This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: MHRTBy+ky8N/l4asBesTKyYSfrHdR97BIX69Qwb0OlU=
Subject key identifier: 81:18:AE:EB:B3:7C:B9:65:CD:F4:19:FA:F6:A0:BF:D0:4B:01:1D:8C
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019C427D57AEB47CB221679DB24B1629ACD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 10A6
Signing time: Mon 09 Feb 2026 13:00:36 +0000
Manifest this update: Mon 09 Feb 2026 13:00:36 +0000
Manifest next update: Tue 10 Feb 2026 13:00:36 +0000
Files and hashes: 1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: Lna1AJDo1b1rFnHSD2ZdzgAgOTUaFeiiLDEuSJJ1jl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:57:ae:b4:7c:b2:21:67:9d:b2:4b:16:29:ac:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Feb 9 13:00:36 2026 GMT
Not After : Feb 10 13:00:36 2026 GMT
Subject: CN=8118aeebb37cb965cdf419faf6a0bfd04b011d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:ad:7c:0c:f1:9b:ea:b8:71:6b:a6:c4:82:
90:a4:16:33:1e:ba:1c:1d:16:33:b9:f3:9b:2e:b8:
94:2a:b0:c6:97:2f:6d:b6:a4:3c:6f:b5:df:89:2c:
4a:7d:4a:53:6e:f6:90:15:47:0b:df:2a:e3:6d:dc:
7c:e4:0a:d1:e7:83:4c:0a:e0:9e:6d:d8:f8:a8:99:
e1:7e:3e:a8:5b:6c:91:0e:a6:30:37:64:52:79:7d:
1d:c2:2a:4f:48:9d:92:fe:4c:9e:27:ba:ea:f4:4d:
09:23:2b:4e:7d:88:c7:60:57:04:c2:c6:2d:1a:41:
51:48:b8:81:97:5e:d1:e9:eb:c3:bb:09:14:76:a6:
e0:0d:e3:ca:e7:8f:9b:0c:d1:c1:e1:29:21:8f:5e:
62:18:db:c7:96:88:e4:12:99:b6:7a:57:0b:ed:d8:
f2:8a:95:3a:be:0b:07:97:46:f2:39:92:b7:a9:0e:
68:ca:ad:c9:73:21:94:09:42:d5:3f:8c:f0:2c:fa:
97:39:1e:92:57:d8:85:d0:ce:52:f1:59:bf:da:33:
34:ca:2e:c1:6a:ea:cd:52:01:80:af:49:79:8e:6b:
8b:75:0e:b6:b1:44:f5:ed:9c:64:b2:3b:bd:6c:af:
89:9a:e1:66:fa:e3:37:34:a7:ad:d2:20:da:29:4e:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:18:AE:EB:B3:7C:B9:65:CD:F4:19:FA:F6:A0:BF:D0:4B:01:1D:8C
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:02:c9:53:4f:e7:c6:ed:6e:71:c1:04:a8:63:c5:65:93:f5:
9b:ed:18:66:36:59:64:ca:92:99:15:d6:80:50:29:cc:a3:59:
37:8a:32:56:0d:47:29:0c:cf:53:d2:90:01:f0:ca:2d:56:8c:
27:e2:07:55:07:b9:02:3c:48:c2:7f:d6:71:e6:04:a6:a4:6b:
22:14:f8:26:4b:1d:36:23:c6:e1:d9:3a:ff:96:a5:76:2b:d4:
c6:da:0d:55:22:c7:a8:c1:73:67:74:58:f5:87:2c:d7:fc:82:
28:76:52:d7:e6:ef:ac:45:e0:5a:26:f0:27:e6:37:fe:8b:b9:
0f:54:16:8b:21:d8:f7:96:27:f3:d3:20:d8:f9:a4:32:4c:2a:
c0:3e:e1:f4:9c:36:be:a9:8b:01:a0:bc:86:68:6d:61:01:be:
55:5d:6f:50:06:43:d4:eb:cc:23:32:63:4e:ae:7d:87:54:bc:
7e:99:3e:63:eb:f0:f8:eb:60:4a:c5:e3:18:a6:15:e5:aa:bd:
9b:40:af:a0:35:b6:be:48:53:cd:55:b1:0e:9d:6b:df:59:18:
c6:34:d4:0e:47:bb:2f:f0:dd:e4:5a:35:fe:c3:74:cb:6a:fb:
4f:3b:f2:7d:a3:da:f5:00:fd:ea:69:21:87:8a:44:54:fd:31:
45:3e:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:17 2026 by rpki-client