This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: FIHqfHOha1Lbnf/N+wRO8+TUANFbUGnY/MGbLHt3G/Q=
Subject key identifier: A7:D9:F9:2D:7B:45:D5:5D:42:CD:6D:89:85:A1:6D:ED:1E:04:26:69
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 019C420F8E3C7BE3E2353F48E86014F4BBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 11:00:41 +0000
Manifest this update: Mon 09 Feb 2026 11:00:41 +0000
Manifest next update: Tue 10 Feb 2026 11:00:41 +0000
Files and hashes: 1: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: QX2C/+xlZHPI9gp2C6ghJ6ZWOevxRvQa9ynNJmdn6Iw=)
2: L-I_vi73nF4X50y77Nj4pc6tO3Q.roa (hash: JkXJproHbfGeicYSovdpj1lTU8shuNCsjUwqjSmsDCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:8e:3c:7b:e3:e2:35:3f:48:e8:60:14:f4:bb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Feb 9 11:00:41 2026 GMT
Not After : Feb 10 11:00:41 2026 GMT
Subject: CN=a7d9f92d7b45d55d42cd6d8985a16ded1e042669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c0:e6:b0:38:ba:37:f2:d2:bc:bb:a6:d0:18:
f7:38:30:18:03:e8:61:86:42:93:aa:d0:77:64:d9:
cb:de:84:f6:4f:23:05:02:18:79:c3:55:63:0b:74:
5e:73:f7:c9:44:d6:b1:ed:03:64:3e:74:01:98:61:
d3:75:29:d4:1f:a2:41:10:7a:8d:97:03:a2:8e:be:
ba:4d:cd:27:d9:12:42:93:0f:2f:fa:59:a7:9b:a7:
9c:74:73:dc:77:1c:a4:3e:91:13:48:ed:81:61:ad:
d5:4f:94:af:c4:27:88:46:a4:b5:21:e1:2c:01:a9:
33:de:27:8f:a9:23:a0:f3:15:af:a5:3f:39:b6:63:
29:9c:a8:9d:ac:6b:d6:9b:36:1f:67:6d:d8:6d:7a:
cf:db:e7:8c:66:77:18:d6:3f:93:b8:a6:16:33:0d:
89:20:88:93:c2:b6:eb:ef:52:c1:ad:96:d9:57:ff:
b9:43:fc:aa:dd:e5:e4:b2:79:ff:56:ef:44:4d:82:
50:21:f2:bf:80:9c:c4:6f:f1:3d:09:4c:d1:49:b7:
8d:fa:39:5b:80:99:d4:6e:5c:a8:37:68:e4:22:01:
16:06:97:7c:42:e2:df:1a:44:c6:99:c9:ea:3c:45:
9e:22:b0:8f:26:cb:ae:4e:ee:14:9c:02:e9:24:90:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:F9:2D:7B:45:D5:5D:42:CD:6D:89:85:A1:6D:ED:1E:04:26:69
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:65:e6:25:16:77:01:f1:53:f7:8c:04:f9:82:36:2d:f4:de:
05:3d:d3:82:5f:31:d9:26:45:4d:a9:c1:ce:97:0f:b2:fb:a4:
8a:6a:24:51:69:9c:d8:1c:aa:bd:4a:52:d1:ce:2e:58:f7:85:
07:e0:37:81:e4:d1:f9:28:5a:b4:7d:4a:1a:ea:e3:21:05:01:
cd:38:c8:43:5d:32:23:b1:01:4e:d1:e4:6e:36:e6:e0:0e:e0:
74:9e:ff:f6:48:9f:95:0b:a4:83:30:c6:45:26:49:62:68:83:
d2:60:60:55:99:d2:da:9d:9c:e6:3b:cf:b1:1d:5e:b0:f7:5d:
11:06:75:c6:73:23:dc:bf:fa:16:da:3d:0e:98:91:e2:dc:b7:
bd:11:96:59:1b:02:97:4c:f8:de:27:77:c6:f3:3d:38:fa:fd:
8d:9a:2a:a9:35:60:93:5c:94:18:90:1a:df:d5:44:90:d5:07:
43:10:7a:00:11:88:e9:68:3e:ae:63:16:25:a7:14:d6:a0:62:
9a:b1:dc:93:dd:a4:db:8f:6e:7f:e2:e5:e8:3e:58:f0:9f:d4:
0b:a5:ba:ec:ad:e9:62:70:e4:7f:00:16:58:e5:76:a7:99:6f:
f3:3d:77:e8:5b:81:68:2b:4f:ce:3d:52:07:f8:4c:33:3b:d2:
c9:a9:5a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:41 2026 by rpki-client