This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: JYpwJATW8YTesDbt0ZxiRasTyFPUh3iOiVb1AmsEw54=
Subject key identifier: CF:8A:C7:65:1F:8C:03:CD:1B:59:75:DA:47:28:27:75:80:1A:88:1F
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 019C42EB7987D4787E7C4C23B58BAD32207E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 0C15
Signing time: Mon 09 Feb 2026 15:00:53 +0000
Manifest this update: Mon 09 Feb 2026 15:00:53 +0000
Manifest next update: Tue 10 Feb 2026 15:00:53 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: mUwHtIcSA5Eqer+OyloGGQ4kioVb9oeLns/vXt2an7Q=)
2: iGY_Mv10YgE-XbLN8s6W95SGc3w.roa (hash: 2VVKNx6PRdYWZ0nNRbCgG4Dar1wwW4X2eQNLFYqQiUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:79:87:d4:78:7e:7c:4c:23:b5:8b:ad:32:20:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Feb 9 15:00:53 2026 GMT
Not After : Feb 10 15:00:53 2026 GMT
Subject: CN=cf8ac7651f8c03cd1b5975da47282775801a881f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:24:32:88:15:75:04:cf:d7:14:cc:b9:a3:
50:a8:e8:0f:0b:de:d4:32:c0:cb:52:17:27:c5:31:
7a:f7:78:8a:94:3b:e9:6c:10:2d:e8:e7:90:4c:8b:
47:5b:dd:a6:12:e4:33:61:3f:c8:9a:26:b2:e4:85:
85:2b:ca:6b:ac:49:03:96:30:d5:28:34:8d:07:d1:
1f:6b:90:7c:61:1b:48:8f:1a:33:95:40:9b:8a:ba:
39:22:f9:2b:68:c2:44:bf:ea:b7:9e:dc:7d:7c:47:
99:bb:10:d2:c1:b7:8a:df:f4:85:85:91:bd:4f:de:
6d:3e:4d:37:dd:e4:d1:61:61:cb:50:12:a2:ae:da:
fb:c8:be:6f:08:60:94:d8:74:73:d9:78:15:c2:47:
16:cd:42:8a:33:a3:ff:d4:30:dd:a9:93:ca:cc:a3:
fa:a9:3e:5e:1b:e0:64:e8:be:58:f9:b2:c7:94:d0:
04:6f:23:90:c7:4a:10:73:89:df:19:3f:69:5a:8d:
77:06:90:48:69:15:ce:16:d2:ea:64:f3:35:4d:c7:
85:c4:eb:ff:27:d7:76:48:d1:c1:1d:9f:73:ac:13:
4f:9b:6f:40:36:7c:e4:11:7f:70:3f:bb:b3:68:8c:
d3:f2:d2:87:33:a6:b9:fe:ec:56:b3:28:5f:8c:48:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8A:C7:65:1F:8C:03:CD:1B:59:75:DA:47:28:27:75:80:1A:88:1F
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:22:f5:68:3e:05:e9:30:bf:02:c7:0c:4c:4c:b8:8e:88:0a:
e6:8f:51:bd:8d:05:ad:a7:24:6d:86:c3:4e:1e:61:11:c3:a3:
8b:c4:f9:9b:cb:f3:b0:25:b1:33:2d:b4:05:62:97:0c:75:82:
03:fa:2b:5e:38:09:ce:bb:a3:ee:88:ef:4f:f8:ea:4a:23:d7:
71:43:0e:2d:ad:5c:1d:04:dd:d4:68:30:61:b0:46:31:0c:dd:
74:6e:9b:2e:95:61:a8:de:eb:59:91:b4:a3:ce:09:86:fc:0c:
46:8c:08:ba:15:a5:71:8d:d9:ff:31:16:23:76:81:21:9e:88:
cf:98:20:b3:b8:35:a5:34:5f:90:67:6c:10:6e:e2:2e:b3:28:
a5:af:50:62:2f:e7:4f:86:1c:55:16:9e:d4:8c:91:f8:88:60:
64:66:61:44:bf:c3:c0:0f:ce:aa:f5:c6:cf:4b:c0:4e:b0:97:
be:ef:be:42:fb:fd:43:e3:cc:68:e3:38:5d:e3:e4:aa:71:54:
e5:19:c0:a3:0d:cc:c5:6b:25:0c:3e:70:32:7b:f1:38:90:a8:
1d:8d:7b:ec:e0:41:3e:40:9a:80:e6:76:a0:aa:89:92:e1:43:
d9:75:fb:fd:37:21:95:a1:ae:f3:df:48:37:ec:05:f0:37:ce:
18:5e:c3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:02 2026 by rpki-client