This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier: CV72knd0bEpv1NbX013xeo0TNldM/iG6q8y5agjE9go=
Subject key identifier: B2:82:8C:B2:A8:2D:D7:DD:1B:EC:B8:C4:51:89:21:02:36:D8:4A:AF
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer: /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial: 019C420F70914CC3B45C2E28E5D4CEEBA49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 11:00:33 +0000
Manifest this update: Mon 09 Feb 2026 11:00:33 +0000
Manifest next update: Tue 10 Feb 2026 11:00:33 +0000
Files and hashes: 1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: nx2OHXFh2+ZHC8BYPKZCij7f7ywcaUg9zKSE9twcIdY=)
2: yhCwjfMZQm7fd9jkt80pOtuEFGo.roa (hash: hs2p0KXq3AByfrOTWurPjFi6ySD7XrB1GNNKZ5BnbRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:70:91:4c:c3:b4:5c:2e:28:e5:d4:ce:eb:a4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Validity
Not Before: Feb 9 11:00:33 2026 GMT
Not After : Feb 10 11:00:33 2026 GMT
Subject: CN=b2828cb2a82dd7dd1becb8c45189210236d84aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:b5:b5:7f:27:37:e1:1b:52:a0:9b:7b:11:
d3:ec:37:2d:cc:06:8c:59:49:a8:28:57:04:84:17:
88:5d:57:ae:d4:24:72:9b:b5:99:77:e9:82:e9:07:
b2:c3:68:c4:9a:7b:f5:32:fa:1e:dc:e5:d6:86:20:
c2:73:fc:34:91:54:da:a4:63:11:92:ad:cf:51:ee:
0d:ad:1a:67:8d:71:f3:a0:ba:d5:01:62:de:9b:bc:
3b:bb:c8:c3:49:4f:e4:00:87:f1:b8:f5:4f:48:61:
7b:e4:db:63:5c:66:9b:86:6a:04:d1:cb:27:57:60:
80:a9:82:de:3c:14:80:ae:33:c7:9f:22:8d:c4:3e:
2e:b7:ea:42:5c:36:4a:6b:ab:6b:83:dc:e3:41:1a:
1f:8e:6d:09:5f:e1:2b:be:58:fc:21:27:ad:d7:f1:
f1:1e:67:cf:3b:73:07:a4:e8:be:ac:67:41:cd:b1:
86:57:72:4a:54:16:10:f4:dc:70:c1:87:b7:8d:e5:
a0:8e:21:17:cd:65:37:8f:9b:86:6e:2c:49:58:99:
3e:ef:de:54:7d:35:45:cf:6e:b0:e6:f4:01:ab:78:
59:f3:86:04:58:cb:b8:a0:96:b1:a4:8f:cd:67:d5:
37:a5:c1:bf:7f:f4:d7:c8:f9:85:be:9b:9a:18:32:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:82:8C:B2:A8:2D:D7:DD:1B:EC:B8:C4:51:89:21:02:36:D8:4A:AF
X509v3 Authority Key Identifier:
keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:60:37:96:6b:a8:89:4c:0d:e5:f5:99:73:72:6f:2c:7e:f0:
b6:b9:30:3b:a3:ba:84:7a:7a:0e:05:28:0d:99:75:88:1e:5c:
f6:a9:e9:23:a4:e4:9e:13:2f:b2:ea:95:16:cd:c4:d3:d4:23:
9e:83:9b:96:7b:27:f5:4b:f5:9b:3f:6b:e1:1a:87:ab:dd:bc:
fe:13:2b:6d:10:f4:e9:e0:1a:98:15:b8:00:8a:87:8f:52:b7:
16:9a:af:5e:ae:14:dd:f9:09:04:b9:42:da:ef:47:26:77:01:
f3:c5:b4:36:77:04:66:6a:df:f3:9d:c1:22:c7:69:4f:1d:17:
58:46:ab:b1:34:49:e4:df:8d:ee:f3:4b:dd:54:74:2a:0e:8d:
e3:83:40:10:65:96:c9:53:1b:92:9c:7d:6a:e2:2c:17:9f:82:
fe:4e:e6:16:eb:6a:08:d8:5d:52:89:6f:9b:17:52:3c:bb:9a:
66:b1:cb:65:cd:0a:fd:19:bb:5b:23:9e:c0:e9:6f:12:18:73:
bd:33:ec:ea:5a:d8:4b:45:fb:2c:3b:98:12:fd:16:67:93:cf:
da:7a:2b:2c:2d:75:95:19:b5:fa:bb:1c:89:4f:a9:75:24:e2:
f1:a3:36:5c:78:99:2e:0b:4f:b7:f5:dc:8f:e7:7e:f2:5e:88:
65:50:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:46 2026 by rpki-client