This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
File: iPhM2j8rn5Z9noqEhdmeaht_fG4.mft (raw, json)
Hash identifier: l4Zdz1hkLqUUoVgaZBKYatg9Oz9tnVUNPyTzw6Z5bqI=
Subject key identifier: C4:37:AA:ED:E6:25:30:6B:1F:DB:46:44:4B:83:91:F4:81:B2:65:00
Authority key identifier: 88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
Certificate issuer: /CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Certificate serial: 019C41D8CF03E9FCDF08ECC99B8DD1855304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
Manifest number: 04F7
Signing time: Mon 09 Feb 2026 10:00:53 +0000
Manifest this update: Mon 09 Feb 2026 10:00:53 +0000
Manifest next update: Tue 10 Feb 2026 10:00:53 +0000
Files and hashes: 1: 8DVQ-9ugCgky3pnqMNoEBWadgvs.roa (hash: 3usiPYnmDDCd45PFwwCGuxvoOoTqgdlnQ1RDqdrxlXg=)
2: iPhM2j8rn5Z9noqEhdmeaht_fG4.crl (hash: TfjDKeFzr9OEmqqkz67wvHvbQKhwzMH4O9j/Ej8Q5oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:cf:03:e9:fc:df:08:ec:c9:9b:8d:d1:85:53:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Validity
Not Before: Feb 9 10:00:53 2026 GMT
Not After : Feb 10 10:00:53 2026 GMT
Subject: CN=c437aaede625306b1fdb46444b8391f481b26500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:38:94:c9:1e:83:a5:7b:2e:95:9d:84:c4:
93:f9:09:11:25:51:e3:98:ae:a7:2d:47:47:63:33:
8f:46:08:cd:bb:a9:1e:62:91:98:ea:d2:3b:43:70:
93:a0:97:26:11:4e:e7:f1:7b:ce:eb:d8:cb:29:e8:
36:79:81:0c:0f:95:48:37:cc:9c:ee:9b:89:e2:23:
20:d5:25:9d:b2:0d:5c:25:cb:e1:7e:b1:cb:29:ee:
d0:3b:30:67:3d:0c:b9:eb:14:de:2d:d2:09:55:38:
89:1e:51:8f:76:17:d7:7e:78:a1:c4:aa:fa:ae:54:
aa:89:9d:a3:a5:61:72:bd:d5:2b:48:87:3b:27:55:
c0:2c:20:50:0b:9d:40:a0:6b:17:1f:e3:a0:c8:51:
1e:89:36:c2:6c:7e:5e:c7:24:ce:11:08:a6:03:61:
0f:31:d1:81:4f:11:b2:fd:d2:c6:f6:5c:d1:cf:c6:
fe:5a:19:bd:e2:d0:31:15:27:c2:e5:13:ef:aa:c6:
7c:33:b8:d4:a0:a9:53:ae:7f:21:c6:57:95:87:3c:
03:9d:ab:d0:6d:cc:48:8f:93:3e:bd:94:40:ae:bf:
bb:d6:73:d2:95:9a:f7:61:fc:da:be:1e:92:8d:67:
aa:39:02:61:5a:f0:3c:1f:91:01:b6:dc:f6:82:ca:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:AA:ED:E6:25:30:6B:1F:DB:46:44:4B:83:91:F4:81:B2:65:00
X509v3 Authority Key Identifier:
keyid:88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:26:d7:b8:67:31:13:01:7f:07:3a:bf:e7:82:8b:03:67:b1:
dc:b1:fe:5f:ac:3b:10:b1:68:c3:3b:64:72:75:da:05:93:1e:
4c:f7:cc:cb:78:4f:eb:b8:05:30:7f:ef:ba:4b:82:85:90:6f:
d0:a4:ac:0a:2c:28:14:cf:a7:4c:79:8c:c3:4b:1d:3c:bd:df:
05:21:66:ea:fd:88:f8:68:92:34:c7:7a:dc:10:03:7b:94:00:
9f:67:cd:11:75:bb:db:bd:16:ec:19:c8:31:6e:1b:9a:17:3b:
d0:d8:48:bb:cf:b7:4e:be:ce:8d:1e:6d:9e:d5:a4:61:d7:f9:
e7:83:11:eb:f8:d1:dc:ab:fb:af:2f:40:dd:15:0f:70:41:08:
bf:26:d3:9d:d2:22:a1:22:2d:b2:00:46:15:b9:3c:9c:d6:b0:
24:7f:5e:fb:53:38:ff:8f:e4:d1:7e:a6:8a:39:da:c6:da:a4:
32:04:f4:67:f5:96:b9:60:2f:a2:07:46:07:65:59:c3:2d:20:
ac:0c:3f:3d:29:7c:1d:b4:8c:92:d9:3e:18:5d:f2:bc:a4:bb:
74:57:9f:2c:a5:9b:c8:26:38:c7:17:7b:8c:ad:ed:7b:39:50:
a0:13:ad:8b:b1:25:5d:62:a9:d7:be:4f:99:44:f8:71:3d:c3:
32:93:d6:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2M8D6fzfCOzJm43RhVMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Zjg0Y2RhM2YyYjlmOTY3ZDllOGE4NDg1ZDk5ZTZhMWI3
ZjdjNmUwHhcNMjYwMjA5MTAwMDUzWhcNMjYwMjEwMTAwMDUzWjAzMTEwLwYDVQQD
EyhjNDM3YWFlZGU2MjUzMDZiMWZkYjQ2NDQ0YjgzOTFmNDgxYjI2NTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmY4lMkeg6V7LpWdhMST+QkRJVHj
mK6nLUdHYzOPRgjNu6keYpGY6tI7Q3CToJcmEU7n8XvO69jLKeg2eYEMD5VIN8yc
7puJ4iMg1SWdsg1cJcvhfrHLKe7QOzBnPQy56xTeLdIJVTiJHlGPdhfXfnihxKr6
rlSqiZ2jpWFyvdUrSIc7J1XALCBQC51AoGsXH+OgyFEeiTbCbH5exyTOEQimA2EP
MdGBTxGy/dLG9lzRz8b+Whm94tAxFSfC5RPvqsZ8M7jUoKlTrn8hxleVhzwDnavQ
bcxIj5M+vZRArr+71nPSlZr3Yfzavh6SjWeqOQJhWvA8H5EBttz2gsonbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQ3qu3mJTBrH9tGREuDkfSBsmUAMB8GA1UdIwQY
MBaAFIj4TNo/K5+WfZ6KhIXZnmobf3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mMjM4MzEtNmViNS00NDI3LTgxYjAt
MzRkMzQxYzVlYjYxLzEvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mMjM4MzEtNmViNS00NDI3LTgxYjAtMzRkMzQxYzVlYjYx
LzEvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSbXuGcx
EwF/Bzq/54KLA2ex3LH+X6w7ELFowztkcnXaBZMeTPfMy3hP67gFMH/vukuChZBv
0KSsCiwoFM+nTHmMw0sdPL3fBSFm6v2I+GiSNMd63BADe5QAn2fNEXW7270W7BnI
MW4bmhc70NhIu8+3Tr7OjR5tntWkYdf554MR6/jR3Kv7ry9A3RUPcEEIvybTndIi
oSItsgBGFbk8nNawJH9e+1M4/4/k0X6mijnaxtqkMgT0Z/WWuWAvogdGB2VZwy0g
rAw/PSl8HbSMktk+GF3yvKS7dFefLKWbyCY4xxd7jK3tezlQoBOti7ElXWKp175P
mUT4cT3DMpPWow==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:10 2026 by rpki-client