This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: P9A7sBB77IMUWmWn5AQUN+Gd3kKNoayPXRLWKxucheY=
Subject key identifier: 44:F4:FB:77:6F:A4:94:68:21:3B:8C:FA:3A:D1:6E:F1:2B:F1:E9:84
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 019C43C6FDC9E0DD1B2E82A6C9D0EB124EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 19:00:40 +0000
Manifest this update: Mon 09 Feb 2026 19:00:40 +0000
Manifest next update: Tue 10 Feb 2026 19:00:40 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: ohoy9PcGUraOnIYwkQ45cz4HkTBlsqsscI+K5n4B6yA=)
2: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (hash: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:fd:c9:e0:dd:1b:2e:82:a6:c9:d0:eb:12:4e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Feb 9 19:00:40 2026 GMT
Not After : Feb 10 19:00:40 2026 GMT
Subject: CN=44f4fb776fa49468213b8cfa3ad16ef12bf1e984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:8c:27:1e:03:a1:dd:e4:b1:2d:6e:8f:6b:
ed:aa:72:92:4a:94:e9:ef:cf:c0:cc:ef:e2:39:6a:
4c:f4:e2:fa:8d:52:99:29:51:44:de:df:e3:01:fc:
23:f8:12:b5:c9:b7:de:a5:db:fc:b5:0a:93:d2:f5:
93:64:75:b9:04:72:fd:cc:26:33:15:27:9a:20:d4:
2a:ec:69:9a:e5:d5:4e:71:d2:c2:27:44:73:09:17:
78:d2:91:fa:7c:0c:4e:d5:c9:62:a1:16:85:06:e0:
99:2a:f4:3d:f9:ca:01:d9:7e:ad:28:5f:7b:6a:bc:
d7:d4:35:0c:04:58:b7:68:21:98:a4:d1:ef:d6:05:
13:1d:c2:c3:51:16:f6:d3:b4:3f:fd:ad:d3:bd:bf:
a4:03:60:2b:2a:38:59:5c:3a:fa:12:60:13:ac:82:
f4:f2:ed:e9:da:a7:1e:1a:6c:1b:19:84:32:a0:11:
7f:06:1c:41:6d:99:26:87:63:05:6b:c1:19:1e:3a:
04:84:d3:ef:9f:eb:0d:c2:6d:80:36:42:41:db:c1:
09:2d:ba:f5:35:63:7d:46:5c:92:df:6d:2d:16:d4:
12:b6:97:74:33:4a:d5:38:17:3d:f5:fd:2b:9f:9d:
6e:68:49:1f:d1:b9:88:ec:89:b1:59:0d:06:05:1f:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F4:FB:77:6F:A4:94:68:21:3B:8C:FA:3A:D1:6E:F1:2B:F1:E9:84
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:25:29:34:d5:76:eb:b4:11:77:65:c6:f8:e2:8b:86:97:05:
ee:b5:31:08:ff:10:67:9a:5c:f4:d9:90:3f:c9:11:2d:ca:e6:
9f:21:09:0a:83:98:ef:5d:c9:87:da:ba:6d:4f:de:8b:39:a3:
c7:25:39:ff:96:88:49:93:54:81:7b:b5:44:f2:9f:33:59:de:
61:e3:7e:26:a6:a0:2f:50:25:43:ca:24:39:23:db:5d:f3:c1:
73:7d:3f:91:80:3f:94:28:27:97:9b:7b:b3:15:cb:35:1b:14:
e8:02:29:56:3c:39:f3:36:0f:e9:b0:3a:83:20:e5:37:75:b0:
ed:83:df:c9:d4:bc:7e:10:db:ce:b4:78:7d:d7:a5:35:eb:73:
ba:07:52:4f:b0:b6:3f:70:34:b7:02:3c:83:68:1b:a1:f7:ba:
96:4c:c9:c5:30:44:2b:de:7a:cb:60:cc:24:79:df:2f:03:cb:
b2:40:8d:63:c7:b6:c9:11:c3:42:3e:54:75:1e:96:48:6b:82:
63:f8:0d:cb:99:b1:c5:99:19:99:70:02:55:3a:8c:84:27:9b:
ba:9b:b2:2e:15:6c:1e:b9:2a:03:c9:05:97:d6:d3:f4:e1:d7:
0a:50:99:c5:e3:53:85:37:ed:c3:6b:c9:f9:d9:c9:8e:ce:f6:
c0:8e:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:19 2026 by rpki-client