This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: oCfqy3NGfHga2jJBBgpud1kEauPo/IFPi9RYKhG6J58=
Subject key identifier: 0F:D5:59:01:22:CE:41:02:13:9E:03:1C:59:EA:34:0E:46:4C:D3:53
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 019C4358E11D2D5731D332B51A217F076191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1819
Signing time: Mon 09 Feb 2026 17:00:24 +0000
Manifest this update: Mon 09 Feb 2026 17:00:24 +0000
Manifest next update: Tue 10 Feb 2026 17:00:24 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: +xxk7e66iPfPJijIBtbDHwwqyw+cOzmBXYwa2LloUPY=)
2: m3wtHY_DfaP85oa2Wf6djmVEzGg.roa (hash: 1ugTWlNMcuuuK8xg0xO61ph76zfYjazznCviXFTp9ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:e1:1d:2d:57:31:d3:32:b5:1a:21:7f:07:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Feb 9 17:00:24 2026 GMT
Not After : Feb 10 17:00:24 2026 GMT
Subject: CN=0fd5590122ce4102139e031c59ea340e464cd353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:08:a6:bd:60:70:cb:a1:39:e6:d1:cd:e2:
43:65:36:d5:c5:f0:01:a7:92:68:e3:ec:41:91:f7:
37:7a:2a:30:a6:33:ad:37:79:d3:af:af:1a:8c:dc:
72:b9:2e:dd:96:40:07:1e:9d:3b:aa:03:2d:a0:99:
6e:4c:f3:9e:0f:b9:91:c3:89:13:0d:78:11:6b:ed:
03:9d:79:50:19:a1:85:06:31:6a:86:d5:df:77:ef:
cc:a0:e6:ba:9b:24:7d:d0:59:51:63:9c:a8:4b:6c:
34:40:95:d9:14:1a:65:0c:eb:10:40:4e:fa:48:57:
dc:38:9e:56:95:d6:e7:ed:a2:3f:19:00:22:9e:52:
30:38:49:be:e1:81:d3:4d:a4:58:4b:10:89:7f:b1:
44:44:3d:fb:44:38:20:9b:17:09:96:b5:31:c3:7f:
f8:29:4c:7d:13:16:ad:af:82:d8:69:42:08:d1:03:
b6:5d:31:a2:e0:9f:79:77:e1:69:0c:39:28:6b:7d:
55:89:1a:c6:c9:f3:91:37:bd:59:a4:de:af:1c:51:
cd:83:90:93:d3:e4:db:d1:15:01:77:ee:5b:82:ea:
d4:15:43:11:d5:f6:a2:9c:a3:4b:fd:84:13:0d:b7:
13:ae:24:dc:5e:a6:1f:e7:e6:75:d5:cc:78:56:e9:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D5:59:01:22:CE:41:02:13:9E:03:1C:59:EA:34:0E:46:4C:D3:53
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:11:fc:f2:dc:70:26:d7:29:fa:2f:78:bf:83:a2:56:bb:03:
34:e5:da:6e:95:e2:be:9d:5b:67:c8:27:e7:79:c2:8b:a5:4e:
18:a0:95:7e:17:a6:41:6e:3e:cb:0c:24:b4:c2:4d:5a:45:93:
6b:80:ad:94:5d:4d:b1:d7:44:1b:e9:bf:73:79:9b:c7:4d:96:
fa:0b:da:3b:c1:2c:78:ca:19:6b:cd:e3:69:21:37:c7:89:74:
46:65:34:27:57:5e:8e:59:6c:6f:73:0a:6e:2c:9e:82:d3:9e:
ed:cd:36:f3:b8:38:10:84:bf:22:d8:90:4d:2f:fb:3b:d7:41:
81:17:04:90:dc:c3:17:d8:02:f6:b3:52:ca:ef:df:80:ba:66:
53:d9:a8:16:92:2a:88:c6:45:dd:a1:7c:09:95:a5:be:2d:67:
b4:53:1d:c4:73:87:5d:1a:e5:dc:5f:55:5a:37:ac:4b:0e:2a:
2d:a5:0d:fc:5c:ab:9f:51:8a:e1:42:44:6b:58:ec:c4:23:29:
35:81:d5:a7:cf:a0:86:94:5f:f0:e9:30:07:61:e9:91:62:0b:
7e:88:02:4e:64:fa:db:87:32:cd:eb:8e:52:a2:14:8c:9d:0b:
5d:c2:e0:96:00:94:5d:b3:8b:29:64:e7:63:33:a5:7b:83:bc:
8d:77:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:17 2026 by rpki-client