This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File: d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier: jVldftgqm2Nmx+1wdgst+4JDuZQ5vkFSWXx/FVUWaEY=
Subject key identifier: 82:83:E9:4E:39:43:63:6E:71:12:77:E0:C7:49:02:AA:22:97:41:14
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer: /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial: 019C427DA3470BDE2B5291E506DDD9E59607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number: 0586
Signing time: Mon 09 Feb 2026 13:00:55 +0000
Manifest this update: Mon 09 Feb 2026 13:00:55 +0000
Manifest next update: Tue 10 Feb 2026 13:00:55 +0000
Files and hashes: 1: 1uDiO66z4_GJhppKD5iOYZne4xo.roa (hash: njjChOiFqIrX1FbvslTiBWjd0QGU3XMKBcIu3VrqVf0=)
2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: dmeDzi1Gd3UYKwNtzzOt97y6y6oqcWjLFuBznKKMxGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:a3:47:0b:de:2b:52:91:e5:06:dd:d9:e5:96:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Validity
Not Before: Feb 9 13:00:55 2026 GMT
Not After : Feb 10 13:00:55 2026 GMT
Subject: CN=8283e94e3943636e711277e0c74902aa22974114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:06:3e:64:08:21:8f:97:82:d0:7a:7a:42:
d3:13:fa:0c:a7:5b:f4:ba:05:da:bd:46:86:ec:a0:
ec:88:a9:31:57:19:50:ff:98:26:4f:94:c0:00:21:
c8:f1:29:b2:d9:a1:00:9f:bd:cc:dd:10:72:25:28:
85:de:21:4f:14:2f:2b:fe:e9:40:f1:20:34:5b:04:
14:99:02:53:7e:b5:1d:33:01:b1:26:10:31:16:b4:
52:bf:65:47:cd:e2:c1:d1:20:a5:ee:2d:70:e1:dd:
6e:0e:7d:e2:43:f9:08:94:4d:e0:d5:03:a9:67:32:
ba:0d:ae:7a:86:6d:a2:68:43:f6:83:98:67:82:9f:
37:db:b2:ef:df:fc:e6:4d:8a:7b:b2:e8:79:0a:80:
82:07:78:5f:63:40:9a:97:27:04:2e:3e:2d:4d:8c:
e2:28:27:d6:a6:24:48:fc:23:89:34:a3:c0:a2:4a:
a8:86:3c:0a:54:3c:94:c4:08:11:88:61:0c:da:8a:
eb:84:d5:f0:c4:5f:82:93:c2:22:b1:34:47:35:dc:
c1:81:18:26:de:67:97:2d:ad:76:b0:df:cc:a8:5c:
ca:4f:2a:e3:31:3a:35:f6:6b:50:ba:a1:33:0e:ff:
1d:50:7c:e4:20:34:5c:49:5d:cd:9b:90:2e:cb:bf:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:83:E9:4E:39:43:63:6E:71:12:77:E0:C7:49:02:AA:22:97:41:14
X509v3 Authority Key Identifier:
keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:69:31:71:5e:9f:7c:1f:ed:5a:4d:ec:be:6c:b3:bb:9f:36:
d6:38:43:f1:2a:0b:6d:97:b7:f9:54:54:fb:56:5e:1a:57:3e:
40:7f:3c:4d:eb:ac:20:96:ef:90:40:13:3b:4a:ac:5d:bf:0e:
b3:5a:63:93:5e:e9:1c:9d:b8:ba:72:f0:ce:7c:25:0b:b2:40:
e5:00:4d:ff:c2:fc:1b:2c:de:f1:a6:70:83:41:0c:d6:02:d9:
d6:bf:9c:94:4f:02:ff:74:d3:05:72:f6:eb:26:88:20:d4:97:
20:b0:24:5b:e1:b2:8c:f8:5f:61:18:10:1c:af:60:79:c8:6c:
d7:a3:d1:a8:f9:2f:bc:b3:64:e3:3f:86:13:97:72:1a:f9:a7:
95:0d:89:48:2d:4b:35:33:71:53:08:89:5b:cc:bf:35:0f:d3:
84:0d:da:7d:5d:25:51:a2:5b:28:46:8a:71:c9:df:28:2f:95:
c4:1b:ca:56:18:9e:0e:a9:28:d2:12:00:7e:b3:35:5a:40:a2:
1d:7f:45:00:71:af:2d:90:93:76:57:d0:72:e8:1e:61:bb:9b:
fb:ac:3b:35:bd:81:a4:21:a4:32:89:05:91:fa:7c:c7:8c:17:
f1:d8:fe:15:1d:7f:ff:ad:12:05:b7:ea:cb:b8:07:18:1e:91:
88:85:5b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:04 2026 by rpki-client