This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File: 51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier: 0M5nokKl+qHTXDCC31e7lvnnhXilo3BCit5nLiQrNkc=
Subject key identifier: 1B:3F:A2:DE:96:F1:2B:76:BC:73:0B:B5:29:5E:7B:BF:F9:AC:4C:67
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial: 019C446BA2E6A6555E579B8BE069C2315A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number: 0B3D
Signing time: Mon 09 Feb 2026 22:00:30 +0000
Manifest this update: Mon 09 Feb 2026 22:00:30 +0000
Manifest next update: Tue 10 Feb 2026 22:00:30 +0000
Files and hashes: 1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: kXYjk4+WifS54qOkM5oz0AaWsJkD/pAbEOu7sXHTnio=)
2: hIJ7BxSqfQNayGkNVH4Xy86Dhbc.roa (hash: fAcJlzHm8GX5dH8gtKkRjvytkl6PKP9fjOi2EMtY8+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:a2:e6:a6:55:5e:57:9b:8b:e0:69:c2:31:5a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
Validity
Not Before: Feb 9 22:00:30 2026 GMT
Not After : Feb 10 22:00:30 2026 GMT
Subject: CN=1b3fa2de96f12b76bc730bb5295e7bbff9ac4c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:39:02:b0:73:c3:3e:d7:df:3f:07:bc:d8:
c6:59:38:58:5f:0e:e1:66:97:7a:86:d4:63:5e:cd:
a4:52:1d:5b:e4:f8:be:5d:21:b4:57:68:4a:7f:a9:
0a:d3:63:27:64:ed:64:f0:6f:9a:b3:bd:74:c7:e7:
dd:5f:dc:39:e4:4f:24:7e:ef:94:a8:9f:8c:a9:6d:
41:a4:a5:39:cd:80:20:47:fb:ea:78:98:43:de:91:
db:16:f3:03:f4:d1:10:02:34:78:71:86:b3:df:1d:
03:0a:82:74:17:36:d7:49:0b:bf:75:80:5c:6e:11:
07:4c:a2:e2:c1:58:26:8c:be:71:3f:43:dc:47:19:
b2:f3:eb:f9:2f:fe:17:15:5c:4a:41:9b:98:bf:76:
73:7d:63:5a:6c:f5:c3:26:4d:9e:7c:fb:5d:cc:93:
ee:9f:37:5c:fc:83:89:b8:ed:42:e1:85:e2:9d:38:
3b:37:da:c7:38:de:81:d2:b5:76:b3:67:1e:b8:d6:
68:ad:d4:89:08:d3:11:c2:bd:fd:a9:4c:ba:a2:cd:
a3:30:31:b2:0a:fb:d6:09:90:9f:c9:26:b0:fd:aa:
7b:39:4c:76:84:a4:ca:96:01:57:a1:58:cb:99:8a:
d9:46:fc:68:58:81:36:7b:f9:3a:61:43:1e:3a:b6:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3F:A2:DE:96:F1:2B:76:BC:73:0B:B5:29:5E:7B:BF:F9:AC:4C:67
X509v3 Authority Key Identifier:
keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:94:84:05:46:38:53:95:e3:6a:c1:49:fb:8d:de:f7:39:e4:
c0:7c:d8:a8:f8:5e:01:0d:d4:ab:f4:98:3e:6b:b2:2f:f1:25:
cf:26:2e:66:56:b9:9e:97:fe:b9:79:dc:72:32:16:0c:2b:c1:
a5:5c:62:bf:ab:a3:2a:a5:65:86:84:47:22:dc:29:e3:50:9e:
48:48:b7:8d:d4:52:a6:07:58:15:6e:33:b7:99:a0:d4:0e:17:
e9:14:c8:a2:5a:a1:fc:2c:3f:85:02:46:48:89:3e:59:5b:ec:
fe:98:49:e0:1e:e1:84:c6:9e:fe:f5:27:56:26:a9:4a:ab:b2:
b3:c4:68:f2:fe:4d:f8:67:f9:91:c9:48:72:c6:84:b2:ee:c4:
19:69:98:a4:b9:fa:f3:d5:ef:19:7f:0e:a6:6b:a2:38:6e:23:
a2:d0:0e:d3:2e:1b:ef:3c:95:62:18:85:ce:a3:9f:e6:18:f0:
c1:17:33:a6:50:5d:3d:b2:94:c8:4f:9a:af:5b:e3:84:19:ef:
32:96:7e:70:ff:ab:e4:97:6c:93:20:8f:c1:10:65:c9:23:c3:
4a:43:f6:66:f0:4e:93:f7:0b:6c:f7:83:ec:d9:4c:d1:e7:8d:
f9:15:9c:3b:96:06:50:60:c5:db:fe:25:20:88:cf:50:cf:3c:
f4:ea:5b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:57 2026 by rpki-client