This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
File: MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft (raw, json)
Hash identifier: LQegmFOS2EdLRsInKXyTPEs4MDsZEtOp9bphB2nWzRY=
Subject key identifier: C9:AA:E2:36:01:15:73:9D:96:31:A9:34:6C:B8:F5:F8:07:10:E3:DD
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 019C427D329047C31D32E1E8BE58371DD5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
Manifest number: 13AE
Signing time: Mon 09 Feb 2026 13:00:27 +0000
Manifest this update: Mon 09 Feb 2026 13:00:27 +0000
Manifest next update: Tue 10 Feb 2026 13:00:27 +0000
Files and hashes: 1: Bk9vyq1LgRpU9QeZwN0V_GD5gHw.roa (hash: yNE44jpnjgZHS9ufgLSJ6WIuzBw3d04Exh56Z7CxQ4s=)
2: KKpHDDFH2cfzrNDJZuhoGv_wS_w.roa (hash: ATx2mcVJOEtuVh1BU96vsI8Si7Mn1Bxh+fLVIbYJBSM=)
3: MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl (hash: 4REpxvU+dpKP3ABEcJUW94o5oi0eZJMkbx0aV2VtvnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:32:90:47:c3:1d:32:e1:e8:be:58:37:1d:d5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Feb 9 13:00:27 2026 GMT
Not After : Feb 10 13:00:27 2026 GMT
Subject: CN=c9aae2360115739d9631a9346cb8f5f80710e3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:2b:b0:ea:39:1d:91:31:bb:4c:78:b4:64:
ac:03:45:08:46:0c:94:0a:13:0b:71:34:50:09:bc:
8b:21:d1:c2:c9:ea:8c:98:07:13:4b:16:35:6b:62:
c1:59:4d:c3:4d:82:ca:46:df:d9:b8:f6:e9:d5:17:
4a:00:7e:c1:ba:4e:11:81:41:c4:5b:93:56:0c:e7:
06:14:16:9b:66:6a:db:26:9d:f0:59:a2:cb:7d:db:
57:da:56:59:5c:b8:67:c6:99:8a:a6:c7:48:69:ad:
55:39:8f:a0:b0:7a:46:e1:54:31:9e:5a:66:52:c6:
33:b7:93:99:11:72:78:d2:0e:07:9b:12:9c:60:92:
81:ae:34:f8:86:20:00:1d:7f:b5:18:f9:ac:cc:10:
0f:98:2f:4f:83:85:09:cc:72:ce:c7:c7:bf:23:df:
52:d6:d1:87:de:5c:52:b4:39:26:ac:b8:36:91:5f:
4a:c0:01:22:69:d9:3f:c0:6b:61:24:9d:00:a2:0d:
15:7b:c0:40:c9:5e:aa:4e:83:4b:89:18:a8:c2:ed:
d7:ad:4f:6f:74:e6:79:a1:e7:88:7e:97:7b:1f:31:
5f:a9:9b:9b:f7:ea:c7:6a:7f:25:73:50:33:6b:7c:
c3:4e:2c:3e:2e:ba:ac:03:83:9d:c3:8a:8d:76:ec:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AA:E2:36:01:15:73:9D:96:31:A9:34:6C:B8:F5:F8:07:10:E3:DD
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:39:72:46:be:4b:30:3a:72:a0:ea:ac:73:95:9d:ca:1c:95:
e1:6d:26:05:41:b2:db:e0:6e:cc:0b:30:78:e0:0e:c6:75:85:
30:1a:90:7f:ae:ce:ce:e7:47:43:a7:18:fc:e2:1d:0d:4c:43:
7b:45:73:bd:4a:f9:45:43:66:cd:b3:61:45:a6:3a:04:37:5b:
61:e3:72:af:23:15:f0:da:79:08:64:c4:e4:3d:fa:9f:d0:96:
d9:c3:ef:5e:7f:8e:3c:8d:a2:b2:f2:48:e3:c9:61:7f:29:a6:
21:c6:9f:ea:06:f9:a1:71:4a:67:30:01:07:a6:41:47:b1:e4:
51:d4:de:b7:19:1b:9a:ac:36:68:3d:d6:93:f6:72:38:40:94:
b6:be:48:ff:1e:cc:ec:2b:04:00:d6:b6:19:5c:43:a6:30:3f:
d6:5a:5f:91:84:e2:2d:f9:72:2f:f7:24:a9:92:d8:71:55:80:
f5:32:82:01:0b:de:b2:35:66:19:89:0a:44:c3:25:78:21:d7:
b3:62:ce:64:79:2c:bf:38:89:2b:c8:4a:8f:8e:1b:2c:71:0f:
0b:4c:44:e6:91:e4:02:26:31:74:b0:d2:11:2c:e1:71:22:a4:
45:d1:dd:a2:45:81:04:5e:f1:73:55:f3:31:95:ea:2c:7f:9b:
0d:7b:aa:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfTKQR8MdMuHovlg3HdWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNmQ2MTgzNTViZDg5MzdmNzViYjQ2NTBiYjVjMWFmNzBm
OWExMmUwHhcNMjYwMjA5MTMwMDI3WhcNMjYwMjEwMTMwMDI3WjAzMTEwLwYDVQQD
EyhjOWFhZTIzNjAxMTU3MzlkOTYzMWE5MzQ2Y2I4ZjVmODA3MTBlM2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2srsOo5HZExu0x4tGSsA0UIRgyU
ChMLcTRQCbyLIdHCyeqMmAcTSxY1a2LBWU3DTYLKRt/ZuPbp1RdKAH7Buk4RgUHE
W5NWDOcGFBabZmrbJp3wWaLLfdtX2lZZXLhnxpmKpsdIaa1VOY+gsHpG4VQxnlpm
UsYzt5OZEXJ40g4HmxKcYJKBrjT4hiAAHX+1GPmszBAPmC9Pg4UJzHLOx8e/I99S
1tGH3lxStDkmrLg2kV9KwAEiadk/wGthJJ0Aog0Ve8BAyV6qToNLiRiowu3XrU9v
dOZ5oeeIfpd7HzFfqZub9+rHan8lc1Aza3zDTiw+LrqsA4Odw4qNduyR6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmq4jYBFXOdljGpNGy49fgHEOPdMB8GA1UdIwQY
MBaAFDBtYYNVvYk391u0ZQu1wa9w+aEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2Ut
NTE2ZmZkODczNzZjLzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8zY2RlOWItMzcwNS00ZGMzLThkN2UtNTE2ZmZkODczNzZj
LzEvTUcxaGcxVzlpVGYzVzdSbEM3WEJyM0Q1b1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjlyRr5L
MDpyoOqsc5WdyhyV4W0mBUGy2+BuzAsweOAOxnWFMBqQf67OzudHQ6cY/OIdDUxD
e0VzvUr5RUNmzbNhRaY6BDdbYeNyryMV8Np5CGTE5D36n9CW2cPvXn+OPI2isvJI
48lhfymmIcaf6gb5oXFKZzABB6ZBR7HkUdTetxkbmqw2aD3Wk/ZyOECUtr5I/x7M
7CsEANa2GVxDpjA/1lpfkYTiLflyL/ckqZLYcVWA9TKCAQvesjVmGYkKRMMleCHX
s2LOZHksvziJK8hKj44bLHEPC0xE5pHkAiYxdLDSESzhcSKkRdHdokWBBF7xc1Xz
MZXqLH+bDXuq+g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:14 2026 by rpki-client