This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
File: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft (raw, json)
Hash identifier: 9HGTCLifsQJhYrt20WxbRBJHtn6tfTaZS/0ROMeHQDw=
Subject key identifier: 7C:71:17:BE:F9:C8:10:C2:85:D0:02:48:C1:A4:36:4A:62:45:CD:92
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial: 019C41D8A39F90A90EC50A5D85B0C4720CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
Manifest number: 1817
Signing time: Mon 09 Feb 2026 10:00:42 +0000
Manifest this update: Mon 09 Feb 2026 10:00:42 +0000
Manifest next update: Tue 10 Feb 2026 10:00:42 +0000
Files and hashes: 1: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl (hash: i/+IL5/w1iPtcUFrlQoF2r0f/f4h3F7Y/7ne/T+0dvc=)
2: Vu1SMqSbNvxo8-uVtXs0Eld2o_Q.roa (hash: blwSnQqhNIoWvduAY/JgSuj6c5kvRYhLpvdaBWUqc10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:a3:9f:90:a9:0e:c5:0a:5d:85:b0:c4:72:0c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Validity
Not Before: Feb 9 10:00:42 2026 GMT
Not After : Feb 10 10:00:42 2026 GMT
Subject: CN=7c7117bef9c810c285d00248c1a4364a6245cd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:9a:44:9c:72:b0:9b:d5:72:d0:dd:3b:1d:
ea:4d:cf:98:37:db:0c:b6:86:61:6f:e5:96:01:54:
b4:6a:dc:7b:5f:01:0b:38:58:b8:ab:a9:e4:9e:1b:
8a:26:13:01:86:d1:44:91:e5:6f:d5:49:04:61:43:
a2:a2:e9:96:5f:83:5d:6e:60:03:16:61:bd:d3:47:
be:9b:ac:eb:c3:88:00:88:27:b0:28:a5:b6:e6:65:
e4:d6:91:2f:5d:ef:bb:86:57:49:2a:9c:de:2b:11:
3f:76:ab:a8:03:2f:fb:b4:6e:bd:ca:96:19:0b:bf:
fd:b7:80:94:17:50:96:bc:61:6d:83:a7:07:f7:72:
85:3f:04:c7:07:6a:fc:45:61:30:3c:e7:c6:4a:32:
48:91:40:34:dd:79:98:90:f3:d5:bf:d3:1a:92:7e:
f5:48:fe:20:84:b1:89:5c:fd:b0:c4:87:7d:7f:fe:
93:fc:8d:3f:2b:74:b8:0d:de:b8:15:3c:06:d6:d3:
3a:c6:34:4a:9a:a6:2b:e7:82:8b:a1:93:06:c3:18:
fd:88:2c:7b:e2:79:f8:7a:14:be:18:f6:3b:d7:c2:
30:62:a2:33:fb:da:3f:b0:2e:80:c3:29:8a:5c:7e:
9b:72:3c:45:d4:b1:9f:83:cd:a9:b3:f0:11:74:0e:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:71:17:BE:F9:C8:10:C2:85:D0:02:48:C1:A4:36:4A:62:45:CD:92
X509v3 Authority Key Identifier:
keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:10:7e:95:09:3f:90:f6:ae:e6:15:0e:54:fb:ba:86:d8:01:
f8:7c:71:a1:b8:eb:43:4e:fa:98:4a:03:4a:50:10:83:dc:10:
af:d9:6a:72:57:72:fe:e9:f3:35:80:20:39:fe:d9:7d:e1:e8:
48:87:b9:0b:01:40:df:9a:16:87:57:d4:b8:d4:b6:57:be:d3:
4a:c4:70:3d:b7:d9:17:a5:20:c4:7a:be:80:fe:aa:e3:57:69:
ed:cf:da:87:30:b7:c7:39:7d:5c:34:9d:22:bb:c7:f6:c5:88:
4d:81:63:6d:e3:f4:21:82:0c:73:8a:80:82:3e:64:59:57:56:
8a:7f:bb:26:de:d7:94:17:2a:d3:bc:1a:08:d9:fb:8f:78:bd:
77:11:9d:5f:ce:33:3b:b0:d7:5f:c3:1c:48:a7:73:53:b3:40:
46:80:8d:00:da:05:4c:98:d1:32:f4:55:08:ef:d4:4d:d9:36:
2c:ed:3e:36:36:e4:d4:80:ce:9d:79:a3:a9:29:87:5d:47:bd:
36:7e:cd:76:ff:0b:4f:35:c1:e3:e7:e7:39:42:6d:fe:7f:f7:
89:25:bc:a0:00:23:06:fd:64:17:7a:2b:9d:ab:ef:47:4b:70:
c6:8a:b6:00:27:af:48:0f:14:95:eb:6b:09:e2:6e:ae:2c:15:
15:2e:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:00 2026 by rpki-client