This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
File: 51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json)
Hash identifier: DiOY7XR9Vjeu3OH4JaG4BdLoGxpBqfdddqeGY5YB9+o=
Subject key identifier: BA:FA:55:15:A8:2B:53:28:9A:90:BE:04:83:9F:74:17:22:22:88:8A
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Certificate issuer: /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial: 019C424638F140EC7A424AAB973B67EC4238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
Manifest number: 07AA
Signing time: Mon 09 Feb 2026 12:00:24 +0000
Manifest this update: Mon 09 Feb 2026 12:00:24 +0000
Manifest next update: Tue 10 Feb 2026 12:00:24 +0000
Files and hashes: 1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: 7WCia/dggrx7a9z71+yzoAST+xOaoDXvx3IKMFjXG5E=)
2: n44f7QSdRCQiunlcmqHdl3w15uE.roa (hash: AjuubWqF9PqvZ/rZA7q3KWYt0VtrOQcS6lypZ6/PGG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:38:f1:40:ec:7a:42:4a:ab:97:3b:67:ec:42:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Validity
Not Before: Feb 9 12:00:24 2026 GMT
Not After : Feb 10 12:00:24 2026 GMT
Subject: CN=bafa5515a82b53289a90be04839f74172222888a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5d:bb:eb:76:49:7f:a3:d3:44:58:c1:b5:9d:
3b:cd:f4:aa:b9:a6:7c:c3:d1:06:06:e6:ef:fc:15:
53:42:bf:3d:9b:ed:a1:4b:0a:88:8b:06:2b:23:f1:
82:28:b4:20:49:2f:b3:b2:37:65:e9:c9:5d:a6:c1:
7a:49:ee:37:b9:4b:0c:a3:c1:f5:45:c7:50:f2:4b:
e5:27:c2:4f:97:5b:34:0e:7c:e3:e1:fe:3f:c6:03:
c7:8a:8a:65:3b:66:7f:15:bd:98:be:31:d5:71:cd:
e3:f5:23:59:f1:84:0a:36:89:9e:30:69:28:18:57:
bb:e8:a0:34:33:41:5a:91:c8:45:e1:81:1a:c4:2f:
06:c6:20:15:36:86:b4:23:f6:ba:80:c0:59:43:3e:
b8:21:82:1e:86:3f:63:10:d5:88:a8:d0:da:cf:c9:
0a:b7:73:b5:38:d0:d7:3a:7b:24:05:0e:39:74:40:
c3:6d:4d:21:6f:d4:1a:ac:fd:6e:20:ab:66:f1:2d:
b0:c5:77:8f:9e:88:6d:b1:69:8c:6b:13:b1:0d:aa:
76:be:c2:e4:65:8f:00:1a:d2:6a:16:a5:3e:23:1b:
1b:c7:36:a4:04:8a:0e:d5:50:28:b2:46:b8:b4:ef:
db:50:d9:21:e9:0f:fe:1a:e2:36:15:b6:b0:45:74:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FA:55:15:A8:2B:53:28:9A:90:BE:04:83:9F:74:17:22:22:88:8A
X509v3 Authority Key Identifier:
keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2c:76:30:3f:d7:72:61:ef:b3:12:cd:e7:0d:d7:ac:a3:cc:
8f:80:64:c8:1a:6e:e0:09:6d:d2:cc:e8:da:a2:86:f4:e4:4a:
49:ca:cb:1c:19:f8:ab:e5:62:56:a7:e7:ff:fa:3a:77:77:17:
d0:5e:81:03:d3:2c:56:c6:b6:3e:03:59:19:5a:60:38:f8:e4:
a0:98:4f:5a:ff:3e:e0:c8:bb:47:c5:7a:ac:9a:a3:2f:1d:4e:
0a:45:10:17:51:29:30:40:5b:32:7d:88:73:ab:98:63:7a:89:
d2:e4:93:d1:3d:28:ab:b8:77:49:29:30:2f:e4:ec:cd:50:65:
54:e1:f1:87:2d:8a:a4:2c:3f:89:7b:1b:ba:32:64:4c:50:ee:
87:d9:18:7c:61:90:ae:38:1a:dc:27:4d:4c:83:c5:66:03:a9:
73:c5:45:38:f0:4d:80:85:15:80:86:d0:0e:34:b5:5f:1d:cf:
45:6b:53:8c:a7:89:1a:4d:66:c9:e5:68:13:bf:3f:14:af:5d:
65:08:8e:f5:c4:a5:ab:d3:17:b2:0f:22:0f:c4:bd:64:22:cb:
88:5a:24:3c:c2:15:1f:38:be:d6:18:34:cd:20:73:ca:c4:47:
9b:9f:4b:a6:de:13:96:6b:4d:36:7f:10:a0:8b:1b:66:5f:01:
a7:87:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:40 2026 by rpki-client