This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier: zqTxy24ajXyby8KqaLprE6gqDY9dFnDZBAgw2e/sjUY=
Subject key identifier: 95:A9:60:8A:DF:11:97:BD:56:6B:22:1A:F3:5E:01:D5:94:83:16:8D
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 019C45477B924CD3CE62BA99A326D85DFB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number: 071B
Signing time: Tue 10 Feb 2026 02:00:38 +0000
Manifest this update: Tue 10 Feb 2026 02:00:38 +0000
Manifest next update: Wed 11 Feb 2026 02:00:38 +0000
Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: bao21ZSw75xpPazCemEwX8hbDWIVYDtX2om7Yf1w0rw=)
2: 4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa (hash: PqJvEzmh32UVxsDr7waFI7G4gmqJkPLZ5CaOrNIefv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:47:7b:92:4c:d3:ce:62:ba:99:a3:26:d8:5d:fb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: Feb 10 02:00:38 2026 GMT
Not After : Feb 11 02:00:38 2026 GMT
Subject: CN=95a9608adf1197bd566b221af35e01d59483168d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:85:c4:d4:9b:e5:1c:bf:5f:ee:ef:74:09:
c5:6a:14:84:87:cb:4c:8f:56:53:99:30:2a:61:19:
6b:48:02:59:6c:72:e6:70:4d:66:0e:c3:3a:b7:2c:
4d:e3:f4:19:33:51:51:09:c2:69:70:24:dd:b6:13:
92:3c:02:d4:f9:41:06:2b:cc:f2:ad:39:01:da:75:
03:9b:9e:86:a5:37:c7:fd:be:ba:97:8c:8a:d0:7c:
31:4d:05:6d:27:47:41:ec:6e:53:ee:9d:5d:fa:c6:
5b:72:aa:18:ce:0d:9e:fe:aa:e0:36:c3:93:8a:26:
bc:d0:f9:4c:d5:a1:f3:44:79:99:65:cb:61:4e:67:
2a:cd:b4:5f:e6:5d:5c:10:5a:e2:b7:eb:63:0e:ba:
e1:4d:e0:13:9a:3b:aa:67:db:c9:69:d6:62:30:97:
98:a8:3a:cc:45:1d:e3:b9:41:bf:10:50:5c:0e:6d:
be:0a:8f:bf:a4:c8:89:36:5f:31:be:63:81:35:4c:
d6:d3:39:16:76:00:40:84:dd:bd:ac:3f:08:6c:03:
4a:90:a5:7c:be:ea:94:33:0c:a8:e8:df:d4:e0:f7:
49:f7:f2:d6:9a:2d:b9:af:12:06:8f:62:13:7e:e2:
4c:c4:0d:32:c0:15:4b:bd:b0:15:14:b3:06:5e:d7:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A9:60:8A:DF:11:97:BD:56:6B:22:1A:F3:5E:01:D5:94:83:16:8D
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:db:65:8c:79:4e:78:e4:92:da:8c:bc:30:9e:e6:89:43:28:
19:26:0a:0a:c9:46:32:7e:10:a4:95:45:8c:3e:99:f4:72:50:
fb:3f:ff:03:fe:40:18:a8:40:5b:1b:0a:a6:71:15:76:13:e2:
09:0e:fe:2e:47:e8:b4:d3:49:3e:79:5e:3c:63:84:99:ea:71:
56:70:c3:80:30:bd:89:b9:85:dd:88:c8:ce:7e:76:66:c2:c6:
b3:e5:d6:3f:cd:14:84:67:b2:4d:8d:a5:94:9f:83:cb:55:58:
b1:b3:93:09:e1:62:86:e1:e0:8c:38:6c:0f:ad:a9:76:da:53:
87:07:e5:63:b7:bb:ce:2d:66:1c:d4:a7:87:4a:11:eb:65:9b:
1d:8e:72:6f:f3:48:16:f4:af:68:b3:48:b6:cb:a3:34:a2:c3:
13:b7:14:83:06:14:f8:02:48:01:99:15:fd:58:a3:07:7f:51:
85:0c:0a:ab:5c:68:70:13:64:5d:95:2a:83:eb:29:e9:8b:7a:
78:6a:09:8c:9e:82:74:c7:af:60:36:ff:6d:e2:5a:18:dd:85:
64:e5:68:9e:27:9e:55:81:f0:a1:a9:2a:19:3a:98:c7:ef:2c:
f1:6d:83:2b:ec:40:59:62:33:8a:9c:1e:36:92:d7:14:a2:86:
2c:80:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:50 2026 by rpki-client