This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File: slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier: ce97pHcc/7dw0JLyPH/MxmGPuujROZNQR34IBbtIhNg=
Subject key identifier: AE:B2:0E:E5:4A:FA:A1:B0:B4:C4:7A:FD:E2:2B:2F:B2:F1:C2:38:25
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer: /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial: 019C420FB930119DC7064C5498905ACD0623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 11:00:52 +0000
Manifest this update: Mon 09 Feb 2026 11:00:52 +0000
Manifest next update: Tue 10 Feb 2026 11:00:52 +0000
Files and hashes: 1: 2MEGX0xXq-CS52TZ2rRO2bOlBks.roa (hash: /HvTwpT0Q11rSBUmASk+8crSrENE7H5BgnIrEvjimdw=)
2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: q0jgYuaKViOiO1+9PhKzEQHcOlnmmrHsPLvWjeYAySA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:b9:30:11:9d:c7:06:4c:54:98:90:5a:cd:06:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Validity
Not Before: Feb 9 11:00:52 2026 GMT
Not After : Feb 10 11:00:52 2026 GMT
Subject: CN=aeb20ee54afaa1b0b4c47afde22b2fb2f1c23825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:f7:f2:2a:49:9b:7c:ad:c6:40:77:ae:af:
cd:e9:ab:80:9b:d9:c2:fe:09:4b:a5:75:ba:46:6d:
f1:b4:4b:4b:df:f9:05:0f:87:05:a6:ff:2b:d1:95:
68:37:fc:9b:a0:1a:ca:a0:9b:aa:7d:fe:72:cc:17:
5a:e1:cf:ad:50:35:db:c2:8a:82:f0:1e:99:88:e9:
63:f4:c2:5f:35:81:63:1d:fd:01:ba:f9:33:9e:f1:
40:67:65:81:73:cc:ff:a4:3d:8b:0a:1a:1f:aa:1a:
6a:14:8d:98:09:e6:eb:af:fa:54:86:d0:62:54:ef:
9c:f8:4a:9b:16:a4:b4:1c:7d:1e:1d:b1:4e:fa:b0:
2f:88:a9:c5:45:ba:20:eb:da:f9:c0:c0:61:c7:e7:
10:34:c7:9d:59:11:b2:50:0a:5b:22:3c:07:8f:d8:
60:b3:8d:a0:7d:9f:c7:bc:bb:97:09:66:2d:6a:b8:
fa:c6:b0:99:58:3d:65:04:58:86:82:73:a1:f8:0d:
27:93:54:9f:ea:43:c1:7b:59:11:7b:71:be:a6:9d:
a2:bf:d6:cb:fa:60:5b:68:4c:53:ed:4b:f9:18:9c:
12:64:09:7b:d7:51:a0:74:93:0b:3e:d0:50:79:69:
33:d4:ef:d5:e0:65:f8:0f:2b:69:27:89:63:ca:c8:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B2:0E:E5:4A:FA:A1:B0:B4:C4:7A:FD:E2:2B:2F:B2:F1:C2:38:25
X509v3 Authority Key Identifier:
keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0f:be:9c:0d:c6:28:7d:a1:b9:70:12:6e:10:16:ca:c6:e2:
a5:24:39:68:22:f4:8a:5f:58:65:90:88:e9:da:91:38:fb:86:
08:00:26:45:f2:4b:e8:26:b6:b9:00:4a:e1:97:85:c9:1e:d8:
e0:86:22:40:15:31:d4:0d:a1:f0:76:48:74:50:c3:78:0e:2b:
ed:d9:f5:62:4d:af:59:8c:76:87:3f:34:0b:54:68:17:93:d7:
ed:c9:65:4c:b1:67:c0:3a:3d:1a:cf:b1:8e:dd:a3:96:49:ea:
fb:6e:e5:20:fd:71:93:50:cc:33:9d:73:7d:b9:5f:f3:22:c7:
fa:d3:00:60:11:c7:e4:c6:7f:56:9a:89:89:bc:94:b4:8e:08:
4c:c0:1f:47:be:1e:f0:d8:fd:cc:2a:8c:49:a5:db:93:54:d8:
18:54:ad:94:9e:a7:82:71:f3:c8:43:e6:08:eb:ab:85:30:99:
42:cd:72:5f:5d:09:9b:18:91:ab:20:45:67:e0:5f:0c:de:9a:
b0:b6:d4:8a:2d:ac:29:01:87:65:41:15:43:9b:eb:a7:1d:05:
02:4c:16:33:17:b9:3b:dd:70:89:7d:ab:b6:df:b1:0f:aa:89:
3f:23:3c:02:40:b1:03:b5:0a:9d:52:ec:8b:ef:9f:8e:8c:a8:
9d:a3:09:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD7kwEZ3HBkxUmJBazQYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWE1YTQzYmQyMzg0Zjg5MmQyNjVlNTU4YjQ0MTFlOGIy
MzJiNTUwHhcNMjYwMjA5MTEwMDUyWhcNMjYwMjEwMTEwMDUyWjAzMTEwLwYDVQQD
EyhhZWIyMGVlNTRhZmFhMWIwYjRjNDdhZmRlMjJiMmZiMmYxYzIzODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4n38ipJm3ytxkB3rq/N6auAm9nC
/glLpXW6Rm3xtEtL3/kFD4cFpv8r0ZVoN/yboBrKoJuqff5yzBda4c+tUDXbwoqC
8B6ZiOlj9MJfNYFjHf0BuvkznvFAZ2WBc8z/pD2LChofqhpqFI2YCebrr/pUhtBi
VO+c+EqbFqS0HH0eHbFO+rAviKnFRbog69r5wMBhx+cQNMedWRGyUApbIjwHj9hg
s42gfZ/HvLuXCWYtarj6xrCZWD1lBFiGgnOh+A0nk1Sf6kPBe1kRe3G+pp2iv9bL
+mBbaExT7Uv5GJwSZAl711GgdJMLPtBQeWkz1O/V4GX4DytpJ4ljysivpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6yDuVK+qGwtMR6/eIrL7LxwjglMB8GA1UdIwQY
MBaAFLJaWkO9I4T4ktJl5Vi0QR6LIytVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODIt
NWViZGU4YjhjZTFkLzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80ZGY5NjktNTdhNi00NWY3LTgwODItNWViZGU4YjhjZTFk
LzEvc2xwYVE3MGpoUGlTMG1YbFdMUkJIb3NqSzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArg++nA3G
KH2huXASbhAWysbipSQ5aCL0il9YZZCI6dqROPuGCAAmRfJL6Ca2uQBK4ZeFyR7Y
4IYiQBUx1A2h8HZIdFDDeA4r7dn1Yk2vWYx2hz80C1RoF5PX7cllTLFnwDo9Gs+x
jt2jlknq+27lIP1xk1DMM51zfblf8yLH+tMAYBHH5MZ/VpqJibyUtI4ITMAfR74e
8Nj9zCqMSaXbk1TYGFStlJ6ngnHzyEPmCOurhTCZQs1yX10JmxiRqyBFZ+BfDN6a
sLbUii2sKQGHZUEVQ5vrpx0FAkwWMxe5O91wiX2rtt+xD6qJPyM8AkCxA7UKnVLs
i++fjoyonaMJnA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:36 2026 by rpki-client