This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier: vBamP79X0n0mZnuAckV2MzqMPQor0/0Eo0IaZ1Ulinc=
Subject key identifier: F8:1D:00:8F:F1:47:28:77:FA:AD:B9:A4:F1:D9:83:0C:FD:22:98:49
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial: 019C43226B53F4BB81974A40483638C06BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number: 0BF6
Signing time: Mon 09 Feb 2026 16:00:54 +0000
Manifest this update: Mon 09 Feb 2026 16:00:54 +0000
Manifest next update: Tue 10 Feb 2026 16:00:54 +0000
Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: bFMTy9bEDMXjrecj6SBQcXcKZa3OMPQ4YMV912qDlQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:6b:53:f4:bb:81:97:4a:40:48:36:38:c0:6b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Validity
Not Before: Feb 9 16:00:54 2026 GMT
Not After : Feb 10 16:00:54 2026 GMT
Subject: CN=f81d008ff1472877faadb9a4f1d9830cfd229849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:54:ff:19:0c:89:d6:b0:6c:0f:0b:0f:fc:
6b:7b:f6:1c:f4:bb:b5:36:15:ef:1d:7c:43:e4:4e:
5c:ba:33:93:6d:c9:a5:6a:03:a4:a6:d0:de:f6:2d:
ec:6a:ca:bc:84:16:e5:0b:c5:26:ae:f6:ea:c0:b1:
6b:91:3b:5c:17:55:9a:5f:fd:49:c6:de:09:6c:08:
47:81:49:28:78:44:32:49:6b:14:0f:af:46:57:83:
cd:a3:d0:a9:60:f6:d6:68:cc:be:8b:de:3b:cf:51:
0a:fd:4c:5b:7d:7c:7b:cc:b6:a6:ed:e9:37:77:95:
68:2a:34:6c:c1:1c:6b:62:db:75:80:72:1a:93:7c:
f5:79:19:8d:15:b3:aa:31:3e:dc:13:6a:71:4b:91:
8b:48:ba:37:23:96:e3:62:ac:5a:1b:c6:4f:61:9b:
8d:7e:52:ef:93:36:e8:e0:40:2e:d1:97:90:44:9b:
f5:de:7d:09:13:bd:0c:c1:b4:f7:86:4a:1f:a7:6f:
71:8b:01:7b:02:63:df:c1:d8:18:bf:c0:16:4d:c2:
bb:f3:83:28:fe:f9:e6:23:78:e3:87:dc:f6:2f:7c:
a1:95:9b:5c:cf:96:a4:60:f8:a4:a5:45:b1:35:84:
e9:3a:19:06:ef:22:1f:e0:46:30:bb:1f:80:18:77:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1D:00:8F:F1:47:28:77:FA:AD:B9:A4:F1:D9:83:0C:FD:22:98:49
X509v3 Authority Key Identifier:
keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2f:49:2b:ec:77:b4:2f:4c:e7:ba:61:44:d9:15:6c:69:30:
c7:11:2d:21:58:08:34:9a:1f:a7:e7:ea:01:eb:9d:f4:64:b4:
27:d2:0b:7b:3d:16:75:e3:30:3f:96:94:80:41:48:7f:5b:72:
1e:11:e3:96:d5:37:48:bc:b8:d2:22:77:df:99:19:11:a0:1f:
20:42:b0:33:6a:5f:2a:c1:a4:a7:15:7d:5d:cf:b8:cd:b8:7e:
81:b1:ef:1a:7b:a5:63:dd:5c:63:80:e6:ae:77:46:f1:f3:5b:
1b:ce:63:c3:fb:31:25:ce:df:90:82:5d:74:ca:e5:c7:c9:2d:
6f:47:f6:8d:8c:b1:0d:31:37:65:4d:c3:4d:8d:ff:6d:9e:d6:
fc:d6:56:ac:41:7c:4b:cf:15:f9:56:cf:54:6a:f8:8f:d3:d7:
27:66:8c:e9:0c:87:68:bb:e0:f6:ca:b6:9d:3c:44:75:fc:e2:
71:ad:4f:51:97:cb:ed:47:39:b8:c1:e6:e0:2d:77:a2:27:68:
cf:42:f6:c1:05:61:ce:92:23:44:2d:f8:e8:04:29:0a:31:37:
8d:d6:7f:00:45:e8:16:f1:90:92:c8:61:2d:a3:50:e9:1e:15:
21:21:35:65:b9:3a:61:39:6f:b8:79:61:ef:ca:d4:7f:13:d5:
1b:57:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:33 2026 by rpki-client