This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: c7iAqK74EnmQ2mntfpMwUzc+DUPv5XO8VuGevu8efME=
Subject key identifier: 7A:AB:0A:48:E9:9B:55:C4:C4:78:32:49:CF:46:52:80:DD:45:42:EB
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 019C43C721D50F490B346F1F269C8EADD52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 061F
Signing time: Mon 09 Feb 2026 19:00:49 +0000
Manifest this update: Mon 09 Feb 2026 19:00:49 +0000
Manifest next update: Tue 10 Feb 2026 19:00:49 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: w5qMAFKRf/ishI4CLIjP/xKx8n7qxh2KFt4+0WBeutw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:21:d5:0f:49:0b:34:6f:1f:26:9c:8e:ad:d5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Feb 9 19:00:49 2026 GMT
Not After : Feb 10 19:00:49 2026 GMT
Subject: CN=7aab0a48e99b55c4c4783249cf465280dd4542eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:43:9e:3b:c3:26:f9:2f:88:2d:34:01:35:
41:7f:db:d7:2b:cc:2a:43:3e:af:db:5b:f2:da:1c:
18:76:c6:b2:6a:67:21:41:6f:d5:49:eb:33:34:d3:
04:c1:3e:e0:0c:e7:13:47:46:5a:ab:ca:6e:81:5a:
82:a5:69:4c:fa:30:8b:86:18:b8:c9:be:5b:48:d8:
11:48:40:63:93:1a:83:90:ee:62:4b:99:e6:0b:62:
22:07:f4:d6:4f:b1:c4:2f:05:ed:3a:f0:58:0c:01:
c0:5a:55:ff:3e:2c:f5:7f:41:3f:1f:41:03:4c:5f:
21:93:f8:e1:f3:13:fa:09:96:59:85:f1:39:7c:9e:
bb:9a:fe:36:67:74:16:fd:9d:98:58:e0:56:38:d9:
18:37:0e:01:cc:9b:62:ab:37:65:dc:26:6e:a6:c1:
04:16:b5:53:1d:a5:87:f8:24:0f:7e:92:e1:d5:7c:
e9:28:ef:df:f5:c6:93:de:38:66:bb:90:f5:56:79:
75:c4:00:3e:b8:f3:5b:94:bf:52:ab:e7:c1:9b:54:
71:a6:bb:3d:f7:c6:fd:c5:97:47:b9:57:d6:0d:b3:
9b:de:27:a4:3d:b1:6f:82:34:cb:5e:a4:09:94:2c:
00:ea:a6:4f:08:d5:dc:11:31:dd:7a:d5:68:cd:20:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AB:0A:48:E9:9B:55:C4:C4:78:32:49:CF:46:52:80:DD:45:42:EB
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:78:72:71:30:57:93:75:4e:4d:62:8a:6d:e5:30:76:be:86:
68:27:5a:c7:91:09:7d:1d:67:ca:9a:9d:0a:72:10:f5:99:65:
6b:47:c1:f6:6c:5b:b1:9f:ac:74:57:07:21:d6:44:f2:a6:d2:
47:f6:48:ff:bf:23:f2:90:5d:dc:7a:18:de:c5:09:94:4c:bc:
d9:15:1e:d2:c8:fd:da:13:38:cd:b0:eb:dd:0d:07:03:93:46:
fb:3e:35:19:0e:bb:0e:1e:14:aa:a0:03:7b:82:65:c8:fc:5a:
65:76:ad:2f:cd:f4:92:9d:eb:94:1a:3a:3a:ad:cb:ca:a8:04:
75:06:ad:21:62:be:6f:35:20:a2:3f:02:2b:fb:b6:8f:01:62:
55:4f:5a:54:cc:7b:63:e9:27:58:6b:ef:c4:e7:d7:78:0d:3f:
47:fc:25:08:54:80:11:b3:83:90:59:ee:cc:9f:38:29:62:9c:
76:fb:be:9f:e0:03:3d:6b:59:67:30:39:1c:f8:0c:ea:90:d2:
79:97:54:07:5a:24:9e:a9:b8:54:cb:8d:34:9b:bd:49:21:a9:
95:e6:f8:d0:e4:85:e8:39:97:ac:77:6f:f4:ca:f5:c8:df:d2:
42:88:14:ad:dc:6d:b9:e0:fe:29:37:8a:b8:63:d1:d7:6b:39:
64:bd:40:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:50 2026 by rpki-client