This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: X1vQJ6Tj6fcZUkN3+YNKc0RLauQGxWSNHW73tsb3YJ4=
Subject key identifier: F8:28:D5:66:9F:52:64:E8:36:B4:C0:40:8E:6D:E5:54:BB:27:25:58
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 019C438FD29859FE0B17DDD05CB783A0FD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 17A3
Signing time: Mon 09 Feb 2026 18:00:24 +0000
Manifest this update: Mon 09 Feb 2026 18:00:24 +0000
Manifest next update: Tue 10 Feb 2026 18:00:24 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: EZLQFPPjN51WMG3ixElITQvZ9gLFeC+f83WeEi9Ui04=)
2: yat_VFBsRL2vXjBQHXCl5CuZLXk.roa (hash: AeN/Vtg1z//ZrqzG5NqKqgHUFWw8uKLPlQFadvjnPx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:d2:98:59:fe:0b:17:dd:d0:5c:b7:83:a0:fd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Feb 9 18:00:24 2026 GMT
Not After : Feb 10 18:00:24 2026 GMT
Subject: CN=f828d5669f5264e836b4c0408e6de554bb272558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:d4:55:f2:2c:af:fa:91:49:2c:0d:ad:73:
a5:05:dd:59:00:b8:b4:db:44:2e:5d:7f:76:63:29:
41:a7:91:86:f4:e4:24:53:f5:b9:b2:e8:71:d5:57:
16:2b:02:f7:d7:66:94:be:94:a3:4a:08:e5:07:e8:
8d:33:ca:72:34:2f:e8:d6:cc:52:f4:6e:78:49:20:
58:34:55:4a:0c:a8:7b:3b:73:f6:32:ea:1b:5c:fc:
49:b6:b4:a8:42:8b:18:c7:af:dc:43:c7:bb:71:d8:
52:bf:7a:8c:40:4a:cc:75:1e:66:90:4e:99:e9:f9:
04:92:b7:77:e2:4f:58:07:18:b9:f1:20:b4:c9:f1:
29:6d:f1:41:ab:7d:18:dd:4d:7c:22:6a:34:e2:e3:
75:15:26:9c:54:cd:29:52:27:0f:ba:30:3c:89:87:
12:3a:08:91:90:20:c8:d0:29:f6:5a:d5:91:d4:a1:
d4:15:48:46:86:97:f1:99:3e:49:b5:12:f2:ff:24:
46:97:58:01:6d:2c:c7:4b:d1:39:49:de:d2:cc:2a:
d6:b5:e5:04:1f:fb:1f:98:c7:db:86:bd:b0:7a:e2:
07:ac:33:1e:c9:ce:a2:b8:f8:47:23:71:69:da:ec:
42:a9:fe:e1:e0:a8:e6:d0:0d:fc:6c:22:76:c3:06:
44:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:D5:66:9F:52:64:E8:36:B4:C0:40:8E:6D:E5:54:BB:27:25:58
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:66:93:35:fd:e7:35:55:0c:79:e5:e0:8e:48:71:9b:32:ea:
91:f2:2b:ff:21:f1:c0:f7:07:2b:9c:ae:82:4e:cf:9b:d3:dc:
13:14:62:e7:22:54:98:80:3b:31:56:5e:ad:1a:82:27:fe:76:
e2:61:23:c3:7e:66:74:47:3f:ff:31:96:14:a5:3d:72:b1:b5:
42:8b:6e:2f:05:38:d7:fb:9c:e7:41:75:d9:81:a3:e6:f2:9f:
fc:fb:50:ad:41:43:17:fa:33:8f:ff:b4:13:bb:1e:77:cd:fe:
09:f9:1d:60:0f:0d:23:8d:fe:9b:8e:b7:df:e5:c0:b8:4e:f5:
46:c8:7a:a9:5b:45:88:94:ce:b1:f1:d0:75:e1:db:eb:37:7d:
56:5f:9a:58:70:5b:d3:02:03:f6:f4:00:a4:8e:f0:89:0c:29:
04:9a:3b:7e:e7:cf:b8:84:d3:3c:a6:e2:dd:6d:c3:e4:95:e5:
68:7d:2b:dc:ae:14:46:69:b2:e4:be:92:a5:0d:ee:47:01:ad:
1e:5f:89:da:6c:47:88:27:b2:d2:66:04:dd:95:78:e7:26:d2:
6b:24:d0:bb:67:12:bc:0c:9c:ff:c6:24:a4:4d:8c:9c:35:5f:
26:a5:d4:80:fc:7f:2f:86:87:c1:78:68:f4:ea:9a:0c:1c:9c:
d9:b6:76:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:53 2026 by rpki-client