This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: 3NgKczNlqF4JtFe3izQ90+87/dPGgIRWeX7Cejjj8lI=
Subject key identifier: 9B:44:6C:D3:A1:58:7A:FD:AA:36:3B:DB:74:22:96:D3:97:6F:75:32
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 019C4322D3206AE6F4108FDE4810945059F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0EA6
Signing time: Mon 09 Feb 2026 16:01:21 +0000
Manifest this update: Mon 09 Feb 2026 16:01:21 +0000
Manifest next update: Tue 10 Feb 2026 16:01:21 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: 2rKFS6Bcwq4qPoUhLFCorHVU11h4GYKmY5WFErTossE=)
2: jK9vJkC-9INkg3kH606wmZpM3gY.roa (hash: pPtcnLjluAlTQa5sDa1ndB+L+idIHW8vl3l2EMrfHcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:d3:20:6a:e6:f4:10:8f:de:48:10:94:50:59:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Feb 9 16:01:21 2026 GMT
Not After : Feb 10 16:01:21 2026 GMT
Subject: CN=9b446cd3a1587afdaa363bdb742296d3976f7532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:4d:56:23:6c:9c:81:6b:d1:68:78:dc:5e:
62:82:b4:f0:df:7a:e4:b5:40:8f:d6:9f:80:7a:4d:
70:79:28:f0:c6:e0:58:b7:47:91:30:2f:5a:90:2e:
33:9a:d3:b6:6c:1b:51:41:c6:f5:1d:f4:7c:cc:1f:
5b:c3:89:d2:99:d9:c1:31:32:f7:b5:0b:a1:9a:5e:
60:5a:51:49:51:5f:77:ea:d9:92:33:b6:d7:c8:3d:
9a:bb:e5:68:ac:15:33:10:a9:a3:34:da:b7:32:4e:
9b:c2:c1:2a:77:62:9c:46:71:7d:26:2c:58:d2:92:
cb:96:36:72:ea:d1:e1:b6:d9:5d:49:a2:ad:f7:97:
c1:9f:f5:51:b8:37:bb:c8:ad:b3:9e:6a:7c:17:2b:
73:57:fc:8b:41:b2:68:34:3f:bb:c6:ca:2e:93:a9:
f1:99:6d:5b:2a:04:84:a4:8c:d6:7a:db:dd:4c:02:
ca:23:56:5d:dd:b8:3f:69:69:30:2c:fa:47:80:a8:
08:43:da:08:03:1b:93:c5:df:7c:1a:1a:23:80:1a:
00:41:b2:f5:fe:02:cc:9d:6f:c5:83:b7:a9:61:6f:
0b:ef:1d:84:f3:c6:60:51:81:a5:31:ef:e2:29:d1:
17:ce:62:c5:69:68:cb:e8:b6:e0:d7:12:2c:0a:17:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:6C:D3:A1:58:7A:FD:AA:36:3B:DB:74:22:96:D3:97:6F:75:32
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e9:7c:24:43:ee:63:ac:3c:9a:20:07:34:ec:9a:fd:bd:33:
9a:16:67:6c:a9:5e:69:c3:e6:89:65:03:6b:c3:0c:79:98:bc:
1b:e0:26:91:35:82:04:f7:3b:6e:f4:55:60:ab:e9:0b:54:b6:
cd:84:b4:21:18:a2:99:be:cc:d5:eb:c5:43:e2:e7:87:5a:97:
d8:9b:94:8c:6f:67:72:99:d6:2e:52:57:91:97:7b:4b:8f:e7:
3d:1f:46:ad:94:38:af:a3:cd:93:b1:67:8c:f3:6b:07:e7:d0:
32:b4:21:d4:7e:d2:da:53:5a:47:13:58:b7:35:84:6c:95:cb:
1b:14:d3:55:a8:81:e6:1a:5f:ab:fd:c6:2b:64:7c:dc:66:fb:
e1:96:79:9e:d7:78:22:03:d4:24:b9:8e:fe:72:e1:c5:6e:22:
b5:6d:a5:b1:32:24:59:a2:bd:92:cb:c2:39:a0:3c:96:9d:50:
6a:9b:80:bf:cd:92:d6:27:b6:59:7b:07:b2:a4:22:b6:d8:c4:
06:8c:15:84:ab:b8:2a:c8:74:f8:28:8b:97:7b:86:1f:67:8b:
af:2b:6a:72:7c:67:04:ee:36:f4:4c:de:66:3e:82:ca:01:9f:
4b:44:7d:0b:c0:fb:48:85:62:4c:ce:24:24:86:1f:56:40:30:
5e:d6:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:56 2026 by rpki-client