This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier: Sg4iMubYvv0VSRZDC/bn7ovBrw7SCVhSTQZvrBCmUpo=
Subject key identifier: A4:59:42:BE:7B:24:B9:75:CC:89:53:13:31:4E:45:B3:C8:B5:D8:8F
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial: 66815FEFF75B05DAFC46972131BDF1C16CC655D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number: 0370
Signing time: Mon 09 Feb 2026 03:36:16 +0000
Manifest this update: Mon 09 Feb 2026 03:31:16 +0000
Manifest next update: Tue 10 Feb 2026 05:59:16 +0000
Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: SsXe5EdL6y71TqrOtOEQ+HB8pecjel2jEXGTdL2rRtE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 05:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:81:5f:ef:f7:5b:05:da:fc:46:97:21:31:bd:f1:c1:6c:c6:55:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
Validity
Not Before: Feb 9 03:31:16 2026 GMT
Not After : Feb 10 05:59:16 2026 GMT
Subject: CN=A45942BE7B24B975CC895313314E45B3C8B5D88F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:b5:b4:b2:bb:dd:11:67:22:35:35:8d:45:
51:56:96:89:f3:de:16:54:c5:da:aa:f4:b8:f7:98:
85:90:ee:92:c9:40:aa:22:b3:07:00:de:2b:49:63:
cb:a4:69:ef:13:0d:08:5f:47:c8:c3:dc:51:06:3e:
39:32:c5:c0:8c:67:d8:19:b7:f2:04:ac:39:a3:77:
f6:ec:45:6f:be:73:f6:d2:fa:29:7e:db:67:fc:55:
72:b2:37:85:c0:6c:84:56:ef:c3:69:c6:ea:4f:4c:
99:7f:3a:19:f7:fc:f4:e9:4a:dc:fe:50:12:02:57:
9d:f1:ba:f7:e8:de:1f:fc:4e:70:c9:cb:43:5d:3b:
12:76:08:82:75:9d:12:8a:bf:0b:cb:a5:71:76:a3:
36:7b:af:c9:b7:a8:10:71:34:9e:ff:8e:d1:cb:f9:
19:89:81:d4:14:38:5c:ab:5e:16:2c:dc:84:2a:b1:
8c:d6:93:ff:a3:02:36:2e:a3:d8:52:6b:3d:a9:82:
ab:03:d0:e3:14:3b:6a:d5:67:f9:09:60:84:04:16:
98:ad:50:83:2a:d9:88:dc:4a:29:fc:95:79:34:ab:
e8:b8:45:47:a1:f2:3c:d7:c7:93:aa:3b:dd:ea:03:
b0:68:07:03:87:99:72:24:6a:18:a4:7d:e6:6a:c6:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:59:42:BE:7B:24:B9:75:CC:89:53:13:31:4E:45:B3:C8:B5:D8:8F
X509v3 Authority Key Identifier:
keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:68:9e:79:0f:ff:c4:8b:16:d6:aa:67:e1:23:c4:c0:37:8a:
dd:c7:5e:43:01:e1:e8:aa:c2:96:02:62:17:75:7a:dd:d7:9c:
74:9e:3a:7d:bc:ff:24:6e:0d:93:6c:0e:7e:08:45:4d:e4:cb:
ab:0e:fb:03:f0:11:ec:6f:0c:ca:37:c4:da:c3:31:e8:96:61:
c6:98:aa:4d:45:9c:3c:21:e3:d7:1d:cd:1c:80:6a:74:cf:f2:
b5:4b:2d:85:27:67:fb:85:00:5e:00:b3:b8:31:78:de:5b:a9:
0e:3a:36:4e:8e:f7:21:58:ce:a2:2c:bc:23:94:f1:03:49:35:
2e:c0:bd:65:a3:1f:7e:b9:be:2d:65:b6:83:f6:59:5c:d8:55:
a0:bf:ca:36:9e:f8:bf:fa:cd:bf:a1:9d:03:45:b3:57:81:4e:
f5:b0:57:61:8b:e0:53:52:5f:d2:d2:6c:a2:9b:41:53:31:fa:
6d:9c:2a:1f:9e:73:48:2d:53:e6:27:f0:58:c3:22:07:69:16:
78:8e:97:9a:f4:f5:a9:29:2d:7e:d6:2f:1a:a0:7d:8d:56:2c:
00:ff:9a:d6:66:96:a3:b6:0d:32:c6:3d:2a:6a:e4:da:29:5e:
d9:79:fa:a2:82:50:ae:0e:a1:27:ed:86:9f:46:61:dc:cc:b7:
6f:3e:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:22 2026 by rpki-client