This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: Q3pzUWSED+5cFNn7Bhp+qtjy20WXNOJmjyMMJQv1TeM=
Subject key identifier: 9D:2B:6B:DD:82:1D:86:E3:04:7A:1F:E0:A3:99:C4:46:C9:C6:02:A3
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 019C42EB1B946F13A979FC0520D06BF9D5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 1259
Signing time: Mon 09 Feb 2026 15:00:30 +0000
Manifest this update: Mon 09 Feb 2026 15:00:30 +0000
Manifest next update: Tue 10 Feb 2026 15:00:30 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: Ow679UgsLd49fLh4e2eIc29kTNohuLRXDseuaVsdd04=)
2: qGBCQCZlL1yzOajHzIypwWxNeWA.roa (hash: p7Sjt3xmkXcVS2g8oPh7NRV5OpfFVXtU6JCEbaI2Bsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:1b:94:6f:13:a9:79:fc:05:20:d0:6b:f9:d5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Feb 9 15:00:30 2026 GMT
Not After : Feb 10 15:00:30 2026 GMT
Subject: CN=9d2b6bdd821d86e3047a1fe0a399c446c9c602a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:b5:49:a2:90:39:07:1a:de:ce:6e:0d:c8:
ce:84:59:7e:07:b8:83:7e:1e:3e:af:27:6d:81:7e:
70:c2:49:e6:20:b3:66:ea:ed:ca:67:46:a9:f0:55:
ef:00:ea:44:3e:ff:97:50:a1:66:1e:cb:cb:b6:da:
6f:66:49:5c:4a:9f:78:5a:37:0d:f9:1c:b6:78:f1:
a9:21:91:90:e3:d4:f9:e4:a6:fa:b1:12:b7:f5:00:
18:21:e1:3e:be:d3:df:25:31:41:1a:5b:6c:c2:dd:
6d:ad:06:52:d9:0b:ff:5f:17:e3:01:2f:3b:38:3d:
09:1f:5c:2c:79:d2:15:03:49:9d:53:fc:87:37:6c:
8c:25:72:36:08:0e:89:26:47:a8:4a:7a:ea:63:55:
37:eb:0f:2c:83:a7:a3:2a:0c:fa:14:08:16:c2:70:
0f:af:05:9f:54:34:9f:53:7c:50:c4:35:0f:2d:c0:
d4:b1:ab:d3:d0:53:a1:e7:e1:77:77:70:67:20:74:
b0:77:00:44:00:20:dc:60:4f:e0:0b:d5:ec:6b:a5:
97:6a:4f:47:bf:93:32:f2:30:f1:9c:41:44:70:3c:
d4:44:f1:f1:bb:c6:ad:e3:0d:65:84:0d:d7:1c:6e:
6d:8c:16:57:f2:32:35:70:10:b8:59:e6:53:20:0c:
c8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:6B:DD:82:1D:86:E3:04:7A:1F:E0:A3:99:C4:46:C9:C6:02:A3
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ea:16:71:8d:88:d8:ed:87:77:de:2c:8d:58:2d:a5:b7:c9:
cb:f3:2f:1a:28:53:88:a6:35:d5:c5:96:a1:06:4e:97:f9:d6:
07:0d:39:84:54:97:ef:93:de:2d:df:03:1d:40:7c:41:ec:3f:
3b:64:cb:2d:25:9a:64:cb:de:8b:86:5e:a8:74:ec:8b:3d:16:
09:b6:04:f1:a3:f9:c4:05:44:80:78:ae:0c:fb:80:f8:1d:72:
ec:3b:b3:65:b6:a9:54:36:7e:51:81:cd:d3:14:ca:98:b9:61:
0f:90:33:66:a1:a0:56:cf:e6:7f:9e:ba:f7:e4:8e:6e:5f:40:
e2:f9:7d:5b:57:01:04:b1:c9:84:ee:6c:4b:20:c1:f2:8f:f8:
a2:4d:4f:20:61:fa:d2:08:2e:8d:ff:5e:6d:62:42:26:0d:ad:
c5:93:e7:0f:a2:26:37:5f:ad:60:2d:81:67:84:9e:fd:69:20:
d6:bd:03:27:7a:9d:44:76:6b:6c:f7:8f:ea:d5:c7:61:2a:c2:
87:19:b4:d7:21:0c:5b:52:1f:e9:0a:31:97:62:83:f1:bc:a1:
3c:7a:40:08:03:2a:25:f8:6e:99:d6:9e:83:b3:34:0a:b6:5b:
51:c2:f7:8b:da:34:20:93:86:23:e1:3c:62:a5:ea:7f:70:f1:
17:02:d0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:32 2026 by rpki-client