This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier: 7Yjo6nJx0Y+axSKwO/I1DAX9ByW2ivKOV0rstIjayCw=
Subject key identifier: 6B:23:6E:66:E5:EF:F6:6F:44:6C:A9:F4:5F:93:DF:A2:73:11:84:3E
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 019C4322F7B2045DA0D3E7201CF909D9B091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number: 0D58
Signing time: Mon 09 Feb 2026 16:01:30 +0000
Manifest this update: Mon 09 Feb 2026 16:01:30 +0000
Manifest next update: Tue 10 Feb 2026 16:01:30 +0000
Files and hashes: 1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: NHYqFH9lm1SYohAz9lpgZgtOxOy5t5RrMclp8wY5Qng=)
2: ehFRVj_TXPwQ0rPF1XZNBg0Qd-I.roa (hash: rTBvSqvCO1yVewsD3TnK3oF62RT8jXzzKUsjw4v3zO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:f7:b2:04:5d:a0:d3:e7:20:1c:f9:09:d9:b0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: Feb 9 16:01:30 2026 GMT
Not After : Feb 10 16:01:30 2026 GMT
Subject: CN=6b236e66e5eff66f446ca9f45f93dfa27311843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:07:a0:c8:98:37:34:d7:9b:f7:62:37:4d:
49:44:cd:ed:19:ac:11:8e:b6:28:5b:a1:06:9b:75:
81:9d:e6:1a:ed:8e:fb:cf:3d:0f:bd:b7:1a:52:11:
bf:bf:00:8f:ff:07:df:be:46:16:78:55:bb:64:63:
ae:45:c5:d8:cc:98:78:a4:45:2a:7c:05:04:84:62:
37:15:11:9c:7d:3c:7c:30:71:94:b2:1a:54:9d:ff:
93:0e:ef:75:0f:7c:f5:0d:b0:f4:17:4b:9f:9b:a8:
2b:9a:0f:48:9b:0a:f3:30:ee:43:dd:a1:5e:99:f0:
fb:97:0b:d4:c5:5c:af:32:57:3c:73:5c:6b:dd:14:
53:8d:86:66:35:0f:dc:96:77:6c:7f:bc:02:86:45:
6e:12:17:79:97:1a:49:5a:aa:52:b8:22:55:43:96:
72:2e:1d:3e:d7:50:dd:59:44:5f:eb:e8:36:6c:58:
dd:ef:dd:ce:e4:7d:85:ba:38:19:54:9f:37:65:b2:
f8:1c:e7:ba:d2:39:4a:a8:09:ff:4d:30:3f:61:b8:
37:98:01:c7:12:e6:0f:b3:34:f7:e5:77:b1:19:f0:
8a:18:e7:c5:45:e9:4b:44:29:bb:0c:f6:b5:3f:e0:
0c:69:1d:28:b5:58:96:fd:97:38:81:0c:5f:63:78:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:23:6E:66:E5:EF:F6:6F:44:6C:A9:F4:5F:93:DF:A2:73:11:84:3E
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6d:ac:7c:d0:d3:6e:cb:9c:4f:08:83:8f:ad:a0:02:63:a2:
bb:05:84:78:71:09:6d:f4:e7:ea:dd:c1:2f:98:91:20:56:5e:
f6:82:81:a4:a9:e6:eb:c1:88:83:14:b5:56:b9:59:03:47:f4:
73:12:db:1a:08:ec:cd:c3:22:63:ff:25:0b:84:4c:0d:85:b0:
68:18:cc:68:d2:20:21:5d:fa:13:94:3b:4b:71:db:c6:98:6e:
ee:e1:54:3c:43:40:17:40:eb:fc:2a:bb:11:cc:8c:9c:f0:55:
90:eb:dd:60:78:e1:0f:d5:65:aa:9a:09:3e:32:a6:66:97:11:
06:75:95:e3:75:f3:fc:64:f0:55:83:d7:e3:f5:3c:f1:ea:64:
e3:ab:7f:4a:49:30:cf:c0:9c:f0:f5:72:40:03:66:3f:66:a6:
71:34:50:93:31:7f:e2:be:ba:1e:d9:ae:be:72:5a:2a:77:09:
f0:fd:c5:ab:e9:77:20:1a:52:eb:29:8d:33:e2:fd:88:86:88:
85:3c:5f:1d:12:41:91:99:75:01:81:6e:28:7c:a1:da:ce:48:
a4:50:a3:43:24:6e:3c:e5:4d:1d:33:d5:fc:e5:7a:94:0a:29:
0e:ab:50:4b:ba:3a:cd:72:ed:e1:f6:4f:28:ae:41:bc:35:c6:
25:f8:50:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:14 2026 by rpki-client