This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json)
Hash identifier: 9avX0AWgKJN5H25tZBBumQpVeqKRLx8VWeTaamRnleU=
Subject key identifier: B1:B3:8C:DA:31:34:33:9D:1B:19:84:50:E2:96:21:89:5A:D9:B8:E9
Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Certificate serial: 019C43FE69BE74536F06BFF5DC35E3BC93DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
Manifest number: 016B
Signing time: Mon 09 Feb 2026 20:01:12 +0000
Manifest this update: Mon 09 Feb 2026 20:01:12 +0000
Manifest next update: Tue 10 Feb 2026 20:01:12 +0000
Files and hashes: 1: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: H7OtR9krWncpwPj2KAnLKNf5LgVPC/rhZCnYB1d3fEY=)
2: vr-KcEvzFupIdELOEs6eVsczP7A.roa (hash: sVJX8b77ReEC5s9osN7ZZ4vvNkbfeOM17MUXGpuCdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:69:be:74:53:6f:06:bf:f5:dc:35:e3:bc:93:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Validity
Not Before: Feb 9 20:01:12 2026 GMT
Not After : Feb 10 20:01:12 2026 GMT
Subject: CN=b1b38cda3134339d1b198450e29621895ad9b8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:bc:ff:29:43:27:32:4f:66:90:a5:4d:96:
34:47:24:26:3e:59:aa:ed:a2:05:63:1c:c2:94:f8:
02:e8:b7:0c:cf:9c:3a:78:f1:23:1a:d3:ac:9f:60:
26:bb:a7:30:b8:00:0e:3a:c3:98:af:d7:21:f3:91:
43:04:67:8d:cd:f5:0a:3c:35:07:94:5f:21:51:53:
1d:ab:58:13:80:4f:7b:92:15:43:a3:7e:fd:c5:55:
ac:43:9e:8b:e8:bc:6b:4e:38:47:3f:72:d6:62:a5:
3f:b4:87:af:cb:a4:b0:d9:42:99:b0:fa:1b:40:41:
15:bb:d2:8a:be:45:8e:08:91:95:17:7c:dc:b4:28:
cd:3f:00:8f:cb:f3:9a:13:e7:79:84:70:6e:55:6c:
42:ca:43:3d:04:42:5f:38:47:66:b3:f1:2e:b1:be:
5a:3f:96:5d:2c:bc:79:7f:79:c5:12:38:cc:a1:7b:
d9:f6:08:58:b7:b9:5a:40:16:33:6d:83:f8:a4:ac:
2e:8c:af:34:ae:71:22:86:ec:09:b6:fd:bc:cf:c3:
5c:34:5f:ee:92:9a:35:18:94:59:99:ae:87:b6:b9:
30:16:53:0b:fe:22:74:6b:71:74:93:ad:e3:48:43:
aa:05:39:f1:07:4e:c4:a4:d7:1e:9a:77:d7:1d:a1:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B3:8C:DA:31:34:33:9D:1B:19:84:50:E2:96:21:89:5A:D9:B8:E9
X509v3 Authority Key Identifier:
keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d3:17:87:7b:7c:2d:d9:6f:e0:fa:7d:dd:47:5a:d4:de:9b:
55:f8:f2:52:d5:4a:b2:14:32:72:af:f9:9a:31:76:89:a0:3f:
62:5f:d2:6f:59:bc:a4:3b:45:06:6f:c2:b9:df:21:a6:73:12:
52:c7:a8:ef:ff:53:29:3f:6a:50:e6:6e:d8:0d:5b:40:50:8d:
3c:6e:d0:ba:2c:cb:ec:2c:d2:1f:2b:13:29:f6:91:b6:c0:8b:
f1:cb:7e:88:77:11:aa:22:c1:91:21:1a:43:af:26:c9:60:4e:
01:af:2f:e3:d9:d4:e8:26:d4:a2:16:22:c8:0e:41:2e:01:f1:
03:2e:1f:d5:9d:e1:ce:79:53:3b:41:4d:de:5e:c7:71:41:ad:
33:84:7c:00:4d:9f:07:7f:b7:4e:de:f1:a4:d2:00:64:70:7d:
6f:22:1f:74:34:a5:e2:f8:82:56:0d:56:f0:55:1e:17:9e:98:
8d:8b:12:0f:d8:4f:39:a4:30:36:1c:e9:57:f5:92:b7:1a:96:
3c:f8:2d:fd:28:ae:c8:49:e7:44:ee:81:cf:75:75:9a:c3:67:
80:f9:a5:44:88:88:a0:7d:85:44:b4:7d:30:4b:12:25:0b:1d:
f2:e5:78:62:7f:25:83:64:7e:ba:6f:69:e3:8d:38:d4:35:ec:
24:f8:8a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/mm+dFNvBr/13DXjvJPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NGY3YmRhMjMwM2UwM2U4MDM0ZmU3NjMxZjUwNDhiOTk4
NWY2N2UwHhcNMjYwMjA5MjAwMTEyWhcNMjYwMjEwMjAwMTEyWjAzMTEwLwYDVQQD
EyhiMWIzOGNkYTMxMzQzMzlkMWIxOTg0NTBlMjk2MjE4OTVhZDliOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRq8/ylDJzJPZpClTZY0RyQmPlmq
7aIFYxzClPgC6LcMz5w6ePEjGtOsn2Amu6cwuAAOOsOYr9ch85FDBGeNzfUKPDUH
lF8hUVMdq1gTgE97khVDo379xVWsQ56L6LxrTjhHP3LWYqU/tIevy6Sw2UKZsPob
QEEVu9KKvkWOCJGVF3zctCjNPwCPy/OaE+d5hHBuVWxCykM9BEJfOEdms/Eusb5a
P5ZdLLx5f3nFEjjMoXvZ9ghYt7laQBYzbYP4pKwujK80rnEihuwJtv28z8NcNF/u
kpo1GJRZma6HtrkwFlML/iJ0a3F0k63jSEOqBTnxB07EpNcemnfXHaE39QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGzjNoxNDOdGxmEUOKWIYla2bjpMB8GA1UdIwQY
MBaAFHdPe9ojA+A+gDT+djH1BIuZhfZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85ZjQ5MGQtOWMwMS00ZDJmLWE5ZWQt
MzgxNzA0MDEyY2UyLzEvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi85ZjQ5MGQtOWMwMS00ZDJmLWE5ZWQtMzgxNzA0MDEyY2Uy
LzEvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdMXh3t8
Ldlv4Pp93Uda1N6bVfjyUtVKshQycq/5mjF2iaA/Yl/Sb1m8pDtFBm/Cud8hpnMS
Useo7/9TKT9qUOZu2A1bQFCNPG7QuizL7CzSHysTKfaRtsCL8ct+iHcRqiLBkSEa
Q68myWBOAa8v49nU6CbUohYiyA5BLgHxAy4f1Z3hznlTO0FN3l7HcUGtM4R8AE2f
B3+3Tt7xpNIAZHB9byIfdDSl4viCVg1W8FUeF56YjYsSD9hPOaQwNhzpV/WStxqW
PPgt/SiuyEnnRO6Bz3V1msNngPmlRIiIoH2FRLR9MEsSJQsd8uV4Yn8lg2R+um9p
44041DXsJPiKbw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:03 2026 by rpki-client