This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
File: iToqQBmigXfN-AZZnxq11R0XuNw.mft (raw, json)
Hash identifier: 1svlTw5TqCGkNFT2fy9tuUqM8ty6HgT6yPMxqbW3pk0=
Subject key identifier: C0:12:52:3F:C5:7C:C6:87:31:A9:49:54:34:13:CF:89:78:95:C5:68
Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
Certificate issuer: /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Certificate serial: 019C43FDB276B33833F02DE7B1FF38F1ECF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 20:00:25 +0000
Manifest this update: Mon 09 Feb 2026 20:00:25 +0000
Manifest next update: Tue 10 Feb 2026 20:00:25 +0000
Files and hashes: 1: XfmMZ0oDUAwJDxSQEiuis-Gr-vc.roa (hash: kULJfAR/H2C5tYjK8edBq2EIZUqAdDfvi749QUzxPA8=)
2: iToqQBmigXfN-AZZnxq11R0XuNw.crl (hash: 86Z4SlrKCDqFK1fdcQ1ab82hHpEsjO4ZATr+GiKcFHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:b2:76:b3:38:33:f0:2d:e7:b1:ff:38:f1:ec:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Validity
Not Before: Feb 9 20:00:25 2026 GMT
Not After : Feb 10 20:00:25 2026 GMT
Subject: CN=c012523fc57cc68731a949543413cf897895c568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:78:53:6d:c2:51:b2:ec:c4:c0:28:0a:0e:
78:5e:d8:65:fd:7f:34:83:c5:e6:58:e5:54:e0:d3:
e4:37:f5:93:44:6d:94:85:7f:a1:2d:77:59:24:0a:
b0:5d:8b:4e:53:a3:48:1a:a7:88:c6:dc:c4:5c:26:
2c:56:dc:b9:1b:f9:d1:c3:01:b9:c6:d0:5f:3f:a6:
3b:a9:26:65:7c:d4:74:e7:1d:29:ff:18:ab:e6:c9:
20:e8:9f:7c:97:0a:2d:d9:54:c8:9e:86:c2:98:92:
4b:2d:2f:08:a2:f3:07:86:47:ac:f4:8d:46:7f:20:
32:4f:75:0a:7f:04:b9:f5:16:90:52:7b:3d:4e:83:
c2:7f:17:d8:fc:fd:25:9b:43:d4:bd:0f:71:d6:ea:
fb:29:70:b0:d3:22:4f:8b:ce:ea:f4:44:e0:58:8f:
9f:f0:43:0a:34:6f:e4:08:f2:75:a0:d1:1a:64:ca:
ab:f0:cc:2a:99:89:3c:21:4c:f3:91:df:0e:f5:bc:
e1:0e:6d:ca:fc:a4:86:8e:87:9b:6b:b2:22:6a:40:
15:aa:25:b4:2a:d9:51:1a:9a:70:31:cb:be:7a:d8:
86:df:b9:00:b1:bf:8e:51:3c:c4:fd:2f:fa:b3:69:
78:09:4c:8e:f9:0d:9c:00:a0:06:d1:2c:38:68:b5:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:12:52:3F:C5:7C:C6:87:31:A9:49:54:34:13:CF:89:78:95:C5:68
X509v3 Authority Key Identifier:
keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bb:16:fb:13:fe:fe:cb:7e:79:6b:e0:b6:1d:1e:92:46:58:
5c:74:27:4d:f9:8a:14:37:e7:5f:e0:3e:b9:9b:ab:db:34:67:
8e:18:30:33:a9:7a:96:d4:05:7b:af:b3:21:5e:83:a6:69:11:
91:d1:bd:ce:cd:21:64:aa:b3:0d:5b:cf:3b:9e:d8:50:e8:42:
9a:72:9c:ec:cd:fa:e5:c9:1f:d9:5f:97:5c:9e:3e:57:65:d9:
f5:6f:7c:04:f7:a6:d2:e9:35:5b:d9:c5:75:1c:4d:3a:46:06:
e4:99:eb:79:47:cc:ba:d8:b0:00:2e:2d:44:d9:3c:5b:6d:09:
74:ce:39:46:1a:27:58:9b:53:f3:c9:db:fd:87:34:e5:33:68:
ea:d5:c9:dc:45:bd:49:14:4e:94:f0:00:94:00:a5:c5:e5:60:
fa:a4:7b:f8:e8:79:e3:2b:81:ef:e5:1a:d2:92:1f:3a:ae:36:
7c:fa:52:08:6d:38:19:99:88:7e:59:63:d7:94:a4:af:df:5b:
56:8d:b3:11:2e:35:0b:5a:0e:d1:8a:32:77:90:6c:6c:95:c2:
35:b9:fb:93:4c:dc:71:ac:81:72:34:51:4f:ed:1d:2b:75:f0:
c9:d2:c4:97:aa:45:7c:dd:e5:1f:81:91:6f:47:ff:98:f0:23:
cc:a7:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:26 2026 by rpki-client