This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: fHFwPFbkfm7aLYeWLiNvHXMb6K+FkWiatOyIElJHVgs=
Subject key identifier: 86:68:28:67:60:70:BC:36:9F:50:47:6D:FB:B9:87:30:02:43:DF:4B
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 019C42EB5179935763DB25C9190D993DE1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0D8C
Signing time: Mon 09 Feb 2026 15:00:43 +0000
Manifest this update: Mon 09 Feb 2026 15:00:43 +0000
Manifest next update: Tue 10 Feb 2026 15:00:43 +0000
Files and hashes: 1: 1bz4VaBV4zDNPpHlEQ4nHg2og7c.roa (hash: AW/6Peh9HLcmvxwe2ZPJ0WiX9tfpgRcCEnLYZpk1F4s=)
2: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: exj7qkatqHI0AlxgLHU2UbknXJrjOelBC4E1teSy4pY=)
3: LxAfqO9DJb5pX4Ib_IiY5pQ6IIs.roa (hash: YzoiNF9QrUDbASLIJfkxXS0XmPF5J0XBaYWRaRu5sbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:51:79:93:57:63:db:25:c9:19:0d:99:3d:e1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Feb 9 15:00:43 2026 GMT
Not After : Feb 10 15:00:43 2026 GMT
Subject: CN=866828676070bc369f50476dfbb987300243df4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:86:52:f9:bf:aa:c0:71:8d:4a:1c:29:ea:01:
9b:f5:d5:ac:d1:08:9a:f1:88:2f:5e:87:e3:be:3c:
d8:36:f7:3d:79:2f:57:50:e3:f5:d5:73:7d:71:eb:
c7:5c:ee:82:74:56:46:c6:4a:bb:ea:e7:93:0b:09:
9f:2a:eb:8b:8d:e8:33:c0:80:70:a0:42:92:66:a9:
bf:63:b2:2d:a0:a6:34:bc:65:a8:25:c1:fa:c5:8a:
f2:f8:ce:61:b6:57:3e:fc:c1:5a:24:a4:82:6a:4a:
83:3f:2f:ce:1a:b3:8c:0f:0f:95:50:fb:f2:b3:7e:
d1:1d:60:67:c9:34:c9:e0:2b:17:92:a9:8b:8d:39:
41:1d:a6:92:09:0d:c8:9a:e3:45:60:10:0d:d8:76:
c4:50:c5:db:38:1d:ad:77:47:84:3e:55:c5:79:ea:
b3:97:ad:0d:b8:13:2b:b3:46:f5:07:92:1a:b0:72:
be:31:b8:22:61:59:be:04:e8:21:01:73:c3:08:0a:
4d:66:59:05:e7:d0:b3:dd:60:27:b5:07:6d:e5:d4:
bd:ea:ac:eb:13:4b:c9:a2:a5:c7:c7:af:1b:97:e6:
05:bc:22:f9:ed:a4:a1:22:fa:d7:1f:73:18:c3:02:
90:55:d2:eb:59:1b:0c:ae:50:63:c1:d8:6f:43:3f:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:28:67:60:70:BC:36:9F:50:47:6D:FB:B9:87:30:02:43:DF:4B
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6c:d8:37:6b:36:ba:ae:74:59:f3:17:4b:11:dc:8e:f5:50:
b4:50:ef:75:41:48:be:a5:33:48:01:99:54:f5:e9:16:76:15:
d4:e2:d3:f0:49:6e:55:7e:41:02:20:c1:7c:da:60:dd:37:41:
ce:87:86:36:62:67:48:02:05:48:cd:74:09:9c:9c:1a:8e:8c:
21:23:5c:f2:0a:81:74:30:64:23:1a:97:b1:81:b7:66:a7:7e:
f3:6f:83:b3:8d:b2:fc:b5:e9:ed:0e:24:54:3c:f7:a9:d1:a3:
8d:a2:59:4f:4f:b7:a6:16:e7:c6:76:f7:b5:06:d0:55:7d:0b:
61:de:40:bf:fb:2c:fe:c6:d6:ee:9b:c2:f4:4e:97:1a:13:16:
75:cf:9e:37:d9:0d:13:ca:ed:77:53:f2:62:08:a4:b2:ee:16:
4d:42:09:61:7c:49:84:bc:ed:9c:55:b1:3c:4a:72:59:e6:d2:
5e:cc:db:97:67:f1:9d:af:21:9f:c1:80:bf:bf:2e:d9:1e:46:
f6:5a:96:c4:99:54:5e:46:13:e0:d3:e7:75:fe:75:99:fa:ac:
f0:b9:be:fd:db:14:0f:6f:85:89:90:44:01:b2:2b:a8:33:88:
9d:ca:3b:78:fe:b4:ea:e0:bd:82:f4:d4:bf:87:2e:0b:8a:b3:
0f:52:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:19 2026 by rpki-client