This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json)
Hash identifier: dYc7h0NQ82RTcLzeDNKGoEDb2u8+LH+KC3B3irtmjXQ=
Subject key identifier: A7:BA:E8:01:A2:0E:8F:CD:B0:E1:3B:DB:19:C3:E0:E3:5B:2D:9B:35
Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928
Certificate serial: 1376B916F66EC12E303B690473AB698BABA73615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
Manifest number: F5
Signing time: Mon 09 Feb 2026 09:45:28 +0000
Manifest this update: Mon 09 Feb 2026 09:40:28 +0000
Manifest next update: Tue 10 Feb 2026 11:10:28 +0000
Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: ylR0DOZ9r1hoSawvlj+RTpxqiZGjeuWWdxjABrjIc9g=)
2: AS214955.asa (hash: 9BTc33tzJ3o9p7u2GITVOlVxirs0irbQ8mfVzNdUJgc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:76:b9:16:f6:6e:c1:2e:30:3b:69:04:73:ab:69:8b:ab:a7:36:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce964f98379f0320a7191e6d6788800535885928
Validity
Not Before: Feb 9 09:40:28 2026 GMT
Not After : Feb 10 11:10:28 2026 GMT
Subject: CN=A7BAE801A20E8FCDB0E13BDB19C3E0E35B2D9B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f5:e9:f8:15:05:bc:a5:3a:22:73:4b:e0:6f:
8e:d8:3d:15:81:56:7e:12:27:64:71:56:b1:83:1f:
59:4f:21:52:b0:39:50:9c:71:28:4a:d4:2e:85:03:
6d:67:20:c5:16:d5:0e:ae:c4:6b:b1:66:61:a0:1c:
c8:66:e6:eb:96:61:4d:04:cf:80:3b:0d:2b:ac:03:
f6:bd:00:40:fa:b3:89:12:ca:47:a9:04:80:7b:04:
d3:71:ac:ee:94:35:ea:cb:fc:45:eb:e8:b8:3d:25:
29:a8:41:3b:e8:b2:c7:e2:91:c6:b5:ef:8c:ff:42:
aa:79:ff:3c:37:50:88:4e:a4:e3:a5:98:e8:c5:b4:
6e:22:7e:12:ba:f0:8c:ba:71:3c:41:da:c5:43:05:
fd:4e:23:f5:9d:52:eb:5e:3c:0b:a1:b2:6a:c3:af:
62:60:19:95:f2:02:87:9b:9c:8f:fc:13:10:77:d5:
ab:63:5e:a7:55:f1:b4:2b:41:43:42:74:dc:49:3b:
88:0f:61:56:65:b3:ad:05:12:5e:14:28:ce:d6:9b:
cc:4c:e6:9d:63:c4:e3:9b:2d:d2:13:1a:57:85:54:
8c:45:da:5c:51:71:c5:a9:9a:ac:b1:46:3f:c0:ed:
55:e5:46:6d:1a:00:78:01:39:0d:e7:6a:f8:bd:f8:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BA:E8:01:A2:0E:8F:CD:B0:E1:3B:DB:19:C3:E0:E3:5B:2D:9B:35
X509v3 Authority Key Identifier:
keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:47:2b:08:e1:06:46:75:53:7d:77:e0:d5:41:33:d7:d8:74:
53:52:a5:8e:1e:3f:7f:41:37:2c:b1:47:35:4e:b8:ff:76:d3:
41:ac:83:d4:22:ca:b9:a6:be:65:4d:1e:9b:b8:cb:5b:fe:46:
f9:5c:43:64:22:f3:04:a6:ab:ba:92:fb:a4:2c:bf:44:c6:c3:
f6:21:32:d2:9b:80:5b:d8:0a:e3:7f:3d:f2:05:d5:88:90:96:
3a:69:95:e5:22:88:0b:41:6d:13:21:b6:4f:be:62:83:af:ab:
61:93:b4:30:9e:b8:2f:55:8f:6e:07:bc:23:0d:76:30:fc:de:
7f:e0:33:f4:43:06:16:49:38:65:b0:34:e5:a8:c3:f3:1b:97:
6f:6b:7b:3f:c2:a6:a7:4d:1b:43:49:c1:bf:6d:15:74:0d:55:
04:78:49:bf:c6:95:3a:c6:73:67:c7:12:49:46:1a:33:0c:94:
13:0e:a7:27:ca:9d:7d:45:f0:02:06:97:82:92:e8:0a:44:b3:
82:70:2c:99:18:d7:4a:0e:3c:3c:76:22:fe:94:41:c1:46:41:
78:ce:66:0e:06:54:36:a9:2d:47:a4:6e:59:69:dd:d4:92:1b:
06:94:4c:5c:81:e3:b4:64:b0:8d:8d:b1:59:47:57:e6:8a:8e:
4d:0a:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:52 2026 by rpki-client