This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: 0Nq/Yx9r0ZRquSX+qfU8kHAUhx3Jqp/oGD6NHBYoi7s=
Subject key identifier: D4:AD:13:C6:8E:34:24:A9:68:E2:98:46:41:6C:43:67:C3:51:31:5D
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019C427D19BE3E37A75672320A5339D2FA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0B59
Signing time: Mon 09 Feb 2026 13:00:20 +0000
Manifest this update: Mon 09 Feb 2026 13:00:20 +0000
Manifest next update: Tue 10 Feb 2026 13:00:20 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: iww/FuPM1sSUUcy+qi9nANjhvl41ohHEC/WTQK3FtLU=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:19:be:3e:37:a7:56:72:32:0a:53:39:d2:fa:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Feb 9 13:00:20 2026 GMT
Not After : Feb 10 13:00:20 2026 GMT
Subject: CN=d4ad13c68e3424a968e29846416c4367c351315d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:3f:45:d0:35:3a:4b:cd:f0:8a:45:ae:53:
f5:85:4c:1c:26:51:69:16:64:be:15:9d:20:c3:fd:
ff:12:ff:a8:93:66:e9:63:f3:88:2d:42:86:7a:05:
91:5f:fd:93:81:a9:bc:69:b6:90:a6:20:5b:b1:c1:
df:d7:ee:20:71:01:2e:72:b7:11:f6:69:3e:74:89:
6e:a1:e2:61:c4:e2:0e:bf:1c:85:7a:7e:c4:21:36:
ed:f3:e2:c2:a8:8d:7f:17:1b:32:b1:8b:80:64:ab:
1c:6d:d1:c1:bc:0a:46:cb:de:63:8c:3a:3d:fe:0c:
ff:40:e5:aa:e6:78:33:7d:a9:c4:78:6e:b3:a4:66:
b8:bf:7f:de:2d:b3:d2:2e:c2:10:f1:86:6d:7a:5f:
d3:2c:e2:0c:03:cf:a2:d7:66:c9:a3:4e:1a:01:00:
59:63:09:90:a7:ec:d3:11:00:72:e6:45:5e:eb:02:
6e:d5:b2:fb:cb:43:3c:85:67:d8:2b:74:e9:97:98:
da:86:c2:9c:66:11:35:e8:10:6e:42:7f:9a:3b:8b:
bc:c3:c5:92:92:df:62:79:43:fd:71:97:18:d0:27:
3f:da:bb:f5:40:90:00:cc:7f:66:5e:be:e8:c5:1b:
8e:28:1b:cb:20:26:8b:75:79:e5:8c:2e:af:3d:52:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AD:13:C6:8E:34:24:A9:68:E2:98:46:41:6C:43:67:C3:51:31:5D
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3f:73:5c:cc:11:c2:b3:33:e4:5e:ab:0c:54:af:93:9a:9f:
a4:9a:8e:5d:2b:46:84:09:84:b1:0d:76:11:9a:bb:1c:ea:21:
ce:ed:e5:1e:49:5b:34:15:cb:65:4a:b6:d2:25:ad:87:f7:95:
cc:8a:7c:dd:71:f5:64:c0:52:75:9b:46:26:44:60:63:95:eb:
a9:b2:cf:f3:f8:6a:e3:49:de:22:8d:74:54:29:3b:7b:71:01:
fc:3f:61:5d:b0:5a:de:80:c0:79:4b:2a:5e:85:e9:2d:4c:70:
94:aa:17:02:53:78:ba:fd:fd:29:f8:cc:d1:9a:13:8b:f8:cf:
8a:12:3b:7a:f6:6f:94:41:f5:87:2b:3a:ec:dc:d5:3d:29:f2:
03:d1:6f:30:e0:33:ba:7e:61:49:4d:58:92:3c:4c:ff:61:f2:
b4:fa:61:dc:79:05:bd:ba:02:5c:c2:a3:3d:1c:d9:27:d9:84:
5d:7c:8d:63:cf:73:1a:6f:f1:ff:72:89:88:6b:f4:f4:e5:a8:
c6:eb:d7:63:15:02:6a:a6:9c:27:4f:b5:b0:11:ca:fb:72:d9:
a3:66:fb:ef:bd:ff:b7:6a:5f:74:47:87:c9:ae:ab:4c:c0:4e:
2f:a6:ae:d5:91:f4:87:b7:d8:4a:e1:7d:db:b7:60:6e:46:95:
1b:1b:d2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:24 2026 by rpki-client