This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: AnRItIjTN+LxHQtEiCCJile4O7lar3x6fFZTyMuPpvo=
Subject key identifier: 26:05:2A:B0:53:2E:4B:B6:BB:E8:91:64:35:06:9D:9F:EB:CC:D6:25
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 019C427D08FB2FB758FC3618EEE9E3D57CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 179E
Signing time: Mon 09 Feb 2026 13:00:16 +0000
Manifest this update: Mon 09 Feb 2026 13:00:16 +0000
Manifest next update: Tue 10 Feb 2026 13:00:16 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: hv11jzfRZewxzse1ZKalzvEjvTOeuo0U/eqXpBW0bd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:08:fb:2f:b7:58:fc:36:18:ee:e9:e3:d5:7c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Feb 9 13:00:16 2026 GMT
Not After : Feb 10 13:00:16 2026 GMT
Subject: CN=26052ab0532e4bb6bbe8916435069d9febccd625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:58:b2:dd:3d:a7:6b:d8:fa:de:54:62:46:
41:93:d1:9b:2f:b2:ad:8b:20:11:be:05:68:39:2a:
b3:c0:e4:4d:da:1a:d0:04:d2:c2:2a:6a:e8:10:28:
46:0c:87:9c:fa:9a:31:aa:25:a3:c0:56:c4:d2:5e:
c0:fb:bf:f6:78:b2:56:17:29:62:2a:46:42:f3:13:
0b:81:79:04:18:a8:ac:f4:4b:47:39:6a:72:24:dd:
39:d8:aa:02:aa:d3:de:a2:21:0e:13:1d:7b:a5:9e:
0f:be:f6:2e:76:2a:c4:21:d8:0e:9a:4c:82:35:71:
bd:78:b6:25:da:c2:0a:c8:d6:e0:17:27:29:9b:d7:
ac:18:b7:1e:51:75:47:4e:c0:d0:4f:c5:fe:24:f5:
38:54:66:58:e8:25:c9:ab:84:78:a2:a6:b1:33:09:
a7:94:4f:04:d3:7e:cb:64:c7:5d:31:6f:e1:9c:ec:
a8:4a:0a:2d:16:4c:7f:53:76:da:0c:4f:85:7c:f0:
cb:e5:19:c3:41:e9:13:b6:30:8d:99:97:02:4f:d2:
8c:bb:2a:a1:d9:96:91:3a:11:eb:67:fb:c5:2b:94:
50:78:62:28:a8:ff:23:7f:96:bf:c7:c1:2b:8f:65:
30:b9:ab:a2:b5:89:5e:26:51:92:49:39:c4:38:1d:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:05:2A:B0:53:2E:4B:B6:BB:E8:91:64:35:06:9D:9F:EB:CC:D6:25
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7d:7d:65:52:1c:7e:9b:c8:b9:23:0a:3a:76:70:1f:b6:ea:
1e:65:18:68:26:20:75:ac:8f:30:ad:a7:3b:cf:64:3d:80:b1:
57:fa:08:05:55:3e:b5:5d:87:4b:63:00:1d:b1:9c:e6:49:d3:
d8:3a:18:46:47:fa:71:60:c8:1b:5c:da:d5:b3:e3:40:91:ce:
2c:9d:59:9f:76:b2:df:a8:21:9e:0d:7c:06:ea:36:5b:18:9e:
f8:80:16:a6:e2:69:31:b6:d9:86:d2:ed:46:ae:dc:21:f5:38:
f3:82:34:1d:f0:c4:34:cd:60:97:d6:d7:cc:fa:f2:e2:6c:9a:
16:d5:c1:bd:da:93:92:a4:6e:80:61:f9:5b:94:cd:3b:ba:ab:
dd:35:9d:3a:39:42:61:7f:c9:f3:f1:40:32:41:0d:28:b6:c6:
bf:53:34:cd:67:29:c8:a0:45:27:7d:df:3e:d9:04:c1:a3:3a:
21:42:02:29:a6:81:77:68:d1:10:52:1e:70:c8:8f:dc:a8:04:
f2:74:17:83:df:c3:a3:05:cb:18:80:bb:fa:79:69:14:f4:6c:
e1:a9:3b:7d:c1:d6:53:4b:bd:3f:ac:5d:0b:cd:57:4e:6b:b6:
b4:0c:93:11:d9:2d:ea:d5:57:27:a5:65:bd:18:c5:89:b6:ac:
2c:8f:e7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:59 2026 by rpki-client