This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: 0hV0MtAFjwyc3MqNdQVqUoCo34LQHjrAa5gqjPiT7xc=
Subject key identifier: AA:33:DC:47:67:55:51:65:88:56:F7:79:47:89:11:8B:A0:08:6E:85
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 019C4322EF966281CB96BF6931B78FDABC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 0C1E
Signing time: Mon 09 Feb 2026 16:01:28 +0000
Manifest this update: Mon 09 Feb 2026 16:01:28 +0000
Manifest next update: Tue 10 Feb 2026 16:01:28 +0000
Files and hashes: 1: N08gX0rBlpOIRQrDxiJzV-0xqPE.roa (hash: a6M35q6nyj43xguydpClcKSfRGhKfnGhjLVr56fUpSE=)
2: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: Zwq/zyoKs3ApSdzz3fRA1xOFm+KVpklWl9APNWeld7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:ef:96:62:81:cb:96:bf:69:31:b7:8f:da:bc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Feb 9 16:01:28 2026 GMT
Not After : Feb 10 16:01:28 2026 GMT
Subject: CN=aa33dc47675551658856f7794789118ba0086e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:18:2c:dc:e9:86:37:93:a6:34:f8:89:30:
5e:99:ec:06:50:52:68:79:80:6a:4e:9a:e8:14:ed:
29:46:99:93:24:c9:08:21:98:42:fc:20:d8:b7:ff:
16:87:2e:d1:ad:ed:37:22:2c:e4:6c:b2:de:5b:48:
e5:90:f3:04:ae:5e:c6:ec:2c:06:a6:2e:a6:13:f1:
c1:f3:c6:03:3d:84:64:ab:af:4f:4d:8b:b5:7f:d7:
ea:1d:c4:be:ca:27:b5:32:7e:02:16:c0:d6:92:79:
2a:7e:5e:6c:10:1a:d4:cb:bf:05:6c:3b:65:2b:74:
ce:90:b1:8f:c7:9c:f6:f0:05:d5:ab:e1:a5:71:f7:
2f:51:6a:e0:ae:f6:0f:19:47:92:df:d4:69:24:30:
db:9a:29:88:65:65:90:27:4b:ce:1f:86:5c:dc:e0:
e9:51:09:1f:03:d2:72:be:9b:75:6f:1f:a4:d0:2b:
0b:4e:9e:54:f6:85:ac:05:c6:49:26:44:f9:4c:08:
00:3c:dc:4a:a7:6e:d1:f0:09:41:e8:1e:99:81:75:
b8:24:ce:04:98:41:87:f8:0f:fa:7b:86:3e:20:4f:
68:a8:4e:4d:23:24:11:22:d2:59:41:36:66:02:fa:
63:96:1c:bb:55:9c:31:c1:10:eb:79:8c:3e:ad:a1:
2e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:33:DC:47:67:55:51:65:88:56:F7:79:47:89:11:8B:A0:08:6E:85
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5c:e1:9f:18:c7:83:f7:6e:23:58:db:03:d1:de:5c:92:ec:
b0:7f:47:fa:7c:4f:b0:4c:31:77:14:dd:90:2d:0e:02:23:ac:
3e:c6:df:5b:71:f9:3a:04:8d:a1:1f:24:00:b5:1c:43:75:6f:
6d:7d:28:db:59:32:fd:c0:c2:f1:66:a0:06:d3:22:a2:e5:27:
a1:c3:fb:02:55:df:14:c8:9c:d2:c8:5f:0e:7a:f4:3c:33:69:
7a:44:de:51:8d:78:37:09:84:f8:90:0b:cf:5a:6f:f6:4b:21:
4c:0d:76:f9:3b:d7:3e:d2:37:bc:21:9d:bb:90:3a:51:8f:8a:
57:05:e5:16:9c:4f:ab:27:08:31:d9:e2:54:b7:85:3f:db:b7:
e7:69:3c:8d:33:0c:70:05:d4:45:ca:d6:9a:16:05:f7:83:70:
39:83:13:e6:af:fc:6f:e9:51:7d:fe:c8:7e:d9:f5:b8:07:f2:
cb:9a:ca:b6:1e:31:8b:40:6f:9a:a1:27:cb:d2:17:77:f9:bf:
76:a8:96:26:3e:fb:b0:e9:c0:1c:5c:1b:ae:67:be:2c:a4:16:
ca:68:5f:90:c3:71:d2:65:58:05:2b:d5:10:eb:3a:1f:da:2c:
43:92:90:6b:79:65:81:d7:56:2a:1d:be:af:18:c9:99:6a:8d:
0d:92:df:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:04 2026 by rpki-client