This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
File: mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft (raw, json)
Hash identifier: GPyNcVfLqI2U3dNs8MDUlLJTIpez82I2q57vor3WaGs=
Subject key identifier: AD:81:89:F8:E0:90:7A:94:BB:31:DA:4F:F0:EB:F0:AD:61:17:AF:4C
Authority key identifier: 98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC
Certificate issuer: /CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec
Certificate serial: 019C41D8FAB8AC9BBDDCCA474097C7FD06BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
Manifest number: 0419
Signing time: Mon 09 Feb 2026 10:01:04 +0000
Manifest this update: Mon 09 Feb 2026 10:01:04 +0000
Manifest next update: Tue 10 Feb 2026 10:01:04 +0000
Files and hashes: 1: mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl (hash: lg53imIjOfGSrnVQYl00I/pueHPE8kj5UrOmHu+MCFY=)
2: xNch41BpbIQQVdqmlC2pFNDEh54.roa (hash: kpaSflZxbJkkkw1acyRiBoQFA2z+rt2NA71T9bvArw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:fa:b8:ac:9b:bd:dc:ca:47:40:97:c7:fd:06:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec
Validity
Not Before: Feb 9 10:01:04 2026 GMT
Not After : Feb 10 10:01:04 2026 GMT
Subject: CN=ad8189f8e0907a94bb31da4ff0ebf0ad6117af4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:66:4e:74:e1:5c:75:b0:d6:75:40:9f:12:
ba:e8:67:f0:71:47:ec:6f:6b:b6:a9:52:ea:85:bc:
b8:0e:26:36:48:77:9b:df:27:f4:ce:6a:05:9d:b5:
df:f3:d5:98:16:2b:c0:a8:cf:f8:af:88:24:c5:00:
ee:4f:0c:ec:54:ef:cc:65:79:6a:55:2a:3d:96:00:
3d:df:33:b9:30:cb:c5:26:12:77:89:e1:b1:72:9b:
90:5d:26:02:80:c9:e7:9a:8f:96:4a:9e:4f:38:ed:
cb:9b:a8:6b:47:0d:9f:25:59:b1:c1:27:7b:0b:ee:
8d:b0:e9:7f:1b:cb:a5:f7:43:2c:b0:5d:67:c3:b4:
05:9c:ca:df:fe:ae:43:a5:78:2a:da:0d:3b:84:d1:
b5:80:06:cd:93:c0:cf:e8:2a:9b:a1:1e:3b:a1:ce:
32:ec:bc:c2:d9:e7:47:ff:9a:f8:b1:9f:e3:c6:25:
bd:30:bc:3f:59:cf:81:f6:91:e5:52:8d:3a:58:25:
46:9d:e6:b0:b2:42:6d:1b:6a:5b:47:20:0a:d4:f2:
d4:9b:f4:97:54:97:02:22:89:4a:cd:59:02:4c:3d:
47:b5:45:36:97:62:22:60:83:d1:3a:5b:ed:5e:f4:
46:fc:3a:2a:e7:ab:fd:99:d2:47:a8:88:82:69:01:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:81:89:F8:E0:90:7A:94:BB:31:DA:4F:F0:EB:F0:AD:61:17:AF:4C
X509v3 Authority Key Identifier:
keyid:98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:34:01:04:07:ea:98:c4:1c:1f:fa:9d:fe:b1:e1:dd:77:69:
bb:48:80:22:19:43:54:8f:bc:44:c9:43:b5:2a:2b:00:07:01:
93:d0:b6:74:47:33:f6:ba:45:28:3e:20:38:6a:30:8d:f0:2d:
cd:65:25:8b:cd:fd:0a:ed:07:f1:67:63:4d:91:1c:e4:5f:a7:
67:36:c3:2a:a0:6d:9c:d8:29:61:16:73:c1:84:e8:21:9a:24:
de:a8:f5:d7:13:22:75:b9:6a:e8:50:95:d5:8c:a0:ba:3e:14:
e4:dd:59:d2:c6:18:a0:0e:7b:71:bf:ef:8b:52:06:0a:0d:c1:
48:2b:71:bb:f5:1c:5e:0f:d4:5e:75:60:53:d5:d3:c9:66:d1:
8e:5a:0c:20:3a:5a:09:5d:07:18:92:fa:bf:ee:16:7c:52:aa:
08:98:e0:ae:45:e2:a5:df:da:85:fe:85:37:19:99:b0:30:57:
3b:7f:c7:ed:33:c5:a3:c2:d8:d1:cf:7e:cd:20:02:9e:27:6f:
53:e9:2c:84:49:c7:cc:13:88:10:07:88:78:70:c0:5e:8a:a2:
0f:9c:f6:eb:7e:41:3a:04:16:eb:9f:45:c6:ca:75:11:88:3e:
ce:eb:7b:a5:64:9a:d0:c6:e3:7c:04:b6:a3:b3:f6:25:71:68:
c2:a8:6c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:26 2026 by rpki-client