This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: dzd7IadLkVqhSnln8XuyUIZcmjXpM8EFu1aGZDAs5sU=
Subject key identifier: E2:4C:82:08:4D:A7:A4:DE:4C:A2:05:E1:F5:E5:AD:05:BF:67:D6:92
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 019C4133807D31F86CA11E53357994F40A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 07:00:20 +0000
Manifest this update: Mon 09 Feb 2026 07:00:20 +0000
Manifest next update: Tue 10 Feb 2026 07:00:20 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: wb5GzpmdInRy8iYTTZshVgs+PUG135G1zgNOOhGT/h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:80:7d:31:f8:6c:a1:1e:53:35:79:94:f4:0a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Feb 9 07:00:20 2026 GMT
Not After : Feb 10 07:00:20 2026 GMT
Subject: CN=e24c82084da7a4de4ca205e1f5e5ad05bf67d692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:98:e6:d3:11:8d:24:2b:3a:d3:b5:e7:95:
4e:3f:29:0e:67:cd:cc:eb:5e:ac:27:1a:d3:00:68:
dd:de:30:d0:dd:c9:9e:7b:95:f5:b8:54:77:ff:2f:
14:99:18:09:cc:4a:fa:88:17:96:0b:33:90:3a:a3:
5c:9f:a1:18:1c:6e:fe:d2:48:3a:78:af:cd:1e:e1:
69:2b:48:fd:a3:e2:cb:d1:72:c7:85:fa:a1:df:d8:
45:5c:cd:12:a9:94:41:ea:15:a8:28:37:a1:ae:08:
76:88:03:35:a1:3d:1b:a5:2a:17:ca:b3:42:33:4c:
8a:33:42:d2:fe:7c:8f:0a:21:7b:80:5b:c1:2c:c9:
62:bc:d0:3f:b5:b9:fb:fd:06:80:10:c9:2f:f0:8e:
09:03:97:6e:c5:6b:54:74:6d:64:fa:3d:54:62:8a:
23:92:3c:a3:4d:19:52:98:77:58:f6:74:09:88:eb:
7b:2f:f3:ed:a9:40:46:9a:d1:80:45:21:f8:24:da:
f6:3e:5f:54:ea:e2:dc:a8:ed:a4:7a:8f:72:df:46:
07:1d:77:91:d6:22:32:b0:7c:4b:a1:59:5c:bb:76:
34:24:7d:9a:53:2b:75:d8:5e:56:68:e7:c6:eb:20:
7d:bf:a8:60:4b:73:4f:a4:49:c6:c0:b8:80:58:4a:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:82:08:4D:A7:A4:DE:4C:A2:05:E1:F5:E5:AD:05:BF:67:D6:92
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ec:87:5b:e1:36:da:6e:48:c0:af:a8:f9:ab:44:04:7e:69:
df:08:bb:c0:6d:5a:b3:13:74:97:71:d8:d6:d2:85:50:88:77:
45:18:2c:1f:44:3c:8b:b1:6a:e3:58:69:26:e5:78:c9:2e:d4:
a7:2f:ab:d1:a6:54:c7:f9:48:b6:50:a9:db:f2:4b:19:59:3d:
03:05:19:48:03:51:d7:4e:4e:d0:80:fd:26:5c:c9:11:4c:16:
f1:74:37:f8:16:e9:9a:d3:65:36:d4:4b:85:55:2d:07:26:ef:
9b:47:1e:b3:cb:da:e1:e1:7d:3f:03:38:6c:8c:db:3f:a6:37:
af:1d:a9:0e:53:26:7f:c6:4d:ca:37:04:d1:9e:ee:29:20:75:
48:79:d1:f7:bb:73:15:1b:12:a7:68:5b:94:d1:b7:8e:ad:05:
31:7d:67:54:51:43:c8:b4:68:b5:dc:af:fa:a0:78:35:ea:40:
fd:de:18:e0:cc:ef:76:c7:60:78:4e:93:3c:97:6d:aa:32:43:
3e:c6:f6:50:89:65:31:51:66:ef:fb:62:ab:2e:90:22:d3:d2:
5b:04:97:bd:f2:0d:c4:fe:0d:27:fc:64:f3:b4:c5:23:94:b0:
cb:ff:c9:c5:8d:95:3d:89:4f:34:e2:ad:51:20:3b:e1:1b:2b:
70:ba:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:26 2026 by rpki-client