:c5:e7:89:4a:6b:06:3d:80:9d:
60:79:43:6e:46:b8:ac:9d:e2:4f:fd:78:e1:a7:3d:
37:d7:dc:b4:e1:80:4c:ef:28:6b:01:7f:3c:2d:2c:
57:07:eb:bd:40:e1:c7:96:d3:8b:7f:a7:be:57:ec:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F7:EC:0D:F0:A8:A3:B6:13:AE:E8:5C:D7:82:19:8A:B8:A2:F7:25
X509v3 Authority Key Identifier:
keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:eb:3a:af:d4:57:8b:7a:22:79:af:88:aa:e5:ac:6e:01:a5:
97:fb:61:d4:26:cc:35:d7:be:c2:c3:dc:74:02:d9:9a:63:c8:
e7:dc:07:5e:65:e3:28:98:b1:b8:fd:b7:34:84:ba:1c:3c:c4:
b2:ca:51:af:47:36:95:32:7d:a3:10:fe:a0:6e:cc:00:33:04:
1b:14:29:bc:65:8e:c9:f5:d2:b9:16:5f:65:f1:73:4a:09:76:
cd:be:85:3b:ce:88:36:77:2b:34:90:a0:e0:ad:67:27:21:af:
71:bc:3d:61:0a:df:b9:02:53:5e:33:b3:a2:03:20:cc:84:5c:
0b:91:4c:79:4f:a7:45:08:82:84:1a:42:d0:5d:cd:94:11:21:
39:2d:92:e5:ae:4c:b2:18:53:67:d6:09:cd:4b:98:e3:74:93:
eb:19:2d:9e:d4:90:8c:05:54:d8:a4:69:d3:ee:c6:a7:41:53:
5c:d5:1e:02:be:07:9c:f4:c4:e3:5b:6e:23:52:25:c0:c1:3e:
1a:a5:fe:ca:70:c2:a2:67:88:d3:b4:b0:66:b2:fc:75:b3:bd:
90:cf:f3:a6:e2:43:c3:7e:0b:74:67:75:0d:a4:96:ec:4e:c4:
ce:8a:01:69:41:8f:8d:32:0c:3d:a7:e7:b4:67:fd:8a:2e:65:
2a:63:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:21 2026 by rpki-client