This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
File: dtAtj564761YOO-TGIVJb8-vHGE.mft (raw, json)
Hash identifier: ER4R/LxjZRt5mSviIYoe/GCMsN1eFplK+Jq9sBOJl4A=
Subject key identifier: 3C:EF:76:85:A5:F5:E6:1F:9B:29:52:F8:CC:BF:18:B5:DC:9B:2A:43
Authority key identifier: 76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
Certificate issuer: /CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Certificate serial: 019C41344305751DD19D4AEB41058CF0D0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 07:01:09 +0000
Manifest this update: Mon 09 Feb 2026 07:01:09 +0000
Manifest next update: Tue 10 Feb 2026 07:01:09 +0000
Files and hashes: 1: dtAtj564761YOO-TGIVJb8-vHGE.crl (hash: d0CEzWuA33rPS7qaMs7MsYb58TtSuWQB6qFnimOAkmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:43:05:75:1d:d1:9d:4a:eb:41:05:8c:f0:d0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Validity
Not Before: Feb 9 07:01:09 2026 GMT
Not After : Feb 10 07:01:09 2026 GMT
Subject: CN=3cef7685a5f5e61f9b2952f8ccbf18b5dc9b2a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f0:e5:75:32:9d:4a:09:7d:48:8e:98:76:9f:
67:4d:4f:01:7b:32:ae:ed:25:b2:82:69:82:18:d8:
21:88:e8:82:ca:19:ed:a2:6a:40:ad:e7:b2:7e:16:
0f:8e:20:c8:39:d9:ad:71:78:69:08:9a:6c:f1:8a:
01:2f:85:b5:a2:c8:b3:53:78:88:13:df:dc:86:7c:
6d:03:32:d2:79:22:ec:85:ac:f3:f6:4c:14:24:36:
47:13:2f:09:bb:61:26:14:04:61:24:be:e7:43:ce:
d9:40:bd:ec:b6:17:81:90:eb:37:6c:7e:62:56:c7:
82:66:f2:77:eb:ef:eb:14:63:fd:6d:f4:7c:f4:33:
8f:48:51:3d:5c:8b:f6:c5:ec:f1:ad:54:33:2c:be:
de:80:3c:06:3a:b6:c7:4d:23:d2:5f:d9:9f:97:0d:
94:00:37:54:da:cd:59:34:ae:f0:49:0d:cf:ec:fe:
99:c8:a1:43:d2:31:eb:ac:14:88:19:b0:33:7a:be:
cd:4f:62:8e:6a:2a:05:20:99:ea:72:6f:35:dc:cc:
7d:25:73:ab:91:65:17:93:7a:fe:b7:82:f1:34:ac:
cd:2b:e6:4d:c1:19:b8:55:aa:e9:01:ca:d4:5b:1c:
ec:f7:eb:fd:c5:13:8b:e5:c7:fa:2a:87:fa:fc:b6:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EF:76:85:A5:F5:E6:1F:9B:29:52:F8:CC:BF:18:B5:DC:9B:2A:43
X509v3 Authority Key Identifier:
keyid:76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:10:12:b7:aa:c7:28:20:98:67:3f:73:cc:27:a7:11:4b:dc:
5a:82:d9:ce:a3:ed:5b:08:1d:cb:f2:41:1d:72:47:c2:d8:16:
64:45:7b:7f:84:af:03:b9:71:cd:a7:46:32:a8:14:71:a9:48:
eb:43:fc:ea:e5:bc:89:94:8b:f9:de:d2:a4:f6:25:70:6c:30:
31:61:b1:0f:38:98:b3:3f:13:0d:f9:c0:e4:94:3c:0e:83:8f:
79:ff:a4:c3:ac:46:2b:70:d8:e1:a2:13:e2:23:0f:4d:95:73:
41:6b:ce:ba:31:5e:70:17:b5:98:4a:72:7a:a0:c8:6f:fd:0a:
af:bf:63:fd:f4:3f:6a:64:fa:55:94:b2:90:06:bf:0f:14:5e:
82:75:78:ed:9f:24:65:a0:f1:fc:88:0e:ba:59:a3:a9:77:31:
bc:7b:27:44:af:f5:f6:a4:20:0f:53:b3:92:1e:49:3b:80:b5:
14:a9:41:05:53:a2:95:88:f7:af:ed:2d:2e:27:d4:9e:1a:e1:
8e:bf:22:2d:8f:bd:a7:8e:04:4c:cf:ca:9e:1f:11:d8:47:f7:
72:24:d4:31:bd:f9:24:49:af:47:cf:5d:3d:b6:94:ec:e5:55:
9e:bc:6d:75:40:c9:b9:a0:0f:e8:ba:14:5f:1e:59:90:2b:4b:
32:59:4b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:46 2026 by rpki-client