This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File: 02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier: ine73Pngnt4PbxSpwqURphWIpSSm8ufapi3GIsztdM8=
Subject key identifier: 06:CA:D5:7A:DE:F8:1F:36:0F:AA:B8:2B:0D:40:79:F1:AE:29:B5:DF
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 019BF4D05908848EEF429B1B3602DE127DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number: 0BA8
Signing time: Sun 25 Jan 2026 11:00:53 +0000
Manifest this update: Sun 25 Jan 2026 11:00:53 +0000
Manifest next update: Mon 26 Jan 2026 11:00:53 +0000
Files and hashes: 1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: viDh+grXbd7ezGF1zqvE7R9c3xy5Wo2Ok0o3q/dDYgk=)
2: EMHyn8USQYYAwip53OFX3GcU8Ig.roa (hash: GKc0X/C0dqDFZ9/iYyqKAh6YmFA9MsPi0sI8GP0tfoQ=)
3: OUo2-_z7ZwJP4yvmGUs1ZUP-ALU.roa (hash: kUKNwP9z4WpXOZS3n+mI9u2cgdXowzL+jJ2s8nNJ/ng=)
4: _mDWBpNalZX-rGj5Winjf39L6Zw.roa (hash: pVvGevMN46/pQnsg9nZSouyWirGGwM8SkSaHOD7+jpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:d0:59:08:84:8e:ef:42:9b:1b:36:02:de:12:7d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Jan 25 11:00:53 2026 GMT
Not After : Jan 26 11:00:53 2026 GMT
Subject: CN=06cad57adef81f360faab82b0d4079f1ae29b5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:ed:5f:c3:6a:49:06:a8:9b:35:1c:67:51:
c6:75:f8:42:40:7c:09:18:9f:a3:5d:06:70:4e:d5:
98:c9:ce:87:68:db:fe:35:13:9d:ec:27:f7:44:f6:
b0:79:99:94:0a:8c:7d:b2:c3:e6:02:29:6e:d7:48:
f5:2f:fb:69:fa:73:ba:96:28:a2:a0:96:fd:35:50:
26:bf:d5:b1:c1:2a:66:99:0f:6e:c1:ca:62:6a:d2:
1d:25:5e:ae:5d:f1:30:50:ce:8c:47:50:85:70:39:
55:80:0c:cd:f5:f3:38:d6:d2:95:df:1b:fa:74:a4:
12:d3:ab:f2:4e:56:9a:f8:8c:5c:a9:65:cc:8e:56:
5f:9e:76:4c:26:85:1e:69:22:31:a8:a1:21:d8:f1:
05:d5:6b:23:ec:a7:11:9f:b2:56:7a:be:19:85:d1:
80:17:aa:e6:4c:0e:26:41:90:03:92:65:d0:73:e0:
ab:32:aa:03:57:2d:5a:ab:ab:40:33:b6:ca:d6:7c:
ff:fd:e4:f9:24:4d:b5:b3:fb:84:c2:63:4b:65:ed:
5e:e8:ee:fc:bd:0f:c9:ab:4c:5a:fb:62:c2:91:45:
a8:a1:02:d8:4b:e6:2b:2a:de:1d:23:5c:c4:19:d9:
63:25:10:ef:af:3c:b0:59:e8:53:8c:c5:d2:54:38:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CA:D5:7A:DE:F8:1F:36:0F:AA:B8:2B:0D:40:79:F1:AE:29:B5:DF
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:26:84:cd:68:74:bc:08:c3:c4:16:d3:ec:13:ef:43:7a:d8:
fa:2f:97:69:52:51:68:e7:71:0a:3f:7a:a5:53:8a:66:82:6f:
7a:e9:27:9d:2c:dc:d6:fa:f5:8e:42:63:fb:3d:15:8b:5a:dc:
92:21:85:88:78:94:45:3b:c3:e1:9f:ec:26:0b:81:ac:35:12:
9e:e8:13:08:15:61:ae:2a:44:de:76:b4:ae:53:61:0a:c5:2f:
a0:fe:a7:88:ad:7c:85:1c:32:0f:17:6e:b0:d6:43:aa:6e:8a:
c9:5f:91:7f:9f:ba:fa:6c:68:68:7e:7c:0f:09:89:03:03:26:
36:b6:72:f8:05:0c:8d:d4:a7:e4:a4:d8:de:6f:77:b5:69:a3:
0b:ca:5a:05:8f:49:b2:aa:e2:86:ed:33:b0:f6:55:67:58:a7:
0f:3f:a5:d2:9b:15:bc:53:44:a2:7f:b0:cc:c0:02:58:f7:a2:
b1:4d:7b:74:c6:6e:fc:ec:43:1d:8c:7d:57:7b:49:14:86:d9:
92:77:f8:31:4c:8c:cc:38:fe:44:52:4c:98:b3:e5:b3:da:2b:
ea:62:c0:b7:93:dc:c4:cb:34:ec:f5:af:b8:a3:ba:41:e9:70:
c6:22:00:26:bc:83:29:ce:b0:73:29:25:84:03:9a:8f:d5:1a:
c6:a5:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:15:12 2026 by rpki-client