This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
File: 02jCohY2GiT97Jfx838uHRIHEIc.mft (raw, json)
Hash identifier: EJCin6ATegVgtwZMqizm+ZmHWVdK3RNqB26R+tuNHuI=
Subject key identifier: D1:4E:70:A8:98:FA:9D:45:7E:ED:6B:56:FA:71:69:E9:D1:F9:E4:15
Authority key identifier: D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
Certificate issuer: /CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Certificate serial: 019C427D49C6661F0C6720DC3A58672F3551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 13:00:32 +0000
Manifest this update: Mon 09 Feb 2026 13:00:32 +0000
Manifest next update: Tue 10 Feb 2026 13:00:32 +0000
Files and hashes: 1: 02jCohY2GiT97Jfx838uHRIHEIc.crl (hash: IyTNiT/R+etnEtUEyIAlSpLSK0fnSLOpo9pQvLDYgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:49:c6:66:1f:0c:67:20:dc:3a:58:67:2f:35:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d368c2a216361a24fdec97f1f37f2e1d12071087
Validity
Not Before: Feb 9 13:00:32 2026 GMT
Not After : Feb 10 13:00:32 2026 GMT
Subject: CN=d14e70a898fa9d457eed6b56fa7169e9d1f9e415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:26:03:a0:ae:46:94:41:c3:76:3d:9a:6c:
2b:1f:83:e0:a6:28:93:67:d0:2c:b0:6f:33:2a:a7:
6e:8e:d2:75:e0:44:17:a6:43:72:8a:b4:2b:5f:05:
c5:82:c1:82:4d:1d:b3:0c:67:75:8a:8c:2c:4c:82:
c6:f5:36:a8:f3:ee:5e:d6:e9:f8:13:ab:88:f3:e8:
27:68:c2:1c:37:d0:52:19:2b:64:a1:3d:87:ea:81:
17:4f:96:a0:68:29:89:8d:7b:aa:4b:ec:dc:c4:f2:
db:ac:ab:b4:68:48:db:c7:18:a0:d3:78:eb:10:55:
bf:3b:52:0b:7a:1d:73:6b:d7:82:16:ee:49:f0:a2:
e1:36:9b:7c:5f:de:70:e1:3d:3b:9f:fb:11:23:f3:
49:a9:57:80:cb:fe:61:1a:f1:e6:0b:9a:60:4e:ab:
a7:ca:48:3d:68:ea:54:0c:29:16:32:48:e2:43:ec:
21:e2:0b:f4:6a:66:c5:84:a8:60:e0:5f:c3:71:ba:
43:d3:44:3f:3a:98:05:4b:0e:4d:7f:18:d7:3f:b0:
5c:e6:19:f7:87:cd:a4:26:23:69:e3:a8:f1:91:c0:
8c:89:f0:67:86:21:db:73:28:0a:15:dc:03:47:2b:
0b:ba:02:bf:52:70:4f:2e:76:0e:2b:46:a4:dd:a9:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4E:70:A8:98:FA:9D:45:7E:ED:6B:56:FA:71:69:E9:D1:F9:E4:15
X509v3 Authority Key Identifier:
keyid:D3:68:C2:A2:16:36:1A:24:FD:EC:97:F1:F3:7F:2E:1D:12:07:10:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02jCohY2GiT97Jfx838uHRIHEIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d22edf-fb49-4e01-8fd4-90208e1f3de6/1/02jCohY2GiT97Jfx838uHRIHEIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:bb:3b:24:97:90:0c:c4:fc:10:0f:73:f3:d7:7e:92:ec:20:
8b:94:1e:22:19:62:b2:62:4e:63:b9:d5:a2:a2:28:b8:89:0f:
d4:47:07:63:c4:a6:7c:c9:2b:07:c2:41:50:c5:65:51:cf:32:
6d:8b:14:4e:65:e8:ab:c7:33:af:e3:27:2c:9c:6b:f6:47:71:
2d:9e:16:12:e3:02:c3:36:d2:1b:07:0e:23:96:5b:be:65:90:
40:66:25:2f:83:32:0d:48:9a:47:c9:17:b8:7c:24:a5:25:08:
a3:e9:35:b9:df:f7:f9:8e:d7:c5:76:5b:cb:03:74:c0:23:ed:
76:2e:d5:a7:9b:75:d8:db:ce:d4:85:0f:a4:83:31:62:45:4b:
a7:a0:1a:4f:31:ae:d9:3b:7c:0c:d0:7d:9a:60:51:d6:08:72:
34:53:4b:99:41:c7:c8:ed:31:a0:1e:18:d0:c0:2d:ff:f5:3b:
52:9e:63:5d:39:73:74:18:ab:ac:fa:88:60:de:7f:e6:c3:d2:
fe:38:70:60:19:47:e5:fa:68:58:fc:65:1f:9c:3a:94:42:a2:
96:8b:21:8b:17:46:56:5f:85:ba:53:73:68:cb:94:03:36:cc:
a3:d6:7b:78:16:ac:ca:82:d5:61:fd:f9:fd:4b:91:c4:17:4a:
d1:55:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:51 2026 by rpki-client