This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: Hv1RaywmBC9ko4a5SRDvcXZRXQWn2ENR+NYv+ssQwVY=
Subject key identifier: DC:A8:C4:86:4F:37:FA:21:22:3F:57:7F:F9:0F:51:6D:21:54:C8:09
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 019C446C4CFF4A20E951EF7DE1D17794F63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 0EE3
Signing time: Mon 09 Feb 2026 22:01:13 +0000
Manifest this update: Mon 09 Feb 2026 22:01:13 +0000
Manifest next update: Tue 10 Feb 2026 22:01:13 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: 0zzMfOo/qvT3q2GsHv/S6yFKZ9Q59z1FzpZWzl3DklU=)
2: ECXIzFT9fepBNclb1K3f0soMTMI.roa (hash: kie5Trf/wMm9ar/CMryyHcm/iNefqFWM8mxR0DMVctk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:4c:ff:4a:20:e9:51:ef:7d:e1:d1:77:94:f6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Feb 9 22:01:13 2026 GMT
Not After : Feb 10 22:01:13 2026 GMT
Subject: CN=dca8c4864f37fa21223f577ff90f516d2154c809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:ed:77:68:f3:3e:5b:a0:79:ca:3e:8b:f3:
9f:7b:6f:bb:49:5a:81:b2:3a:4a:ee:a3:07:fa:7d:
3c:cf:40:40:0c:07:cb:67:90:d9:08:67:17:bd:62:
85:a5:39:4a:51:74:30:97:f0:3a:88:2e:e2:6d:65:
da:84:84:b2:6e:f2:cf:2d:93:63:67:8d:4b:d5:f4:
3f:bf:d6:81:fa:a8:ba:33:eb:a6:db:40:fe:4a:d9:
2f:7c:dd:ca:39:11:02:5b:b3:0d:31:00:13:c6:3a:
e0:9d:66:7f:7c:7e:4d:6e:64:47:48:80:2a:a1:25:
99:39:3a:a8:e4:c5:61:07:b1:5a:d1:83:c3:87:ac:
f4:19:6d:52:a8:f7:f7:a8:8c:af:e5:2f:28:3a:60:
01:a4:38:8e:73:e0:fd:a9:87:d2:06:de:3c:4c:61:
70:47:5a:1f:ce:8a:f3:36:45:c4:3c:5f:ba:f3:ab:
a0:fc:de:23:59:c1:9e:b6:c1:69:43:5b:8d:11:fd:
93:e7:f2:5a:ef:5f:a5:74:7e:3b:e1:6f:92:00:e1:
07:ee:af:9b:96:eb:9a:d3:da:d0:e8:21:73:72:95:
ef:1b:a5:73:1a:50:90:66:41:fe:d0:c6:ae:6a:7a:
6d:cb:61:d7:84:40:0f:82:2e:bb:95:7f:3b:2f:fd:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A8:C4:86:4F:37:FA:21:22:3F:57:7F:F9:0F:51:6D:21:54:C8:09
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:17:b5:3e:f4:93:f1:98:6b:6d:4f:61:d9:e4:69:8d:7c:b7:
17:3d:a7:22:41:10:25:59:ee:24:23:8d:1a:60:59:65:9f:36:
f1:07:e3:94:a4:43:60:09:ff:d4:2b:de:da:67:17:04:06:c9:
07:eb:96:b9:ed:66:4f:f0:cc:37:ec:03:07:fa:29:ca:50:20:
ca:b1:f0:38:a7:b8:41:50:f9:c8:71:b0:8a:cb:5f:54:c1:d2:
d9:70:06:4e:1b:7d:2d:07:15:db:f4:40:cd:85:4b:2f:64:03:
de:ea:67:ca:88:09:03:87:13:dc:59:38:63:0f:db:f1:02:26:
85:48:bf:2d:71:6c:09:76:cb:9d:90:d9:89:74:dd:c9:58:33:
44:d2:4a:b3:01:08:8e:13:0c:40:ce:1b:04:87:5a:74:92:5a:
d8:9d:67:8c:70:fd:c8:00:b1:a7:c5:2c:fe:7b:37:f0:f3:8f:
c3:ec:c6:fc:9c:9a:b3:f6:fb:6a:a7:6e:bc:6d:43:22:51:a5:
80:2a:a6:7f:84:4b:b3:4c:18:4d:35:f9:2a:5e:35:c0:be:11:
6e:4e:d4:8b:d6:63:cf:2f:51:34:f6:d5:00:81:84:36:98:3c:
09:f9:44:93:64:a0:46:78:ff:fd:35:2c:49:e2:d6:85:06:75:
18:7e:d8:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEbEz/SiDpUe994dF3lPY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTQ3MmU1MjA0N2I1Zjc3NTNlZjE1MjZkZGEzOGVkNDI4
YmZlNDcwHhcNMjYwMjA5MjIwMTEzWhcNMjYwMjEwMjIwMTEzWjAzMTEwLwYDVQQD
EyhkY2E4YzQ4NjRmMzdmYTIxMjIzZjU3N2ZmOTBmNTE2ZDIxNTRjODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnPtd2jzPlugeco+i/Ofe2+7SVqB
sjpK7qMH+n08z0BADAfLZ5DZCGcXvWKFpTlKUXQwl/A6iC7ibWXahISybvLPLZNj
Z41L1fQ/v9aB+qi6M+um20D+StkvfN3KORECW7MNMQATxjrgnWZ/fH5NbmRHSIAq
oSWZOTqo5MVhB7Fa0YPDh6z0GW1SqPf3qIyv5S8oOmABpDiOc+D9qYfSBt48TGFw
R1ofzorzNkXEPF+686ug/N4jWcGetsFpQ1uNEf2T5/Ja71+ldH474W+SAOEH7q+b
luua09rQ6CFzcpXvG6VzGlCQZkH+0Mauanpty2HXhEAPgi67lX87L/0FLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyoxIZPN/ohIj9Xf/kPUW0hVMgJMB8GA1UdIwQY
MBaAFAkUcuUgR7X3dT7xUm3aOO1Ci/5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mYzM1OTEtM2Q3OC00ZDliLTk0ZWEt
YTY1YjlmNjA3ZTNlLzEvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mYzM1OTEtM2Q3OC00ZDliLTk0ZWEtYTY1YjlmNjA3ZTNl
LzEvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxhe1PvST
8ZhrbU9h2eRpjXy3Fz2nIkEQJVnuJCONGmBZZZ828QfjlKRDYAn/1Cve2mcXBAbJ
B+uWue1mT/DMN+wDB/opylAgyrHwOKe4QVD5yHGwistfVMHS2XAGTht9LQcV2/RA
zYVLL2QD3upnyogJA4cT3Fk4Yw/b8QImhUi/LXFsCXbLnZDZiXTdyVgzRNJKswEI
jhMMQM4bBIdadJJa2J1njHD9yACxp8Us/ns38POPw+zG/Jyas/b7aqduvG1DIlGl
gCqmf4RLs0wYTTX5Kl41wL4Rbk7Ui9Zjzy9RNPbVAIGENpg8CflEk2SgRnj//TUs
SeLWhQZ1GH7YZg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:34 2026 by rpki-client