This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: ACdkfnH05C9dJcJA7y8WLvu9/GWAILZvXrrMazs9o6Y=
Subject key identifier: 0F:81:9E:87:66:9F:F2:5C:20:EF:26:19:6B:CD:CF:64:5E:C3:39:25
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 019C4358C419B1A57FBD7246B6B41B221BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 1826
Signing time: Mon 09 Feb 2026 17:00:16 +0000
Manifest this update: Mon 09 Feb 2026 17:00:16 +0000
Manifest next update: Tue 10 Feb 2026 17:00:16 +0000
Files and hashes: 1: o40VleOLDva4l-Hlse3BxkX262M.roa (hash: vt1iL3MNmGtBJoVTbi5X0cqEnKhYSdktMc3RDciLR8w=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: MGx9MPCbCr6zzW5lUKokKEGbYpqn5dk4FXUixHtv25c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:c4:19:b1:a5:7f:bd:72:46:b6:b4:1b:22:1b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Feb 9 17:00:16 2026 GMT
Not After : Feb 10 17:00:16 2026 GMT
Subject: CN=0f819e87669ff25c20ef26196bcdcf645ec33925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:af:93:59:e2:00:53:e6:a0:12:64:0d:df:84:
cd:77:ee:cb:c7:08:6b:48:e3:52:d6:e7:f0:e7:93:
16:5e:be:40:fc:42:90:0b:d7:ab:39:4a:a8:53:87:
a6:75:c4:84:84:2f:38:c2:9e:54:51:ae:25:cf:b4:
38:54:fa:54:01:30:ba:56:31:ff:47:aa:04:9a:ed:
52:6c:8b:79:fe:38:41:ac:8c:6d:c2:66:bb:b2:af:
06:b9:f3:01:ba:14:0d:06:5b:c6:f8:bd:12:dc:5c:
88:90:5b:52:ef:88:61:dc:f6:8c:09:2c:7a:71:fb:
bf:67:ad:d9:5b:ed:00:c6:8c:a9:aa:a1:6a:51:24:
7f:7f:86:48:73:47:06:74:55:79:fd:8e:4a:a2:7d:
a5:c7:7d:8d:f7:10:e4:d0:20:16:5f:6d:c0:8b:d4:
76:21:42:e1:29:40:e9:21:fc:08:71:e7:eb:a4:a2:
17:17:0a:09:01:3a:d2:b4:86:bc:1a:80:6a:9e:03:
fc:d7:f5:2e:58:b4:49:11:e1:64:1a:2e:03:50:57:
91:73:e2:00:08:57:d5:56:48:6c:70:81:74:e4:39:
36:42:23:a8:a6:2c:c9:e6:af:fc:69:37:39:eb:3f:
bf:93:4e:60:ba:fc:ea:ac:06:3d:07:48:50:ec:f8:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:81:9E:87:66:9F:F2:5C:20:EF:26:19:6B:CD:CF:64:5E:C3:39:25
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:da:5a:05:61:e0:de:67:84:75:84:10:b2:3b:39:44:8a:7d:
60:1a:e6:6d:6d:f2:b0:0f:2e:8b:79:58:83:e0:4a:f3:e2:07:
2f:26:48:a2:77:a5:4c:80:24:da:ce:c6:cb:74:2a:cb:c1:c6:
73:12:74:73:d7:fb:16:34:50:11:98:ae:8b:1a:0c:ed:0b:91:
d5:d3:29:e3:60:96:bb:56:a2:cb:c5:41:8a:36:d9:94:14:6c:
e7:29:be:b3:7a:c1:b5:af:32:04:b2:e5:1f:40:08:13:0e:17:
73:03:ef:e9:62:c9:4c:a5:f4:60:41:5d:a9:d9:3a:c2:50:48:
6b:77:d5:e8:2d:93:2d:be:14:9f:90:37:40:c4:63:cf:8c:d9:
db:2a:01:db:e7:bf:f7:19:cb:1d:61:7a:d1:59:a3:f4:66:17:
cb:00:b1:a3:0b:56:46:e9:ee:d3:de:0d:55:45:cb:1c:14:ee:
a1:bc:8c:a3:7a:d5:29:25:0b:fb:22:78:b4:a0:c1:b0:f7:6a:
f5:97:e7:fd:0e:a9:3a:8e:d7:7c:a8:07:d9:3b:bc:65:7c:63:
78:8c:3c:c4:6c:8b:a3:a5:f4:e9:f9:9e:e2:f7:47:0c:74:92:
f1:85:06:47:75:50:3f:d0:93:36:69:f1:27:8d:01:7c:45:b8:
5c:ac:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:37 2026 by rpki-client