This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File: 0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier: KsBIYROLRvQNHPWSVr6fZl7VunAmcXUitKEq+YOdA2M=
Subject key identifier: 76:92:DB:B4:8E:09:CD:5C:E5:76:AA:7B:9D:E6:0D:7B:C3:35:94:8F
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial: 019BF8E3E311BA6C7616FA7B664E6478C3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number: 09D3
Signing time: Mon 26 Jan 2026 06:00:42 +0000
Manifest this update: Mon 26 Jan 2026 06:00:42 +0000
Manifest next update: Tue 27 Jan 2026 06:00:42 +0000
Files and hashes: 1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: Mo2F02XKaKlLQpxEgN8LxH+B6rHABsdKMq4LKUCo/6Y=)
2: DqXib1Ly2xFoTm2bjcxnicthk1w.roa (hash: g/TBWWlwOSVO9LY7Rp7QlLHadW83dAk0kFgZL+CVZlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:e3:e3:11:ba:6c:76:16:fa:7b:66:4e:64:78:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Validity
Not Before: Jan 26 06:00:42 2026 GMT
Not After : Jan 27 06:00:42 2026 GMT
Subject: CN=7692dbb48e09cd5ce576aa7b9de60d7bc335948f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:a9:b2:eb:7c:4b:b0:e3:96:58:1a:58:ee:
d6:ed:45:b4:ad:99:bb:4b:6e:8b:4e:c6:04:74:b2:
0d:00:61:c0:1f:8f:25:57:8e:86:7b:47:a3:b7:2f:
cb:67:05:68:a4:c6:68:82:77:aa:6a:e1:14:bc:ac:
f7:b1:33:48:38:f8:74:36:98:f7:09:6a:c9:b7:e6:
41:97:16:92:5e:0f:c2:31:30:ad:5d:cf:3c:2c:d8:
36:8a:11:9f:06:16:0a:85:e5:07:1e:68:78:c8:7d:
67:52:9b:2b:53:5e:6e:f5:9c:2b:cb:bf:8b:ad:6a:
c8:37:fa:c9:cc:fa:19:26:23:b8:27:da:96:1b:52:
aa:83:97:df:07:d3:00:ab:bc:84:15:73:68:a3:cf:
5d:eb:76:c8:30:5a:cb:03:33:d5:fa:c2:47:3d:cc:
64:9d:55:66:99:b5:0f:5f:e3:bd:79:b5:b6:c2:49:
4d:ee:fc:f5:fa:f9:98:47:ac:04:37:3c:61:32:df:
d0:af:f5:26:84:d2:2a:33:21:1d:3a:f4:50:d0:1e:
fc:9a:1e:33:dd:41:ed:28:1a:e1:9d:d4:5d:8a:4f:
77:60:51:3c:e5:ed:cb:a3:f3:4c:1a:8c:62:b6:57:
e9:01:5c:7e:5e:0f:cd:36:42:b3:0b:b6:8f:c8:7e:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:92:DB:B4:8E:09:CD:5C:E5:76:AA:7B:9D:E6:0D:7B:C3:35:94:8F
X509v3 Authority Key Identifier:
keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0d:f2:2b:fa:0d:95:74:21:03:83:a0:01:4d:3a:7a:99:ff:
d9:30:de:ca:ec:9b:18:6d:53:0c:f0:a2:52:66:df:30:a8:33:
a9:a9:25:f6:7e:dc:f6:4c:33:71:d5:d8:24:42:f9:48:c4:7d:
cf:23:96:95:51:45:36:e7:0f:fa:be:87:dc:d4:2a:97:34:64:
c4:bb:11:c9:11:7b:19:cb:a4:87:49:fd:54:76:7a:e7:85:16:
6d:42:14:6e:af:38:dc:5e:0a:02:cb:1e:6a:02:23:f3:79:6d:
cd:29:46:04:d3:3f:27:5d:f6:06:9a:30:c4:f4:51:38:8a:7e:
38:e6:65:fc:43:c8:7b:81:9e:8a:74:d4:71:4a:15:b5:79:d2:
65:d8:5b:fc:d6:5a:29:15:ab:3a:1e:df:76:a1:2a:89:2c:7c:
2b:39:b1:a1:00:08:e3:c9:57:3c:2d:0f:3e:00:27:cc:95:38:
08:03:b3:03:a5:f6:79:96:11:9c:52:33:c5:39:3b:56:aa:c8:
8b:c4:f0:bb:83:59:73:44:2a:e0:41:cc:0c:f4:ca:03:a1:98:
fd:92:7b:13:a2:c3:ca:33:6c:7e:81:8c:8d:ca:23:1b:3c:a8:
64:d6:33:4e:4f:e3:5d:a9:c9:ea:3e:5f:0b:e3:a5:01:f7:ce:
c3:58:56:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:48:07 2026 by rpki-client