This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: nIL/cY77IaCCClxdhavs9rWg+WdPMdGsfmrclS205jI=
Subject key identifier: C1:61:5A:48:22:DA:39:B9:07:29:6E:ED:82:80:0B:C2:CC:96:AD:C5
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 019C43C6F951A06F826C244832FEF7ED7A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0F38
Signing time: Mon 09 Feb 2026 19:00:39 +0000
Manifest this update: Mon 09 Feb 2026 19:00:39 +0000
Manifest next update: Tue 10 Feb 2026 19:00:39 +0000
Files and hashes: 1: 6g9Sdo-eJYElfuGgjU1PsahjZn8.roa (hash: Q4WRD5ukCrgnTo+xu8mbOedNwPrNG14LcRDJEgtOWxI=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: DEnbIMVU70rMR8HRnvp503WpzFdE11NqtyesPtMPFiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:f9:51:a0:6f:82:6c:24:48:32:fe:f7:ed:7a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Feb 9 19:00:39 2026 GMT
Not After : Feb 10 19:00:39 2026 GMT
Subject: CN=c1615a4822da39b907296eed82800bc2cc96adc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:eb:e3:9b:b5:b2:08:a5:17:16:ed:b6:cd:2c:
57:89:23:46:1f:00:94:bb:88:f1:f7:07:f8:56:60:
10:0e:4a:61:31:72:de:8f:c6:79:cb:10:33:4a:0c:
5d:dc:32:78:a3:c1:4a:36:56:83:45:e6:c3:43:95:
8a:70:d1:cb:5a:2f:01:76:c9:1e:33:3c:06:74:1b:
54:12:8d:f7:8d:35:a9:fb:2d:55:37:cd:38:e6:41:
44:23:2f:92:65:ed:78:d2:58:e2:4e:b4:44:5a:62:
f3:18:7a:db:2f:d2:6e:0c:60:85:e3:57:30:7f:51:
75:ca:57:98:e9:bb:75:d6:09:bf:bc:f4:32:bd:9a:
ba:46:08:46:6b:ed:5b:de:7d:5d:b2:c3:af:1f:ae:
17:84:8f:e3:2a:f0:bf:ff:47:75:bd:c1:4f:5f:24:
ef:b4:8b:c9:e5:25:6b:7d:cc:8d:a2:61:d8:82:07:
21:61:13:81:62:4f:6f:1c:1a:06:81:76:1e:77:67:
2f:81:87:4b:b1:ff:8d:b2:c8:89:58:42:c5:ef:de:
1d:ec:4c:7b:bf:cb:3d:f9:a1:0e:34:d8:ea:88:5c:
83:e9:0e:ef:0e:10:4b:4b:7a:a1:a0:de:60:35:a4:
24:f8:76:d9:03:0c:b7:0d:3c:15:a5:5c:3e:1b:d1:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:5A:48:22:DA:39:B9:07:29:6E:ED:82:80:0B:C2:CC:96:AD:C5
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2d:b1:d0:f3:38:11:ea:d6:c7:c2:47:65:3d:04:b2:a3:01:
e5:b8:ad:bb:78:22:1c:a8:80:da:4c:14:40:c4:13:82:2d:50:
6f:4f:61:cd:b8:98:88:b0:86:2c:25:27:42:20:86:df:47:0e:
6c:0d:4a:02:93:39:a0:d5:2a:35:25:84:35:1d:f5:a7:77:78:
5c:bb:ab:f3:a8:1c:aa:f5:70:02:ca:da:8f:60:c8:58:33:19:
5d:62:ab:f2:ab:c6:04:2b:39:c3:d6:b0:f7:78:61:1d:c6:4b:
3c:1f:14:58:60:ba:d2:eb:30:08:15:c8:b8:48:e9:43:28:92:
74:ca:81:b1:41:9f:9d:5d:4e:44:3b:f0:05:ce:65:44:3a:9f:
5c:3a:d3:a6:09:26:1b:1f:15:f6:45:33:9d:a2:bf:c6:60:5e:
85:46:e3:f7:e6:8d:72:6f:a0:ef:fb:b4:91:5a:e4:5c:94:e2:
93:55:7a:0e:42:4f:be:b7:0c:4d:5f:32:48:60:be:5c:a6:f7:
21:a8:54:d7:bd:5a:c3:b2:87:8b:87:8c:33:4d:38:9e:57:70:
f5:e2:9d:7c:c5:0a:9b:89:e7:1d:fe:bb:bd:93:e3:fc:f5:2f:
9f:eb:b2:70:e5:71:06:b9:bf:c1:ec:4a:7c:8a:07:28:a4:c0:
b8:c4:6e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:04 2026 by rpki-client