This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: pmK06cBHyYpQ9/iFlCQH9aT0PHR1JNElPInW/VM4GyY=
Subject key identifier: 15:A3:9A:09:6C:30:79:B1:00:84:32:DE:60:C6:DE:76:5F:1F:46:A1
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 019C427DE24953E4F9B3B384056578C87227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0CDF
Signing time: Mon 09 Feb 2026 13:01:12 +0000
Manifest this update: Mon 09 Feb 2026 13:01:12 +0000
Manifest next update: Tue 10 Feb 2026 13:01:12 +0000
Files and hashes: 1: P5elOkBLveGl1Ib_d-hIHalet_Q.roa (hash: yhnDVPZx7UIZ7b78IbUGd3YNtEhVBShWgFfNgBkV6AE=)
2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: Imx5op35t2iAT/ZtkeLhzT8gmV/A/2twv8xC7MDpaGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:e2:49:53:e4:f9:b3:b3:84:05:65:78:c8:72:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Feb 9 13:01:12 2026 GMT
Not After : Feb 10 13:01:12 2026 GMT
Subject: CN=15a39a096c3079b1008432de60c6de765f1f46a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:85:ef:b2:0c:ed:eb:49:f6:82:9c:8f:ee:
5b:9f:5a:74:72:61:35:54:eb:90:99:bb:b9:d7:74:
dc:76:dc:63:8f:ce:d6:13:79:e9:6c:be:0e:4d:17:
84:67:be:7e:3d:ac:43:8c:78:a5:26:37:47:a9:6b:
66:89:77:14:3d:f8:44:ca:34:07:d9:32:59:92:c6:
6f:ec:f0:3f:ea:e2:b9:7e:4d:18:74:70:0c:7c:02:
63:45:df:99:4a:de:08:f8:a8:d3:d9:8e:5e:6b:95:
a6:01:22:a8:d4:50:f4:63:15:5e:d9:e5:5b:66:4b:
5e:43:28:7c:09:4b:17:92:0f:8a:a7:cc:46:b2:5e:
bc:a9:86:c9:83:ce:d9:71:74:0a:5a:a5:36:45:2c:
7e:e9:e2:05:96:69:e1:3b:d6:4d:43:ea:f6:60:06:
3d:d4:9b:69:ef:75:7f:66:c6:9d:70:47:4a:93:ec:
b4:e6:05:6d:0f:ae:02:ee:99:22:ed:db:26:19:2e:
3e:45:02:1e:02:21:48:4e:ae:73:f6:1a:9e:a0:54:
68:5c:41:86:8e:1e:5b:28:df:b2:9d:70:65:cd:49:
09:3a:a6:36:2d:74:3b:bd:e0:9f:a4:71:51:cc:17:
a0:9b:c3:cd:60:13:37:f6:42:19:85:54:4f:89:d4:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A3:9A:09:6C:30:79:B1:00:84:32:DE:60:C6:DE:76:5F:1F:46:A1
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:af:b0:1e:1e:ce:39:95:dd:af:19:c2:0e:3b:40:dd:bc:c0:
87:48:1f:c4:c5:c7:78:3f:4c:8e:fc:0e:a4:93:d7:2d:7d:98:
d8:a8:2a:f3:5d:92:de:ae:61:11:d4:10:d4:00:ee:af:7d:04:
73:89:e4:9f:35:01:fa:0c:48:c6:a5:df:8a:e5:59:98:b4:cb:
46:9f:97:9f:15:97:2a:2b:f1:1f:77:4e:15:00:7a:04:72:9a:
35:5b:c5:5a:31:01:86:25:22:cc:46:8d:2e:4e:2a:8e:0f:50:
02:73:a7:fa:52:f6:20:d8:f2:27:83:ca:78:db:d1:4d:df:06:
7b:1d:dc:94:d3:e0:aa:29:e3:40:b2:04:37:c5:38:ce:36:e9:
2a:02:be:c8:50:66:f7:db:c9:f8:1b:48:e4:60:ee:6b:7c:2c:
eb:20:a2:26:8e:f8:1d:25:57:39:59:1f:3d:e0:ad:95:d1:ef:
b3:88:e2:5a:b5:3b:a7:65:a7:4d:30:1e:8d:a6:9f:7a:5a:72:
04:31:83:1d:c8:10:42:f1:78:c4:25:f1:b5:81:07:a1:e6:ad:
04:54:7c:8e:fb:bb:c1:dc:6e:62:e1:fa:4b:57:2a:6c:f1:c4:
1f:9f:08:10:76:eb:1d:1b:8f:7b:0a:38:6d:3f:5f:a5:88:20:
9a:cd:cb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:19 2026 by rpki-client