This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
File: cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json)
Hash identifier: /l7R2bUllJSkd0B8Q/Ms3QTTj48J0xK+YOjppvp5myI=
Subject key identifier: 37:9A:B3:41:3C:47:A6:6A:B6:EA:6E:91:9A:4E:E6:DD:7F:54:AD:A7
Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
Certificate issuer: /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Certificate serial: 019C42B46B669F7615B3E9E0E6D173A70735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
Manifest number: 0FAB
Signing time: Mon 09 Feb 2026 14:00:46 +0000
Manifest this update: Mon 09 Feb 2026 14:00:46 +0000
Manifest next update: Tue 10 Feb 2026 14:00:46 +0000
Files and hashes: 1: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: 47Bre+ywI14V4GzhGvNG0tooMm3fJHe1vmgWTgJghrA=)
2: zbGnMHvperUTVfkkQ2o3OIxLJb4.roa (hash: yA4AYsSS3JozPB6SQxRvVSqD1ZvucRznxAMaRPbA/Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:6b:66:9f:76:15:b3:e9:e0:e6:d1:73:a7:07:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Validity
Not Before: Feb 9 14:00:46 2026 GMT
Not After : Feb 10 14:00:46 2026 GMT
Subject: CN=379ab3413c47a66ab6ea6e919a4ee6dd7f54ada7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:4d:1e:1d:5f:56:64:93:8d:0a:10:25:8a:
5a:6a:a0:b4:3d:c3:b7:33:99:05:42:3b:3d:7c:77:
6c:e1:88:e4:31:74:db:4d:e0:2c:69:06:ed:31:4d:
25:8b:61:4b:4e:a0:e4:8b:3f:a8:36:9c:96:a9:f5:
1a:c7:79:e2:25:f4:15:77:b9:06:f6:be:f0:09:d3:
96:42:80:e6:6b:8c:67:0d:66:49:33:cb:3d:a8:a0:
97:ed:26:7d:a5:4f:f3:10:14:f9:c7:a5:e2:fe:ce:
64:43:18:10:9b:09:df:ee:3e:aa:db:d7:83:09:e6:
64:43:c2:53:ad:db:da:0b:df:06:8b:0b:46:c0:88:
df:ed:f8:5e:81:40:5a:2c:84:de:1b:19:39:51:47:
c6:32:40:69:b9:93:d0:4f:a5:b2:7d:b7:49:e6:61:
3e:74:2b:b9:43:cc:49:3a:f6:29:fb:05:ee:dd:51:
70:76:46:0b:01:d7:0c:52:63:36:1d:85:ff:6a:4d:
78:64:7e:22:7e:81:06:e0:65:dd:24:f0:9f:bd:97:
fa:01:3c:81:45:64:2d:71:81:1b:af:4e:02:70:5f:
fe:f4:d9:db:8e:7d:77:be:b8:33:21:d8:05:ec:43:
f9:ac:78:72:b0:d1:80:35:ed:0a:30:cc:5e:c1:d0:
4d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9A:B3:41:3C:47:A6:6A:B6:EA:6E:91:9A:4E:E6:DD:7F:54:AD:A7
X509v3 Authority Key Identifier:
keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3f:c5:66:48:2c:29:d8:7b:6c:e2:17:27:08:8c:46:92:e5:
72:48:b6:b2:95:55:9f:d6:cb:f5:25:6a:07:61:7d:72:79:89:
a5:62:d4:e3:0b:88:fa:23:7d:5d:e5:e6:b4:4e:2c:13:52:7d:
7c:dc:60:fd:84:f0:fd:f0:82:73:ab:f1:2c:29:0e:ce:52:86:
bd:9f:ed:fb:04:ff:e4:59:0d:74:5f:59:d7:fe:03:19:a2:b8:
65:29:c0:55:3d:83:a9:1b:df:aa:f9:2f:32:8d:3d:9b:49:3c:
8b:5e:44:4a:8b:f8:8b:ac:81:ce:97:d1:53:0e:a2:f0:fb:12:
79:21:1d:10:27:a1:8f:8a:dc:52:ec:3a:05:cf:10:32:a0:3a:
90:22:d3:33:d5:be:e6:8e:25:f5:19:a9:4c:8f:3a:c4:a9:6d:
e6:5a:2f:1b:e2:a2:7c:cf:89:3a:63:a1:63:ea:32:01:10:ef:
30:c5:0e:11:e2:b6:68:d4:0d:04:17:46:c9:fa:2f:d8:b5:97:
6d:7d:c7:23:6d:39:36:30:d5:9d:29:b8:3e:2e:7b:e8:43:d3:
11:ef:81:56:8a:86:94:b2:71:3d:5e:3a:2b:4e:d4:6a:b6:ae:
74:f8:39:7b:96:0e:ac:23:37:42:a2:d5:1f:2b:20:f4:0f:49:
20:8e:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:09 2026 by rpki-client