This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: ftfAuZ/JBF+NmNlyVq+HHhgXLDKRQSUe+NHWcabJCQo=
Subject key identifier: BA:96:96:0D:03:95:6A:25:EE:B7:1D:1E:A5:83:5D:26:6A:D5:93:4E
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019C1C83023DA6A847F5D357EC0A514C7560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 11FA
Signing time: Mon 02 Feb 2026 04:01:13 +0000
Manifest this update: Mon 02 Feb 2026 04:01:13 +0000
Manifest next update: Tue 03 Feb 2026 04:01:13 +0000
Files and hashes: 1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: jMawPhBERArWRjoda82oAM0SFZNlPII7m3DN3Qbt9yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:83:02:3d:a6:a8:47:f5:d3:57:ec:0a:51:4c:75:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Feb 2 04:01:13 2026 GMT
Not After : Feb 3 04:01:13 2026 GMT
Subject: CN=ba96960d03956a25eeb71d1ea5835d266ad5934e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:9b:bf:2c:67:29:0e:6d:a5:e3:2e:6f:fe:
ac:ea:26:2a:c7:c8:13:62:49:33:fa:f9:36:a0:bb:
45:59:4b:d9:dd:e9:c8:5b:73:38:e2:6a:98:0d:24:
7c:a6:a3:70:9c:b3:c6:d5:f3:1b:30:89:e2:bc:1a:
d5:b9:54:40:3e:ee:92:ea:b4:c6:a3:f2:f1:6c:b8:
63:51:7c:88:5d:51:14:82:a8:c0:99:31:57:14:aa:
73:0f:c3:af:58:72:86:bd:c1:1f:82:80:07:29:58:
13:30:c0:2d:62:bc:8e:83:ce:1d:c6:f0:fa:ee:05:
c6:73:16:c2:cd:8f:27:f0:41:b2:1e:54:fb:e2:b6:
7d:f1:c7:db:04:99:4d:92:24:8e:3b:82:99:66:fa:
9c:e3:43:11:50:ee:1a:4d:83:81:01:e8:e5:e0:7e:
81:25:9b:5d:71:72:60:f7:12:ec:b0:8b:de:2f:81:
36:16:e4:35:8b:37:c7:40:2e:c7:95:08:85:21:66:
36:f3:ff:09:51:b3:2f:28:36:3b:9b:4a:84:d3:d8:
c1:45:ef:dc:9a:af:8e:11:31:89:3a:4b:3c:c3:f1:
18:dd:84:97:03:cb:02:1b:27:2b:bb:20:9e:c2:5e:
2d:d4:b2:c0:40:f2:12:52:bf:b5:fe:aa:e5:fe:43:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:96:96:0D:03:95:6A:25:EE:B7:1D:1E:A5:83:5D:26:6A:D5:93:4E
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:03:1a:95:ce:58:6c:fc:84:05:e9:da:c3:c2:e7:cd:a2:87:
c1:ed:8e:3b:2a:3a:d5:02:d7:64:a5:5e:24:65:04:f5:7a:f9:
1e:0b:d1:bb:09:47:4c:c3:f0:1a:23:6f:ef:a8:2a:02:ae:d0:
99:a5:41:8d:88:36:63:ba:c9:9b:78:e7:f8:28:67:d6:3d:d3:
7e:79:40:90:d8:72:33:66:28:f2:f0:b6:07:a9:3a:03:8e:1c:
6d:61:8b:0c:dd:21:18:1c:4a:e4:c1:44:3d:31:d4:03:dc:70:
39:2d:60:fa:0f:59:40:72:45:17:ef:04:67:1e:fa:61:ed:d4:
54:12:26:5b:c4:57:82:e5:c4:bb:8d:3f:3d:be:4b:1f:dd:2d:
1b:6a:45:90:48:f8:b9:6e:dc:4a:65:b1:d2:92:7d:81:a6:06:
b3:33:ba:c1:84:f3:e6:35:20:ef:d0:3a:a1:fd:a2:0e:18:bd:
8a:b9:f4:4b:c8:f2:01:e3:09:f5:2c:78:64:1e:25:f3:5f:e5:
85:53:bf:98:ad:bd:a4:4c:1c:88:d4:2b:54:f4:41:37:84:14:
6b:0c:5e:b9:3c:3f:86:f7:c4:fe:a4:fc:5b:14:2d:58:41:13:
5c:b0:7a:fa:e5:bd:d2:03:c9:a7:ec:bf:ed:d0:3a:b7:e4:db:
7f:22:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:30:13 2026 by rpki-client