This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
File: sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft (raw, json)
Hash identifier: AfpVMYRzP5bAwPsba89MoLHjl2MYPfOpBnDwpqvLXDg=
Subject key identifier: 9A:66:B1:E4:19:4B:AA:C3:0B:C1:2E:54:0B:A7:56:18:6B:C6:A0:B4
Authority key identifier: B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
Certificate issuer: /CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Certificate serial: 019C4359363D819B0361EAD6593E6BE5ED08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 17:00:45 +0000
Manifest this update: Mon 09 Feb 2026 17:00:45 +0000
Manifest next update: Tue 10 Feb 2026 17:00:45 +0000
Files and hashes: 1: sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl (hash: eqxSkq87LiIKkZDQpvTcyqL6ynOYDvTLx4sRf+TcEWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:36:3d:81:9b:03:61:ea:d6:59:3e:6b:e5:ed:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Validity
Not Before: Feb 9 17:00:45 2026 GMT
Not After : Feb 10 17:00:45 2026 GMT
Subject: CN=9a66b1e4194baac30bc12e540ba756186bc6a0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:7b:03:3e:c6:75:fd:6e:fd:39:7f:0b:b8:
d9:96:7d:2e:e8:4e:03:bd:7e:28:77:65:fe:3d:52:
10:87:d8:25:29:dc:77:e6:27:c7:56:52:f9:95:f3:
1c:8b:77:db:a0:9f:8d:5c:a9:ca:ea:f0:96:eb:35:
cb:22:3e:ed:cf:c6:b8:46:76:b9:b1:78:2c:75:f3:
aa:e4:d8:e2:62:0e:1e:b9:57:f7:9b:39:b4:94:66:
fb:07:ae:ab:e2:5c:50:ce:67:d4:d3:02:af:8e:02:
72:3c:1e:55:8b:96:f5:70:67:20:41:03:7c:42:f3:
d7:9c:b5:05:ad:a8:d8:ab:f0:c2:18:54:ee:1e:19:
d2:99:72:25:77:46:78:7b:12:1f:f8:df:c6:2b:b9:
db:ad:f3:31:2c:e2:21:aa:5b:7d:f5:52:ad:69:78:
77:b2:71:93:18:4c:18:cd:f5:46:70:77:2b:97:53:
66:4f:e8:69:fb:09:6e:9d:6f:68:b0:1b:8f:f2:78:
83:49:12:de:5b:d4:6f:71:32:18:4a:eb:f6:b5:c7:
e0:60:36:be:c3:40:15:7f:8c:c8:cc:0d:33:90:85:
52:90:86:d1:5e:01:bc:24:24:86:dc:a7:5a:cf:8b:
dc:30:46:4b:87:2e:41:72:a2:48:42:ca:71:b9:9c:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:66:B1:E4:19:4B:AA:C3:0B:C1:2E:54:0B:A7:56:18:6B:C6:A0:B4
X509v3 Authority Key Identifier:
keyid:B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:05:19:63:83:21:71:5a:26:ad:1d:96:f0:6d:14:76:65:55:
9a:48:58:4b:38:ef:b5:b5:a1:cc:ff:8a:55:11:da:68:16:1b:
a0:4b:2c:a5:cb:2a:bf:e8:3c:7d:f7:78:88:27:74:32:53:0b:
21:4e:44:98:b0:8a:df:f5:02:b7:7f:de:d4:1d:6f:35:70:ee:
d3:ae:8a:80:62:aa:a5:77:76:e2:b0:5e:fb:a9:2c:ae:31:af:
20:f4:e9:d4:64:d0:97:5e:9a:7a:c4:0e:a2:7d:00:3d:ae:dc:
e0:4a:33:9c:39:5b:7e:e3:40:69:12:cb:de:4f:ab:91:3b:c8:
81:09:fe:14:5a:9f:f2:31:18:3b:7d:50:b8:3d:52:13:aa:5c:
8d:1e:8e:ba:66:e3:a5:ec:e8:f9:01:17:b6:91:58:41:ae:1e:
3b:b7:2d:25:74:45:0d:25:e0:91:d6:c4:94:8b:49:5f:8f:f1:
6b:4b:c7:02:75:53:26:74:5b:bb:c2:64:33:a9:e8:ec:db:c0:
f7:3f:f0:33:5c:fc:5a:e2:7e:5d:29:8d:8e:06:71:99:75:0f:
a3:c8:31:5f:9a:4f:08:f8:b2:c4:45:85:c0:4f:38:bd:79:4e:
38:59:60:5a:00:ed:2e:45:a6:69:c9:12:ba:f2:7d:7b:7f:a3:
20:01:cf:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWTY9gZsDYerWWT5r5e0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwN2ZkZjQzN2M2ZjViYzczYzdkY2Q1NWNlNThjZDkyZTQ5
ZDYwMmUwHhcNMjYwMjA5MTcwMDQ1WhcNMjYwMjEwMTcwMDQ1WjAzMTEwLwYDVQQD
Eyg5YTY2YjFlNDE5NGJhYWMzMGJjMTJlNTQwYmE3NTYxODZiYzZhMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndJ7Az7Gdf1u/Tl/C7jZln0u6E4D
vX4od2X+PVIQh9glKdx35ifHVlL5lfMci3fboJ+NXKnK6vCW6zXLIj7tz8a4Rna5
sXgsdfOq5NjiYg4euVf3mzm0lGb7B66r4lxQzmfU0wKvjgJyPB5Vi5b1cGcgQQN8
QvPXnLUFrajYq/DCGFTuHhnSmXIld0Z4exIf+N/GK7nbrfMxLOIhqlt99VKtaXh3
snGTGEwYzfVGcHcrl1NmT+hp+wlunW9osBuP8niDSRLeW9RvcTIYSuv2tcfgYDa+
w0AVf4zIzA0zkIVSkIbRXgG8JCSG3Kdaz4vcMEZLhy5BcqJIQspxuZyuSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpmseQZS6rDC8EuVAunVhhrxqC0MB8GA1UdIwQY
MBaAFLB/30N8b1vHPH3NVc5YzZLknWAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hfZlEzeHZXOGM4ZmMxVnpsak5rdVNkWUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYjBhNDItNmExOS00NTc3LTk5ZDIt
YTc4Yjk3ZWVhNWMxLzEvc0hfZlEzeHZXOGM4ZmMxVnpsak5rdVNkWUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iYjBhNDItNmExOS00NTc3LTk5ZDItYTc4Yjk3ZWVhNWMx
LzEvc0hfZlEzeHZXOGM4ZmMxVnpsak5rdVNkWUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQUZY4Mh
cVomrR2W8G0UdmVVmkhYSzjvtbWhzP+KVRHaaBYboEsspcsqv+g8ffd4iCd0MlML
IU5EmLCK3/UCt3/e1B1vNXDu066KgGKqpXd24rBe+6ksrjGvIPTp1GTQl16aesQO
on0APa7c4EoznDlbfuNAaRLL3k+rkTvIgQn+FFqf8jEYO31QuD1SE6pcjR6Oumbj
pezo+QEXtpFYQa4eO7ctJXRFDSXgkdbElItJX4/xa0vHAnVTJnRbu8JkM6no7NvA
9z/wM1z8WuJ+XSmNjgZxmXUPo8gxX5pPCPiyxEWFwE84vXlOOFlgWgDtLkWmackS
uvJ9e3+jIAHPNw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:39 2026 by rpki-client