This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: iQFfHeDng+jsSmXp28xJjNcq5u9XCjzmTs9gaBRk/mg=
Subject key identifier: 48:18:6C:C6:11:56:06:38:22:53:70:63:FA:BB:94:3A:15:EA:2C:7F
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 019C43FDCCEBCF5AF312FD75AAEE05B06700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 08C2
Signing time: Mon 09 Feb 2026 20:00:32 +0000
Manifest this update: Mon 09 Feb 2026 20:00:32 +0000
Manifest next update: Tue 10 Feb 2026 20:00:32 +0000
Files and hashes: 1: RirrsvwYX5j7L-75yH60raw263E.roa (hash: IOJ4XETq/n9kBBATZy+5z0L1BPBp5v7kLy/O5w5iiLM=)
2: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: 7qB+RPWCX0fAZlhWHnNg0cjOrITJ4dOt6zlfGNctfQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:cc:eb:cf:5a:f3:12:fd:75:aa:ee:05:b0:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Feb 9 20:00:32 2026 GMT
Not After : Feb 10 20:00:32 2026 GMT
Subject: CN=48186cc61156063822537063fabb943a15ea2c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:61:81:53:4a:50:76:a5:3d:fc:6d:4c:c9:
33:82:87:ae:88:50:0e:5b:6f:ba:37:bb:a3:47:9c:
35:4d:f4:52:a5:31:5c:4c:00:24:d1:62:74:94:31:
6d:3a:f5:3d:04:59:af:a4:07:99:e3:b4:1c:9f:60:
dc:79:6c:a8:19:d8:b2:88:4d:11:00:75:3d:6a:83:
d2:9f:5a:d8:e8:24:a6:a8:6b:9e:68:70:2d:e5:3d:
de:8d:87:f9:ee:94:5c:f9:e2:1b:d9:c9:81:9a:c6:
f5:40:08:c7:34:f4:9f:e6:22:df:39:bb:74:82:69:
9f:c2:78:fe:31:60:70:99:a2:7e:50:53:ae:1a:74:
39:33:04:ca:e7:6b:fc:42:2a:97:fa:0d:df:92:73:
3f:6f:49:cb:d3:0c:68:6b:61:1f:e2:ac:7b:b3:a5:
fc:69:cc:62:c6:ac:3f:da:fc:eb:05:bf:49:93:17:
22:b0:0b:bb:36:2f:15:fd:47:78:85:15:be:93:9b:
18:2b:57:84:cb:ca:2e:b3:0b:8d:b2:49:c6:46:e9:
bc:45:7d:b8:f2:16:b0:7c:37:c1:3e:0c:fd:92:95:
7a:98:e7:6c:e3:36:50:7a:24:b7:96:e3:24:42:e2:
84:90:90:e6:89:b9:22:22:c6:66:25:5b:26:6c:5d:
f2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:18:6C:C6:11:56:06:38:22:53:70:63:FA:BB:94:3A:15:EA:2C:7F
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f0:63:65:64:02:10:db:a4:40:01:e6:36:8b:35:a0:5a:fd:
ae:46:d7:1f:de:6d:58:89:97:79:16:6b:95:b3:dc:52:0a:d2:
fa:a9:34:7b:51:c0:e7:ab:72:4f:d0:e8:df:a8:03:93:58:80:
70:4a:19:2f:a1:57:a1:d7:cd:4e:a2:6a:9c:9e:c3:a5:26:f2:
4b:7d:c3:6b:9a:59:2d:20:1b:c1:ca:87:cf:2f:9d:e7:58:a0:
1a:18:70:af:bf:17:ef:fb:f5:7f:c7:66:c1:49:2d:63:c4:c8:
b9:56:72:55:d1:e2:7a:b8:e7:f0:a2:5c:41:e5:84:7b:f7:03:
0b:80:c1:60:33:aa:2e:ce:a9:28:7c:51:33:36:67:35:f8:5a:
fc:5c:b3:ff:70:23:68:45:40:54:db:96:23:44:59:1b:b7:88:
9b:cc:d0:c1:2d:05:e6:01:38:50:1f:af:bd:0f:a6:ff:ef:f4:
55:a4:a8:db:fa:b6:50:1e:c4:ba:b5:6c:ae:99:e8:8b:66:c4:
e0:8b:10:65:4c:26:da:56:9e:8f:d6:d5:b3:64:56:61:bb:8a:
6f:77:c5:1a:c2:5d:fc:91:36:ef:f9:fb:56:ec:0d:65:74:fa:
9d:7e:fb:86:11:d9:3b:20:42:9e:9c:d2:2e:ac:ab:10:3a:c4:
5d:82:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:56 2026 by rpki-client