This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
File: 2S5c30xU_4aM6JUxXqtY8tiGUMI.mft (raw, json)
Hash identifier: JoLejIdyiOzdUjnIu4IMv66ujGznQHBRJICNYWCIag0=
Subject key identifier: C7:F8:31:AA:DC:AB:59:E8:F9:F2:D1:F5:4E:B4:4C:72:68:8E:A0:92
Authority key identifier: D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
Certificate issuer: /CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Certificate serial: 019C424691965ADF8EDCCD9859FDEB7E48E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 12:00:46 +0000
Manifest this update: Mon 09 Feb 2026 12:00:46 +0000
Manifest next update: Tue 10 Feb 2026 12:00:46 +0000
Files and hashes: 1: 2S5c30xU_4aM6JUxXqtY8tiGUMI.crl (hash: x7NGAUws3b9sv0CVx0EbUvNrcYAWi7+1ulqFDTtX4lw=)
2: Ini83UPVBFujNi82mFdTbIeLJ_M.roa (hash: hQSzKgBjrspgpke+S+SyF68tGyGh2lr/WJ9Pf7DCYOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:91:96:5a:df:8e:dc:cd:98:59:fd:eb:7e:48:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92e5cdf4c54ff868ce895315eab58f2d88650c2
Validity
Not Before: Feb 9 12:00:46 2026 GMT
Not After : Feb 10 12:00:46 2026 GMT
Subject: CN=c7f831aadcab59e8f9f2d1f54eb44c72688ea092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:75:6a:10:7f:4a:c4:b2:6f:ca:9c:de:7f:3b:
f2:8a:8c:cb:ff:41:36:4b:db:46:db:fc:3f:58:de:
29:c1:37:5c:13:ec:fc:93:17:36:c2:21:aa:d8:bd:
06:55:65:5e:fa:fd:32:89:96:c1:3d:a3:a1:89:5c:
eb:15:a7:d9:1a:73:01:36:51:37:7d:93:44:9e:03:
8a:4a:a6:8d:96:a3:ba:85:a9:9b:1a:39:22:d1:7a:
79:a1:61:bc:05:a3:62:80:7b:98:0d:22:3f:da:8c:
06:75:fa:85:e4:23:e3:03:08:bd:71:38:41:60:7c:
41:4a:be:bc:aa:45:5c:6f:a5:eb:18:be:85:32:de:
ac:83:bf:20:37:89:44:35:2e:81:b5:52:78:47:13:
e9:50:c6:2c:e5:c5:4f:bb:74:4d:c8:ba:e6:51:20:
24:04:5c:65:c8:9f:da:54:e1:eb:40:36:84:92:fd:
5f:41:b8:06:d5:0a:3b:72:0c:83:0b:df:c9:81:31:
68:9d:71:45:14:bc:fd:13:41:fd:e1:17:3c:35:7e:
5e:13:97:32:90:82:45:c8:b5:ea:03:aa:97:98:ea:
11:e8:38:90:19:be:d3:db:e5:88:cb:32:45:ac:24:
9e:c5:00:66:55:5b:2d:17:d8:2e:b7:be:14:3f:dc:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F8:31:AA:DC:AB:59:E8:F9:F2:D1:F5:4E:B4:4C:72:68:8E:A0:92
X509v3 Authority Key Identifier:
keyid:D9:2E:5C:DF:4C:54:FF:86:8C:E8:95:31:5E:AB:58:F2:D8:86:50:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2S5c30xU_4aM6JUxXqtY8tiGUMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0c3c30-4527-4722-971b-f5fe3e1b0a63/1/2S5c30xU_4aM6JUxXqtY8tiGUMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e5:36:73:08:05:96:1f:ab:31:a9:ae:8a:03:9a:4a:77:ce:
e3:7e:92:ef:fd:60:05:d1:b2:05:9b:3f:10:64:20:4a:ff:e5:
72:48:bd:66:75:33:a0:75:dc:4a:ba:d9:76:3b:a6:f1:ae:40:
9f:06:c0:e1:c3:ba:8d:09:05:2d:97:e1:56:c0:a3:e4:c3:e4:
e4:a5:9b:88:aa:14:e6:7b:cf:50:01:70:ff:93:06:08:01:fc:
0b:03:20:7e:8d:e8:06:60:82:e5:68:a8:28:cc:b3:e5:95:46:
0e:03:51:b0:c4:76:2d:0a:c6:01:30:20:15:36:74:c4:f6:fd:
3b:d1:19:42:a3:11:67:da:a9:03:9f:39:df:11:c9:a7:73:03:
d6:2d:64:d3:02:90:ab:ca:f3:77:c3:3d:f6:8c:61:e1:25:a8:
4b:da:a6:4a:be:ff:5b:d4:1f:b9:97:45:ac:82:fc:c1:64:ba:
6b:9c:4b:1e:9d:6d:4e:78:a2:87:15:b2:65:fa:c7:57:51:90:
70:fa:1a:78:72:2c:17:0e:98:91:d0:0a:6d:06:8d:48:d8:25:
89:cd:d8:90:e0:70:c7:81:65:75:aa:e1:f0:66:50:8b:c8:32:
ea:1c:b2:73:dd:b2:84:8d:61:09:66:a0:b2:06:f6:3c:15:82:
30:1f:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:47:12 2026 by rpki-client