This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: OCEcs+eo0uVYo8wN/r4mdS93dHZTdJAYFGfTIJIUJCw=
Subject key identifier: 70:96:53:FF:B9:CB:C1:39:67:3B:4C:39:3E:0C:4C:04:12:83:B4:8C
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 019C438FAAC59FEDDF2446F273DA12BBB147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 18:00:14 +0000
Manifest this update: Mon 09 Feb 2026 18:00:14 +0000
Manifest next update: Tue 10 Feb 2026 18:00:14 +0000
Files and hashes: 1: KryCaxT64_DbJj9jN-VGjBxwrAo.roa (hash: Tm0gGiIBbT70VOlPTXJPfE+loxLa156dIkZIGPLoeOg=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: N2jr/nsu8bQ9FhouMa2pJpbBdYPLaH99qyokl70qYZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:aa:c5:9f:ed:df:24:46:f2:73:da:12:bb:b1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Feb 9 18:00:14 2026 GMT
Not After : Feb 10 18:00:14 2026 GMT
Subject: CN=709653ffb9cbc139673b4c393e0c4c041283b48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:9b:f6:4f:da:32:bb:d6:d4:a3:d0:b7:cf:
f7:79:e6:bd:9f:0d:17:d6:a9:c0:38:89:d4:30:37:
57:5f:31:c9:2f:13:46:cb:a2:4d:37:e0:7a:af:e4:
cd:bb:0e:a8:c9:b3:16:9d:ff:78:02:a7:0b:44:7a:
76:40:74:76:93:f9:0b:6c:77:57:f3:1c:6d:8e:5f:
90:0e:62:20:8f:46:5d:3c:92:42:42:d4:41:8f:dc:
3f:31:21:3a:39:c6:de:49:8f:79:f3:71:a1:ca:a5:
d2:ef:c6:f1:4b:70:4a:5a:5b:0e:ca:f6:ee:9b:32:
96:07:23:3e:12:08:dc:2d:89:4f:2c:5b:45:19:99:
da:64:dc:53:6a:f0:9b:43:19:32:d7:73:fd:31:80:
b0:8f:61:0b:a1:d2:1e:8c:cb:45:b1:e1:05:14:2c:
e0:27:fb:fb:91:8c:62:fc:5e:5d:8d:e8:e4:c5:4b:
49:e9:50:90:80:18:e0:9e:ba:6a:c3:6a:c4:91:75:
af:66:06:31:ca:fd:a1:db:77:3b:6e:84:ce:de:6e:
a9:e2:75:bc:9d:a6:20:6d:cf:51:3a:d5:be:87:68:
46:23:db:1c:64:46:35:ba:24:d6:a1:07:47:3c:4f:
d5:4a:a0:bd:08:65:c6:56:b6:68:ce:7f:74:52:37:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:96:53:FF:B9:CB:C1:39:67:3B:4C:39:3E:0C:4C:04:12:83:B4:8C
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f9:d5:b7:f9:47:81:cc:d8:30:32:b6:e0:ee:f5:20:ec:51:
00:f9:73:57:b3:9e:cd:a6:53:12:ec:5c:f4:60:c6:d2:86:ef:
ca:c4:e3:a4:91:4d:c6:30:a3:11:7c:0b:f0:0e:ae:3f:8c:23:
d7:50:95:7f:98:4b:ae:ea:d7:ee:84:bd:53:79:23:b8:bc:d5:
d0:98:0c:c1:3d:e2:93:a3:ab:bf:26:e3:a8:cd:bc:27:3b:8c:
80:7a:f4:d4:9b:f8:c6:b3:01:82:2a:17:e1:68:0a:f9:1d:5b:
ce:27:80:62:19:9a:69:8e:73:9e:33:bd:4c:46:06:f2:9c:07:
78:ae:c5:37:34:a7:01:56:52:c2:eb:83:91:20:a0:d7:74:34:
a8:52:8f:3b:27:76:6a:00:e2:59:d6:a9:dc:78:9c:5a:80:f4:
25:a9:3d:b4:d3:b6:7d:e6:bd:3d:c1:07:e8:2a:73:6e:45:7b:
50:dc:f7:fd:99:2b:24:7b:17:20:ac:14:a0:94:db:1a:f5:1c:
28:bf:fd:3b:56:76:5b:c4:75:b5:2c:a9:d5:2d:a2:bb:79:ca:
9a:c8:fd:01:ae:f5:ab:8e:cb:9f:1b:32:9d:08:05:d6:9a:c6:
08:aa:e2:e1:db:80:5a:6b:91:e4:50:ba:a1:dc:2c:f7:2a:a6:
fd:1b:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:18 2026 by rpki-client