This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
File: biYdnc3dmGfliSrRpNII32lTEXc.mft (raw, json)
Hash identifier: 6rwI7VxJq9U3PrZzlM9tpw1fvRBq7CKDrw38tiA8npQ=
Subject key identifier: EE:19:E2:30:1D:FA:98:E4:4B:BA:36:5A:77:DF:5E:1F:9A:FE:26:73
Authority key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
Certificate issuer: /CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Certificate serial: 019C4322AB89E6A656FEF5B87724C77A7F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
Manifest number: 106C
Signing time: Mon 09 Feb 2026 16:01:11 +0000
Manifest this update: Mon 09 Feb 2026 16:01:11 +0000
Manifest next update: Tue 10 Feb 2026 16:01:11 +0000
Files and hashes: 1: biYdnc3dmGfliSrRpNII32lTEXc.crl (hash: Ckd2EHpZExaByL6R6xaiCy98rBrAS8Rii/UFeuGP5vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:ab:89:e6:a6:56:fe:f5:b8:77:24:c7:7a:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e261d9dcddd9867e5892ad1a4d208df69531177
Validity
Not Before: Feb 9 16:01:11 2026 GMT
Not After : Feb 10 16:01:11 2026 GMT
Subject: CN=ee19e2301dfa98e44bba365a77df5e1f9afe2673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:70:23:f2:f3:ae:23:87:5c:6f:26:6c:40:48:
af:9e:c6:dd:41:df:1a:4d:b7:ef:8d:cb:07:d5:68:
54:cf:dc:96:5b:75:cb:73:32:8b:23:01:c1:d5:d1:
d8:cb:7e:0e:03:c1:e4:b1:9b:e0:f7:64:23:1e:01:
d7:f5:a8:19:1c:97:10:0a:0a:2d:8c:37:0b:8b:ff:
b5:d4:d2:20:b8:98:85:d7:4a:a1:aa:9e:4a:14:c6:
b7:65:37:24:af:f0:82:de:25:13:26:7e:08:de:39:
cb:2d:f8:44:11:a3:4e:1a:be:46:ca:59:f6:9e:59:
c3:11:6b:00:c8:20:93:dc:b3:be:f9:e4:17:38:3e:
74:18:6a:bf:fc:e7:8e:81:fb:bf:fb:67:1a:44:32:
58:b8:80:80:f2:91:2c:a3:6e:30:cb:3a:e2:e1:44:
1c:78:40:02:55:ec:91:6e:a8:08:0d:8a:c8:20:23:
1a:7c:9a:9b:2e:0d:9c:d0:56:30:fb:75:73:69:9d:
c6:1b:26:1f:21:1b:ef:7c:2d:06:c0:25:09:bf:60:
6f:09:df:02:3a:9c:51:c0:cf:37:2f:7d:cc:4c:67:
59:03:a4:57:11:49:e6:28:2a:81:aa:a6:19:fc:f4:
e3:a0:10:f4:3f:29:ba:90:48:1d:71:5b:4c:d0:22:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:19:E2:30:1D:FA:98:E4:4B:BA:36:5A:77:DF:5E:1F:9A:FE:26:73
X509v3 Authority Key Identifier:
keyid:6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:95:2c:76:b2:4b:46:5c:5d:98:4b:34:09:51:58:16:18:e5:
a5:36:4a:65:a2:9a:1b:76:20:8a:62:b4:57:f2:c5:64:fc:a4:
87:a6:a4:15:2c:05:74:8a:69:1e:3e:5f:a5:90:48:02:4f:9d:
f0:d8:65:2e:64:cd:38:21:e0:ba:c8:23:2f:92:a9:59:1c:42:
ad:67:00:53:2c:ab:9c:ad:dc:fd:e7:39:3a:df:5d:1a:a3:c6:
d6:49:fa:15:e9:26:d3:04:d7:60:00:11:2a:7d:f4:05:f4:16:
68:ae:86:7c:a5:2b:cc:12:eb:22:b0:d8:72:c3:98:1b:cb:db:
4d:60:0a:c3:90:d6:ee:31:68:2e:b5:80:53:6c:ee:04:95:be:
8f:a0:67:5e:f8:da:53:a9:07:ab:c1:d7:e3:cc:bc:08:15:52:
8b:bb:9b:6b:3f:5a:60:3c:fa:9d:ff:b7:db:d7:a5:68:75:31:
68:e4:2d:d2:5e:6d:ba:76:5b:e3:02:15:41:cb:0b:91:8a:11:
e4:66:14:4b:eb:d3:b1:60:2f:ab:07:67:dd:fe:5e:d9:d1:22:
48:5b:bd:ef:bc:6d:44:94:4f:55:01:49:2f:c0:df:19:99:9f:
54:b2:70:ca:e4:54:f0:b2:dc:69:47:21:ac:8d:f3:83:4e:ea:
ca:83:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:57 2026 by rpki-client