This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: OrneXstdok5L4Kl3UWY+ixcnIQrFgw+LqhEmYv2Nh/E=
Subject key identifier: 5B:3F:14:C1:AB:E2:84:14:E7:E7:64:E8:EB:A1:69:F4:E8:F7:F2:8C
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 019C41A266D0853CDBB6304259C3541B9C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 151E
Signing time: Mon 09 Feb 2026 09:01:28 +0000
Manifest this update: Mon 09 Feb 2026 09:01:28 +0000
Manifest next update: Tue 10 Feb 2026 09:01:28 +0000
Files and hashes: 1: 1-oqQDuXU3K5CZv2Qy4Ieua3t1Jo.roa (hash: R7GPYpVp1dyvlb0NN1rHpBA6geWOtPajE+4IU6AxFW8=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: BPQvvHgnl3qQC23JLCvWPQyWPYKH0a2qWKqThrFkzbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:66:d0:85:3c:db:b6:30:42:59:c3:54:1b:9c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Feb 9 09:01:28 2026 GMT
Not After : Feb 10 09:01:28 2026 GMT
Subject: CN=5b3f14c1abe28414e7e764e8eba169f4e8f7f28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:f8:82:4c:2d:3d:3d:4a:6e:6b:55:f6:b5:
ef:38:db:d9:e1:53:05:c5:5d:61:0b:78:bc:2e:0a:
9e:c4:8d:48:4e:d9:5d:e0:3c:63:1d:0d:b1:79:a8:
60:5d:75:e0:b7:9f:14:7f:3e:37:2c:5e:ee:67:c0:
bc:a1:db:ee:dc:21:7a:0c:e2:45:7a:cb:54:19:4b:
9a:d7:24:c7:45:c1:b7:1e:0c:88:d0:57:96:13:d8:
43:d8:fa:e4:8d:a6:9b:1c:44:dc:74:d9:72:2c:b9:
28:56:84:7d:7b:d3:18:dd:08:2e:fc:af:cf:5c:9e:
e5:96:a2:b7:70:46:8e:4d:dd:c3:ce:2b:6b:c4:2e:
11:aa:70:89:a5:3d:d1:28:52:9b:48:e1:80:b6:f1:
4d:ab:27:7c:eb:00:97:69:d1:b8:ed:76:98:d9:06:
29:23:38:8b:51:0a:50:5c:3f:a8:eb:a6:32:5b:d9:
39:98:6c:08:a4:37:fb:74:85:75:8d:5a:c0:e6:ad:
5c:24:54:51:ad:42:ff:56:e5:8c:dd:90:66:ac:f1:
44:84:74:f1:d9:0a:1b:16:62:57:e4:75:cd:99:25:
a7:40:c0:7c:2b:b0:f9:ca:4d:a7:87:49:46:ec:b1:
e0:07:85:b4:3c:2c:54:d5:78:34:a7:f1:46:d5:c2:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3F:14:C1:AB:E2:84:14:E7:E7:64:E8:EB:A1:69:F4:E8:F7:F2:8C
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5c:99:6d:97:4c:98:2a:91:4e:6c:93:36:90:c0:fa:86:e9:
b3:bf:82:af:40:07:4a:4c:95:8b:7d:4f:85:a7:38:30:15:4a:
7d:f5:74:5c:83:94:bb:09:15:3f:6e:4c:c7:7f:70:a9:5e:de:
13:52:e7:66:c2:df:db:c0:6f:6b:76:14:fc:b0:4b:9c:7d:ae:
ef:6c:78:18:25:f9:e0:bf:47:2e:12:7d:ce:d6:20:a9:8c:5d:
69:aa:c0:49:26:0e:ba:89:9d:2a:bc:b2:dc:65:3f:e4:ff:25:
c9:ca:03:01:13:52:e5:1f:04:e7:17:ab:85:a1:00:61:1b:fe:
1b:5a:ac:66:b3:84:04:dc:9c:a4:7b:e5:a3:73:ae:7d:02:e3:
22:69:e9:4e:43:74:8e:6a:11:7e:96:21:47:6b:2d:12:77:15:
a1:c8:e8:a9:43:6e:6a:ca:6d:18:85:06:58:11:85:23:5e:3b:
03:d5:c3:c1:93:9b:4e:d7:a8:df:6e:1d:95:9b:f5:df:3d:92:
8b:40:5e:7e:ce:7d:dc:e1:91:30:2a:ba:a9:67:49:f0:e3:af:
21:2a:e7:e1:4c:ec:7f:65:cc:11:10:9f:6d:c0:97:0e:4e:de:
11:84:94:a8:bf:48:4d:bc:86:a1:78:7c:52:8b:df:eb:18:0a:
8b:dc:45:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:19 2026 by rpki-client