This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: m9Qk6r2/TcSEIONQHCrz8fBd52lJsrVUSj97CAH3QcI=
Subject key identifier: D7:E3:F3:78:39:5F:AD:35:76:B4:D7:73:25:94:BC:91:38:A5:D1:B0
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 019C43903790869D4AF4E573C6192BB86AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 18:00:50 +0000
Manifest this update: Mon 09 Feb 2026 18:00:50 +0000
Manifest next update: Tue 10 Feb 2026 18:00:50 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: x+0Kh6MlIqLwsJEtH8O/rXJOAAegRoCtKlTjhYaGtSU=)
2: ptXyrgVvtRP3D7VtVmhZM3FWVhU.roa (hash: PoyEOK64ZRkHmMkkLoFS8S4R0VxZJdJWksZdI9vklg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:37:90:86:9d:4a:f4:e5:73:c6:19:2b:b8:6a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Feb 9 18:00:50 2026 GMT
Not After : Feb 10 18:00:50 2026 GMT
Subject: CN=d7e3f378395fad3576b4d7732594bc9138a5d1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:27:1e:a1:b7:fc:ea:ec:5d:68:44:ba:71:
49:b2:9f:d6:64:f9:b2:a4:46:5c:db:e2:ed:56:7b:
16:2a:ed:7b:8e:72:bc:e0:81:6d:1b:18:62:de:11:
17:ab:78:8d:7c:75:d1:ae:e5:d4:b4:e6:a9:5e:f4:
1b:2b:a9:6b:03:49:86:cc:f7:ae:87:b6:11:08:06:
d2:6a:14:c4:26:2a:8c:05:20:94:95:8c:8c:5f:f4:
df:87:0c:62:3a:1a:44:84:16:9a:f0:a2:ec:dc:f2:
f3:18:2e:07:8e:5b:ec:38:2c:95:33:45:ea:c4:41:
07:63:04:78:84:97:42:1b:4e:d0:33:b8:13:a2:03:
b4:35:95:6a:81:0e:b2:fc:12:26:a8:28:1e:b9:28:
f5:f7:10:62:6b:36:13:8a:b2:47:cd:63:e3:25:8c:
f5:03:62:9a:b7:12:92:39:57:2c:44:28:b4:a6:f9:
4e:8c:1c:87:7d:06:c8:50:97:a7:33:6a:63:67:7d:
70:cb:11:ee:89:a9:e8:ec:a5:63:65:c3:52:01:7f:
a2:8a:43:40:a6:d6:8d:42:4b:01:17:f8:cd:f6:11:
24:46:e7:9b:c6:f8:fc:d1:31:8f:e6:0c:a3:a3:2f:
1c:fb:fb:fb:e5:b8:07:bb:7a:d0:13:70:24:f1:c0:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E3:F3:78:39:5F:AD:35:76:B4:D7:73:25:94:BC:91:38:A5:D1:B0
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:64:eb:0e:b7:84:d5:02:e7:20:88:af:d2:ac:fd:36:3b:56:
12:5c:e4:1e:fe:0d:57:da:06:e5:98:2c:3b:aa:98:34:1d:a3:
77:1c:64:8b:62:6f:19:d1:3b:06:1c:90:89:56:dd:8d:98:52:
50:aa:f5:89:c8:a9:77:34:a5:fa:17:32:6b:75:0f:69:ef:8b:
7e:3c:47:5b:20:3b:d3:4d:26:67:03:63:21:4d:ad:04:0c:de:
fd:0d:8c:59:18:fa:52:d9:98:68:98:47:37:6d:f9:3a:1f:d2:
7f:c5:83:dd:d1:ee:1d:2f:eb:01:70:99:e4:64:9e:28:3f:7d:
40:34:99:c3:df:63:76:ae:62:a9:f8:e6:f1:f3:f7:af:43:7d:
64:3a:82:f8:85:06:ed:45:cb:3c:a1:f7:4d:73:ca:f0:f0:2c:
c6:91:ac:b0:97:5a:a5:bd:43:f3:8c:fb:31:eb:dc:8f:c3:2f:
b5:16:50:f4:45:a6:f2:cd:d3:ba:f9:50:d1:b5:63:49:29:f7:
3f:b4:54:97:29:9e:7e:4d:e1:e3:e5:54:da:37:de:7d:d5:7d:
d7:bb:cb:91:f9:f2:1b:ea:07:27:c2:0d:12:4b:2b:12:b9:17:
c1:d4:36:e5:8d:0e:f4:79:42:13:e9:be:38:39:c2:ab:6a:66:
18:81:d9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:14 2026 by rpki-client