This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: PucNdCpS89KblBI01Ha/bRBhfOhNlxX27eCoYppTvyU=
Subject key identifier: 6B:BA:B2:A5:F9:20:8A:AF:FC:D5:03:F9:38:E5:D2:E3:38:66:9F:78
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 019C4434D803D89B3E4CE2953261A792B4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0E1A
Signing time: Mon 09 Feb 2026 21:00:39 +0000
Manifest this update: Mon 09 Feb 2026 21:00:39 +0000
Manifest next update: Tue 10 Feb 2026 21:00:39 +0000
Files and hashes: 1: ecknfRAIvluVmZ7la5oiT_2luz4.roa (hash: HiuC3Vr01IHEO7h5/vdTPtdaVoDtm8DnoIetX64bo4k=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: VwYgbJplykO5OZ0aJMmX5zv8KJUiBNBrsI2LqFNz77A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:34:d8:03:d8:9b:3e:4c:e2:95:32:61:a7:92:b4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Feb 9 21:00:39 2026 GMT
Not After : Feb 10 21:00:39 2026 GMT
Subject: CN=6bbab2a5f9208aaffcd503f938e5d2e338669f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:44:05:f7:aa:c6:2d:9f:2f:d9:31:5c:7a:
9d:d3:54:28:b4:28:d5:8b:84:72:7f:0a:15:a1:30:
c3:6a:7b:62:c7:c4:cb:71:d5:42:31:c5:a1:ee:f6:
9d:b2:55:e9:9a:76:c7:37:5f:18:99:d5:66:cd:8e:
e0:38:d6:b1:09:1c:b5:c8:88:69:1b:d2:d8:63:58:
d6:ea:22:3d:aa:fc:d5:6b:52:25:80:dd:fd:57:39:
34:ae:8e:53:18:c0:58:8c:27:02:3b:b4:12:ee:8a:
74:b4:d6:fc:40:09:c4:70:42:be:66:1b:9b:23:ac:
58:ce:bc:55:67:a5:22:96:a3:ed:a2:2d:4c:7f:06:
9b:3a:f0:77:10:7a:65:d7:9d:7d:52:4e:af:c4:78:
e9:df:f4:64:c4:69:93:c5:15:99:ce:4a:7b:27:ca:
05:30:5f:dc:e8:d4:01:5c:6b:db:f3:64:1d:19:84:
03:f7:51:b1:d4:2a:40:86:d3:6c:d7:62:64:44:ff:
9f:74:9e:f3:e1:9a:ec:5c:b5:2a:ec:11:1c:4f:0b:
0c:79:dc:40:1c:b4:48:5f:b8:18:81:9b:36:13:ae:
20:34:c3:88:d1:58:58:d2:1e:ca:8b:b0:85:b3:98:
76:b0:ef:36:85:36:4f:25:2a:f5:99:eb:10:39:c5:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BA:B2:A5:F9:20:8A:AF:FC:D5:03:F9:38:E5:D2:E3:38:66:9F:78
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:85:b4:9c:a8:7b:53:17:8b:b7:fd:11:db:e7:95:ae:26:1b:
ca:5a:b4:bf:45:c9:73:d4:80:d8:39:6a:d1:98:3a:ad:65:f9:
53:2b:8c:20:71:75:93:79:77:36:41:af:4b:d1:dc:46:a2:cb:
ee:ad:f2:be:5c:6b:8f:a0:65:ea:dc:a6:77:d6:76:60:b4:31:
46:f9:48:af:31:7b:30:11:ac:db:e6:1a:3b:c6:67:56:03:32:
42:bd:ef:f2:bf:25:cd:8a:4f:5a:e9:4c:74:14:5d:41:b0:9d:
7d:61:4c:df:b2:e5:47:dd:99:01:66:46:c2:8f:cd:c0:72:cc:
25:c5:23:fa:be:47:ab:48:03:57:e1:d3:f1:9f:72:f0:a5:e3:
21:1d:84:d2:f6:ff:19:7c:ea:b6:d4:55:fa:2a:b4:95:3d:5f:
a8:27:50:4f:a9:78:12:28:87:a7:11:81:c8:78:ae:e1:3d:6f:
04:61:31:b0:79:5a:8d:e7:d1:16:f1:1f:e1:32:73:f2:9d:1f:
e8:d2:e4:25:42:e9:44:5b:cf:07:a4:2e:7d:81:59:f0:d4:7b:
dd:55:5f:69:f8:1e:08:d6:94:ed:55:aa:c0:99:9a:e9:e4:c4:
bc:e8:19:61:c4:3e:49:48:ff:06:45:4a:ea:26:d5:0e:31:68:
33:83:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:09 2026 by rpki-client