This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: YPG2QF7D0Z+ztfnIzK30yPt7sZ0oxhKMRX2htQl/ebs=
Subject key identifier: 5C:70:77:EE:45:AE:4A:05:6F:98:E6:AE:B9:8B:31:01:8A:61:A6:97
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 019C41A1D6BCABF881DA9A56125D2B402AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 09:00:51 +0000
Manifest this update: Mon 09 Feb 2026 09:00:51 +0000
Manifest next update: Tue 10 Feb 2026 09:00:51 +0000
Files and hashes: 1: 3qQwWKb1-kVy_ayi1t9X0ckV-So.roa (hash: 6uc0py4DUTjhUubTuSWB3rLcaAx0aZmagITkDfiQN1k=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: nIWD6nSaEV4VH5rj8iH6AMU7Ei5Nu4Gm3fc0YpEGvLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:d6:bc:ab:f8:81:da:9a:56:12:5d:2b:40:2a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Feb 9 09:00:51 2026 GMT
Not After : Feb 10 09:00:51 2026 GMT
Subject: CN=5c7077ee45ae4a056f98e6aeb98b31018a61a697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:68:87:8c:ee:45:b9:b5:86:a4:8f:40:19:
45:d0:76:4e:ab:69:44:09:11:c4:ad:dd:30:07:54:
fe:fa:0d:fb:d9:da:fd:33:43:6c:94:2d:76:54:4b:
3c:00:2d:ad:49:71:b1:65:42:57:29:9c:57:6e:75:
b5:5a:dd:9c:34:25:d4:8d:3f:a1:1a:2d:90:0b:ee:
0a:2c:d5:1a:e8:e7:41:74:62:8e:b2:fa:aa:1e:20:
10:85:81:de:bf:62:c4:ca:04:49:4d:03:c8:ad:c8:
d8:e3:64:a6:c1:70:06:63:68:01:1e:0f:4b:f8:d4:
ca:a8:31:65:2d:dc:c8:f9:c2:e0:8a:ce:0d:ec:ef:
ae:10:6c:c0:ad:f8:6a:b0:3f:cf:f6:92:46:00:1b:
78:a2:a5:94:d0:12:77:7f:31:0f:26:7b:9f:98:92:
c4:24:52:77:29:b6:80:2a:7f:d6:20:78:4b:7b:b0:
98:20:5a:a5:e6:ee:05:26:d4:73:8a:bd:ca:df:56:
2a:ae:2f:8b:ed:61:29:2e:14:0a:38:b0:b0:35:b3:
e1:28:6c:27:ba:1b:7c:d8:6e:1e:bc:d3:50:19:ab:
15:20:48:5c:5e:b7:61:3a:93:85:28:0d:b4:59:43:
c2:31:ab:0b:fe:1c:9f:f7:9c:5e:d0:9e:98:d0:e6:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:70:77:EE:45:AE:4A:05:6F:98:E6:AE:B9:8B:31:01:8A:61:A6:97
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d5:9f:df:7c:29:2c:4b:0c:a3:86:4d:47:7e:2e:aa:ac:d7:
36:79:f4:09:87:5e:40:1b:95:90:fc:6b:6b:10:2a:c1:a7:20:
3e:ce:6f:2d:0f:04:d4:46:0f:fb:b7:f7:a8:29:17:e6:12:cb:
36:13:18:85:3d:18:07:8c:91:da:ce:08:ce:a9:84:69:eb:7a:
ce:40:e0:4b:ee:ea:af:84:05:97:54:35:a7:bf:72:33:fe:ff:
45:98:0a:cb:f9:cc:b1:cd:c0:54:28:66:06:1a:17:a6:86:8a:
81:08:2c:07:f6:5a:41:ce:60:a4:4a:b1:65:3d:23:17:b5:40:
a5:2c:fb:19:f4:f7:dc:52:9e:31:4d:6c:90:62:2a:05:68:a4:
cf:10:36:36:aa:64:97:86:c1:2c:81:b4:ee:3d:a4:71:bd:e4:
f0:8a:ce:9b:ab:fd:55:64:c2:3e:67:7e:08:f2:b3:13:d7:10:
9f:91:b8:65:fb:c8:ec:76:b1:d2:41:26:50:c6:d2:06:bb:22:
be:81:50:82:ac:7b:df:37:10:34:7a:91:71:b2:2d:e2:9d:2d:
58:50:f0:80:af:d2:82:6d:5d:a2:e7:3b:f5:45:71:0b:78:5f:
e5:e3:c1:ba:1e:b9:6a:c2:3c:03:e8:67:5a:6c:ed:9d:6e:a5:
f4:9a:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:59 2026 by rpki-client