This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
File: g76BmaF8rKps1S15QSNtpuVuG-o.mft (raw, json)
Hash identifier: nglfPMSUzoPaYXLaMjNM/I33hh4SGtMBfLyySSpz0wE=
Subject key identifier: 92:20:A6:4A:0F:AE:96:31:03:0D:97:E4:E5:84:A3:FF:B4:F1:87:3C
Authority key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
Certificate issuer: /CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Certificate serial: 019C4322CD7D3551EBAFC7426B9EA090C960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
Manifest number: 0B94
Signing time: Mon 09 Feb 2026 16:01:20 +0000
Manifest this update: Mon 09 Feb 2026 16:01:20 +0000
Manifest next update: Tue 10 Feb 2026 16:01:20 +0000
Files and hashes: 1: g76BmaF8rKps1S15QSNtpuVuG-o.crl (hash: SYvRZRaeVPFFoXLmhFrOFqS/zdlNoY9d5Mdwd7H5MSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:cd:7d:35:51:eb:af:c7:42:6b:9e:a0:90:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Validity
Not Before: Feb 9 16:01:20 2026 GMT
Not After : Feb 10 16:01:20 2026 GMT
Subject: CN=9220a64a0fae9631030d97e4e584a3ffb4f1873c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:f0:03:bc:37:90:69:95:39:2b:f7:79:f8:
7e:22:32:69:d9:b6:21:d0:5e:10:6c:66:02:fb:98:
05:12:ab:d3:8a:7e:ef:bc:eb:0c:7a:2b:44:c2:8a:
3d:30:3d:41:02:0f:dc:4c:fe:53:e2:48:51:02:13:
dd:2a:64:e1:8f:6d:9f:24:14:2f:b4:a1:77:1b:5f:
fc:36:d7:94:b2:0d:93:8b:31:0f:6d:64:b5:a7:eb:
9b:e1:f3:40:75:16:b0:27:3a:8a:a8:de:28:6a:5e:
c2:ac:e7:5f:68:82:95:50:b4:a0:a4:cb:d5:3f:91:
a7:b1:fb:2a:5a:91:74:0d:72:d5:54:55:23:9b:2f:
2e:d8:e4:d6:54:dd:aa:fc:91:89:89:81:f0:e6:9e:
8b:e1:68:5c:a4:e3:48:2a:82:de:4e:0a:f5:92:f7:
29:74:29:d3:14:7c:83:83:e4:ad:15:3f:b2:b3:0b:
f2:a4:93:aa:79:6f:04:37:2d:6e:0d:f0:ef:fe:7e:
25:f2:4f:36:de:44:bd:3a:b5:09:04:56:19:1c:2a:
97:29:d9:da:a0:29:39:87:dd:e7:39:51:2f:fd:ca:
da:a9:36:79:96:b4:f9:a7:c6:b7:38:4a:c5:d3:74:
72:bd:29:02:b7:19:b2:a1:49:04:cd:7c:c7:07:e6:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:20:A6:4A:0F:AE:96:31:03:0D:97:E4:E5:84:A3:FF:B4:F1:87:3C
X509v3 Authority Key Identifier:
keyid:83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f6:49:e6:cf:6a:f4:65:b8:df:34:db:a4:90:9c:d6:9f:36:
68:2a:31:6a:7b:02:bc:7a:05:ca:7b:6f:e1:92:62:a4:9f:c9:
35:76:e8:ad:e5:bf:63:f9:3a:87:23:39:6c:8f:6c:2b:f7:1a:
e6:ae:f3:b8:aa:7c:d2:f7:9e:31:35:8d:c8:11:50:72:56:e2:
53:f6:57:55:45:b3:57:e6:62:8b:2a:25:8a:f5:a7:b7:ea:0e:
71:a9:fc:e8:ea:37:01:d5:24:03:71:2e:d7:e4:d0:25:7b:b5:
ed:12:b9:8b:45:ef:d8:c4:b2:3f:36:e5:2e:05:f8:f8:22:26:
2c:6a:4d:ff:79:76:24:65:ad:44:eb:08:83:e1:51:68:08:71:
ef:f6:9f:0f:d8:5b:44:4e:f1:7e:10:b6:6f:29:7c:91:50:4c:
1b:ce:77:5d:e6:3a:d5:c7:b2:0e:c7:4b:46:f4:4c:81:c9:25:
24:ed:04:8d:6f:f4:d6:cc:2c:05:d3:9f:40:91:fa:c4:55:5c:
1b:a3:87:bf:f9:ef:ad:d8:d1:7a:e9:af:fa:bd:d8:8f:d9:fc:
dc:3c:54:13:a7:6a:59:32:58:ee:9f:d8:31:7d:7d:c9:12:6b:
de:89:05:cf:42:ca:6e:41:54:18:9e:f1:de:33:3c:f8:a9:21:
3c:7d:10:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:33 2026 by rpki-client