This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier: DNZj8hIU7WGDR9xAIhjSR1mU2J1Ly0pnGpT+mhMt19c=
Subject key identifier: 86:23:3B:F9:32:48:6D:07:03:31:D8:69:72:EC:A0:E0:8A:0A:E0:A9
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial: 019C43592D9E6A2790B13A864C2523A367B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number: 156F
Signing time: Mon 09 Feb 2026 17:00:43 +0000
Manifest this update: Mon 09 Feb 2026 17:00:43 +0000
Manifest next update: Tue 10 Feb 2026 17:00:43 +0000
Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: zehIBgQZBnTnbQRLsT6KDcXJxmMz3n9GBlC7WHNujfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:2d:9e:6a:27:90:b1:3a:86:4c:25:23:a3:67:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
Validity
Not Before: Feb 9 17:00:43 2026 GMT
Not After : Feb 10 17:00:43 2026 GMT
Subject: CN=86233bf932486d070331d86972eca0e08a0ae0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:31:06:70:7e:64:16:2a:89:3d:7f:ef:f9:
b8:d4:4b:0c:1e:8b:e7:03:d7:01:d7:79:b1:92:82:
98:00:c8:99:ad:7f:d5:4f:5d:1c:36:65:00:3f:d6:
eb:5c:76:79:22:4e:39:16:de:1a:69:43:be:86:24:
09:05:a6:44:6b:a2:73:47:02:2a:59:3b:4e:43:7c:
c0:f9:6a:fc:dd:01:d2:49:73:b2:59:d2:95:fa:1c:
e2:7f:41:25:32:2b:99:8c:c4:1e:e8:85:96:c0:f5:
58:e4:84:50:7d:c7:4e:e7:f3:d9:52:38:d5:7f:29:
a2:90:23:09:ac:f4:99:02:1b:43:55:b0:c8:3d:de:
83:ba:92:7f:7a:7e:0b:66:d2:8e:e7:89:e2:b6:84:
bd:66:12:58:25:f0:9a:c7:db:22:0b:35:b8:5c:53:
e3:12:00:9e:79:89:f8:ef:7f:7e:57:4e:fe:9b:b2:
af:74:7c:b8:3c:2a:38:b5:a5:35:8e:bf:c0:ab:8b:
54:58:64:8d:2d:3a:f6:82:b3:fb:4a:7b:86:79:a5:
1a:3f:5a:52:b8:62:d1:56:14:58:32:76:10:43:0d:
14:2b:0c:3a:b3:d0:e8:27:fa:e3:84:cd:ce:71:e7:
93:ba:7f:65:a2:9a:27:a5:af:f3:e0:34:5c:44:a5:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:3B:F9:32:48:6D:07:03:31:D8:69:72:EC:A0:E0:8A:0A:E0:A9
X509v3 Authority Key Identifier:
keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0d:75:40:70:f4:76:c2:db:2f:58:b5:e5:84:8b:25:a8:2a:
bc:bb:5d:48:27:3a:be:60:46:cd:65:71:c8:64:bd:ed:62:88:
c3:a7:03:93:60:9c:e1:a0:27:8e:30:89:b2:80:97:4a:51:cd:
cc:ce:2b:55:ed:0d:40:dd:8d:39:a3:6a:56:26:a1:65:7f:f7:
85:a9:38:ce:ac:61:96:bf:35:eb:e4:14:f2:36:dc:2f:a7:c8:
a0:f6:b2:d0:36:3b:81:d2:90:e3:fa:7c:67:42:1b:06:3f:ff:
71:10:d3:6c:50:52:6e:72:c7:fa:e7:bf:5d:f3:b6:b3:18:8a:
89:50:38:26:e9:e1:2d:89:61:4f:43:b1:c3:56:9c:d5:ee:fd:
79:5e:a7:4a:bb:17:55:32:82:77:cb:7d:6c:f8:d9:ab:cb:e4:
0a:7f:1a:27:b8:42:66:83:81:cc:bf:02:db:ff:27:68:91:76:
c9:d8:55:db:df:31:b2:2c:5d:ea:f4:c2:75:ce:af:88:80:cd:
76:26:dc:0e:84:c8:02:9b:6b:de:00:39:cb:f3:08:56:40:c2:
69:f8:9c:2d:62:84:26:19:61:0f:2f:8f:45:b1:e8:99:96:f9:
09:48:14:d7:e1:85:d1:84:42:ce:62:ef:c5:2c:31:8d:a0:09:
4f:0c:9f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:43 2026 by rpki-client