This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
File: dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft (raw, json)
Hash identifier: Q7EtuEpZSzb6diGcU23moCfTZ0AWMMRZKcarq14gGfk=
Subject key identifier: E6:69:7A:78:4F:95:A2:AF:8A:3E:F3:7D:8F:4C:ED:D6:33:53:94:4B
Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Certificate serial: 019C427D33585388579DE816E7C4C6B4B74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
Manifest number: 052A
Signing time: Mon 09 Feb 2026 13:00:27 +0000
Manifest this update: Mon 09 Feb 2026 13:00:27 +0000
Manifest next update: Tue 10 Feb 2026 13:00:27 +0000
Files and hashes: 1: Ey3NVFNZGCHqRvki0g7r8C0_gMY.roa (hash: l3PwDzdUu8sAqi7VNj0H3fSsXYCfHAzMO+z2/d+bwfM=)
2: dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl (hash: J7G+BPvP1KFB1TvHjIPnT7bX00tAKsCejcGA9Z/agtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:33:58:53:88:57:9d:e8:16:e7:c4:c6:b4:b7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc
Validity
Not Before: Feb 9 13:00:27 2026 GMT
Not After : Feb 10 13:00:27 2026 GMT
Subject: CN=e6697a784f95a2af8a3ef37d8f4cedd63353944b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:fa:ec:b0:b3:7e:b2:8a:19:35:da:62:c3:
a4:fb:d2:e4:7f:c6:b7:1f:02:8c:50:80:63:15:67:
bf:2e:d2:1a:2a:61:fa:7e:a7:db:79:12:fb:2e:4b:
e1:94:1c:04:6f:a6:88:c2:64:13:d0:e7:c8:b1:74:
6e:59:7d:d8:c5:62:ca:7a:a3:e0:79:6f:ee:32:01:
1f:2d:55:fd:47:19:5f:5a:0f:8a:23:21:95:b0:3e:
3e:43:f0:b8:19:bd:15:09:31:cd:41:40:9a:81:be:
21:56:4a:5d:10:90:65:9b:b0:fc:f1:c2:c2:ef:bb:
6e:3c:4e:97:4f:b7:4c:52:41:a2:5d:c8:82:98:2b:
7e:ee:98:fb:ab:60:43:00:95:8f:f1:ce:dc:8a:54:
85:d9:ff:3e:d2:d6:b0:cb:8a:c2:be:69:20:c8:05:
57:94:54:c0:98:59:a4:df:d5:71:4f:a8:09:db:ef:
74:70:73:ee:bd:50:3b:e2:25:aa:41:84:cc:46:db:
ff:67:2b:c5:3e:f5:63:2b:f2:26:5d:9e:fa:65:2e:
1c:28:a5:0b:a6:0f:09:12:9b:1b:30:e4:a6:99:bc:
f7:d8:3f:04:6c:ee:40:9c:d8:75:93:94:c0:c2:f9:
ee:42:a9:bc:c5:e1:55:79:50:f5:65:44:52:01:0e:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:69:7A:78:4F:95:A2:AF:8A:3E:F3:7D:8F:4C:ED:D6:33:53:94:4B
X509v3 Authority Key Identifier:
keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f8:ad:7a:da:5e:be:01:2a:1a:f8:b9:6c:99:d9:8b:b9:cd:
71:07:d9:d9:9d:41:54:10:b2:82:36:a8:5a:18:2f:2e:b6:e2:
11:f5:88:07:11:80:45:9f:56:b5:1d:19:07:85:d9:bd:88:1a:
cd:c1:d8:ac:9f:f3:af:b3:a6:b0:d4:81:aa:fe:6b:cc:02:7e:
c8:4a:99:70:d2:34:3d:93:6c:52:3f:fd:f8:4c:e0:e8:7e:5f:
44:ad:34:ce:bc:c5:d2:6e:ef:ae:14:30:c8:b0:95:5e:89:0c:
e5:06:90:d6:ed:59:59:0b:3e:80:5f:3b:f8:e5:b3:ad:ca:a5:
36:07:a9:91:d6:51:dd:f3:39:b5:e9:9c:74:9e:2b:33:f1:f3:
5d:60:da:39:9b:08:bb:a0:26:cc:7e:70:e6:a8:c1:6d:f4:65:
ef:64:0e:35:ac:7d:9d:04:82:2f:e5:9f:9e:7c:06:4a:1c:f5:
5f:5a:db:b8:6c:56:38:53:24:ee:a6:76:a8:b5:e9:9a:34:3f:
53:48:ae:bd:07:1a:74:fc:8a:22:33:48:45:6a:af:88:e4:2c:
71:36:30:fa:3c:0d:79:fc:38:3a:f3:56:c6:57:ba:4f:d4:bb:
9b:c3:58:75:ee:18:91:1f:c8:e9:dd:2f:5f:e7:ae:eb:73:53:
08:c8:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:07 2026 by rpki-client