This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: 2tvXGw/E3u6AofG0XdcK9F3RKAnXSx1lKmz9fQIrBdc=
Subject key identifier: 7A:39:F9:1C:50:CE:C4:12:4E:E6:C5:F0:2A:D2:94:7C:84:3D:50:FB
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 019C44348337FBBF72FC59B59F7B1F4A80CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 0B96
Signing time: Mon 09 Feb 2026 21:00:17 +0000
Manifest this update: Mon 09 Feb 2026 21:00:17 +0000
Manifest next update: Tue 10 Feb 2026 21:00:17 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: rd6fcjTeSCEtibMJnw4vXFj/Y5criZuLAkGvHb4IEMA=)
2: R9CKdSuhKcix03lDYUZNj_9bSZw.roa (hash: 25D9RZgSbgAoxxPe4MQJY7sqqlRu8rIg+8wl9bKE/EI=)
3: mq48_sBKvAEWvtf8WzXrPhnKlKI.roa (hash: 7dt1YErJg3/qsgZU38eup42hAog0One7x1CvO3l5p0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:34:83:37:fb:bf:72:fc:59:b5:9f:7b:1f:4a:80:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Feb 9 21:00:17 2026 GMT
Not After : Feb 10 21:00:17 2026 GMT
Subject: CN=7a39f91c50cec4124ee6c5f02ad2947c843d50fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:21:db:e4:ff:29:5d:33:3e:62:6d:e3:25:
60:d4:43:39:9e:a9:e5:46:fc:f4:0f:29:e3:16:7d:
bd:04:e0:d6:12:ed:7b:5b:68:f7:d5:f9:35:07:69:
c2:5e:8d:60:86:b6:f5:56:a6:90:77:c0:8f:f4:9c:
ba:15:de:31:de:a1:89:c0:57:b8:98:90:0c:e4:55:
f7:52:3f:d5:8c:43:fb:43:c6:2e:56:e0:ae:ca:6d:
f8:7a:f9:fe:5e:bf:0e:8a:02:cf:3c:38:0e:d4:06:
76:15:1b:d3:ae:d2:84:75:39:e2:b8:d0:5c:5e:b1:
b6:97:a2:01:73:79:08:e4:36:3a:b2:ab:dd:eb:86:
1e:53:1c:0c:5b:0f:8b:6f:96:a5:73:f7:83:65:63:
4b:4d:d7:fd:bf:aa:05:e9:1d:bb:c3:ff:40:e8:83:
6e:9f:d8:58:49:75:a2:5a:2a:86:ba:d1:22:20:1f:
a9:cc:02:3f:0f:4a:74:5e:ce:c6:1c:2b:08:c3:29:
73:3a:4c:6e:07:9f:f5:6e:d2:03:c5:d4:00:83:b8:
c6:f0:a8:76:e2:23:cf:3b:33:9a:63:35:96:b1:9b:
03:f3:a1:7d:15:c6:ac:37:b9:82:86:d9:f5:5d:2d:
f7:79:e1:cc:b6:93:31:a7:c0:f1:90:b7:21:57:e2:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:39:F9:1C:50:CE:C4:12:4E:E6:C5:F0:2A:D2:94:7C:84:3D:50:FB
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8e:f3:00:67:dc:ba:2b:9e:66:86:57:4f:99:7e:d4:72:3e:
dd:bc:2c:a4:94:0a:81:98:6d:d1:35:03:2e:ee:84:af:b3:c4:
21:94:78:21:73:8a:4e:be:e7:eb:6b:f1:30:c3:c5:17:15:bf:
8e:ce:71:b2:90:7f:df:9e:52:b0:10:4d:6a:9e:54:3b:ac:9d:
40:38:71:db:98:71:e8:2a:c8:cf:9e:41:21:6b:4e:1d:3f:43:
4a:25:33:6f:8a:62:67:72:d7:2c:ec:f6:2f:9d:b4:a0:fe:5f:
6b:e7:05:be:b5:7d:bc:93:6c:cc:48:6d:07:bf:a9:27:83:ad:
ae:76:b4:46:7d:c1:11:67:d7:c5:7a:c9:f9:de:f4:1c:1b:9f:
17:24:b5:74:24:00:66:94:1d:f4:a9:75:bf:d4:2c:c3:64:d1:
af:56:8a:a9:21:ae:9c:78:ab:33:f9:10:e1:51:0f:ca:59:c9:
df:bc:dd:0a:a7:e7:06:92:07:64:cb:cc:76:41:27:2b:b5:39:
ae:1b:fd:80:50:22:50:a2:27:cf:eb:57:e0:9c:f1:5b:cb:fc:
1c:5f:e5:41:ff:dc:ce:36:fb:ac:d8:74:16:0f:2e:d7:80:ae:
77:4c:79:17:b6:3c:ea:1b:08:e8:e3:c7:bd:33:62:5f:69:1f:
ca:31:3e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:57 2026 by rpki-client