This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File: DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier: ObCxpnKL3wBe+iuPU2+VYji4mzX0F1gWZxLl07M/liY=
Subject key identifier: CB:A5:FA:3A:A8:F5:73:BB:B1:32:8D:ED:59:47:DC:8B:4F:B4:64:3F
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer: /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial: 019C427DCB51309F816ECB23071395A59C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number: 0FD9
Signing time: Mon 09 Feb 2026 13:01:06 +0000
Manifest this update: Mon 09 Feb 2026 13:01:06 +0000
Manifest next update: Tue 10 Feb 2026 13:01:06 +0000
Files and hashes: 1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: blrkwbqDB6vD3gufbyLQnCp5F8rMYEzKLYebiuEyg1k=)
2: ancLH9rsRbLYVZt0JNdPMXKNpK0.roa (hash: rcYMBMHI8US97MASNfqHUHYDCTe+glT7idqsTc69Xuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:cb:51:30:9f:81:6e:cb:23:07:13:95:a5:9c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Validity
Not Before: Feb 9 13:01:06 2026 GMT
Not After : Feb 10 13:01:06 2026 GMT
Subject: CN=cba5fa3aa8f573bbb1328ded5947dc8b4fb4643f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:09:55:7f:fb:2f:4f:2e:a1:0d:82:87:27:
13:cc:8b:25:1f:3d:fa:04:19:40:92:e5:4c:1b:08:
b6:c8:77:82:0f:17:ba:c4:e9:6c:b3:80:fe:d9:1a:
25:5b:d6:78:a7:74:fd:b5:43:75:6e:ce:c0:cc:09:
8c:f8:a4:15:cd:06:d9:96:20:3e:c0:19:53:a2:de:
25:24:a9:46:12:79:48:60:c6:ee:d7:d6:6b:82:79:
1e:4d:5a:ac:f0:9f:56:b4:26:89:26:a6:ef:c6:34:
b0:e6:6f:fe:20:e3:7e:d4:21:19:9f:4d:73:7e:5f:
c1:ef:2a:03:09:ee:79:cc:1c:32:53:18:7e:e0:ce:
7e:57:66:9e:a9:b1:91:79:61:83:17:e1:9c:79:3e:
4d:4d:1d:64:4b:c3:3d:b8:7a:7c:a6:24:1e:55:f6:
3c:6f:ba:e6:de:4e:14:9a:36:af:98:53:d0:c8:d5:
74:bb:50:6f:d8:b8:11:b8:03:59:63:d4:9f:8f:a3:
78:88:80:fc:19:a6:aa:32:d3:23:0f:49:ff:33:70:
4c:d0:97:69:37:9f:76:f8:a7:af:72:a2:42:f1:ad:
14:bd:1e:de:c4:dc:7d:e5:ca:18:5b:5d:db:3d:69:
36:4f:cf:42:cd:55:8f:a3:80:a7:01:c5:ab:d7:d7:
e4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:FA:3A:A8:F5:73:BB:B1:32:8D:ED:59:47:DC:8B:4F:B4:64:3F
X509v3 Authority Key Identifier:
keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c5:e7:91:b9:da:cb:5e:37:03:09:24:f2:33:71:00:8d:c7:
15:08:98:49:06:96:f4:c8:e1:26:47:f2:96:d5:84:3c:e9:cc:
ea:ba:b5:d1:f8:a6:fb:b4:d3:ae:b3:e4:d7:49:52:14:34:5a:
42:03:6f:15:ed:c0:84:70:1a:99:1d:11:da:e1:57:19:27:05:
31:52:f9:54:bf:3d:1b:9d:41:bc:f3:4e:25:49:6d:ab:40:4a:
0f:46:7c:9e:48:ed:fb:16:8d:11:eb:e9:41:d5:54:3f:58:22:
54:7a:93:07:87:d5:d3:68:6e:71:f4:8e:ab:7e:62:c0:17:91:
af:77:ae:64:f7:17:38:24:d5:42:7d:e5:24:8d:7a:26:6e:84:
11:54:a1:de:60:31:41:73:c1:bb:09:6d:f9:dd:df:a7:a7:06:
a9:97:d2:29:22:a2:13:27:f4:e7:79:d9:4d:67:63:00:61:8b:
21:43:59:d3:be:7b:08:37:d1:42:7b:f2:62:5e:c3:17:ab:34:
a7:5b:bf:b1:73:e9:4b:97:6f:bd:3e:02:51:06:a3:4f:77:c6:
4c:70:ea:8c:cb:45:55:a7:90:6c:3a:85:36:45:2e:0d:eb:91:
6e:11:60:54:a5:96:e7:7f:47:f7:4b:58:53:46:b2:1c:5e:a8:
1e:47:f0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:26 2026 by rpki-client