This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: awXsX3yUnAcnFtOU/kLtY//86GYcLIhfC+tmUazz9No=
Subject key identifier: 94:C2:8C:F9:25:9E:E5:C0:A3:CD:CF:76:BB:98:B4:B9:E3:A1:C9:1E
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 019C416A5D1C72701EDFB4B1D2207944C144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 08:00:15 +0000
Manifest this update: Mon 09 Feb 2026 08:00:15 +0000
Manifest next update: Tue 10 Feb 2026 08:00:15 +0000
Files and hashes: 1: 4q1y8Tli_IRdIdP5qkhpZwA_l7w.roa (hash: mv8lr0tXFFzJvbhtM86qbyUU00UwUrjvcbsKld0kTWE=)
2: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: TzAEczcJAEoTHnvnV25Qvqp7kwtwIOoIhQxDDMM0yec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:5d:1c:72:70:1e:df:b4:b1:d2:20:79:44:c1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Feb 9 08:00:15 2026 GMT
Not After : Feb 10 08:00:15 2026 GMT
Subject: CN=94c28cf9259ee5c0a3cdcf76bb98b4b9e3a1c91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:99:2e:31:75:96:ad:1d:34:0c:29:d2:51:
5c:d2:59:bc:91:e5:09:89:8e:8c:cf:6e:53:c7:3e:
f6:de:c8:01:b5:3c:1c:a3:5f:50:b4:fa:b3:b2:c3:
45:39:6a:79:6b:b2:15:ff:f2:c3:85:bd:21:f6:1c:
69:4e:4c:60:c3:00:b5:e2:93:65:9f:db:53:b5:77:
aa:a8:bd:47:82:a9:15:5c:52:a4:35:6a:df:8b:0d:
f2:56:c2:28:a6:3f:57:57:12:86:cb:68:48:08:d6:
0c:32:c9:9a:65:9e:db:18:98:4b:4e:62:ec:b9:f1:
77:c6:82:f8:35:1e:59:5b:a5:04:11:b4:e6:5b:8f:
80:08:e4:27:30:0e:f6:5e:7d:98:ff:14:9a:41:28:
94:1b:6f:3b:dd:a0:cd:03:91:9d:7a:50:81:ac:bc:
81:6a:73:43:f8:0e:6c:c2:03:e4:37:2b:7f:ad:ee:
c8:b8:f7:ee:3f:7f:37:5e:d0:45:d0:03:76:9a:4c:
5c:93:10:aa:ff:4e:9e:ef:0d:f1:ac:d7:a9:6f:26:
d7:0b:30:1d:c0:92:82:c9:d9:0b:9a:00:14:3e:a9:
5a:0c:56:f9:65:52:55:9e:c8:d4:59:20:62:bb:06:
f9:c9:80:3c:89:f2:8d:06:3d:7c:f3:67:2c:15:80:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C2:8C:F9:25:9E:E5:C0:A3:CD:CF:76:BB:98:B4:B9:E3:A1:C9:1E
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:43:bb:89:14:1e:de:b7:6e:64:8a:40:5b:dd:23:ac:d1:b2:
03:c5:72:f4:95:dc:b7:a7:13:da:6f:16:5b:a9:ea:41:14:cd:
83:e2:91:10:34:d2:c4:d8:70:6a:44:93:dd:92:58:5d:66:14:
93:a4:5c:c2:75:d5:61:35:1c:96:08:f4:3f:e1:39:12:58:be:
27:9d:b7:82:fb:a2:09:b1:0c:a0:78:f5:3f:2b:cb:da:db:6c:
fd:84:ef:2b:d1:37:f3:55:72:a4:69:21:b9:a3:50:6e:58:d6:
d7:91:be:02:5c:85:c8:48:e5:ee:d6:be:1d:eb:3c:00:3f:9b:
d9:39:34:45:ec:29:58:04:92:86:31:b0:3d:f8:78:a1:ea:79:
14:cd:b7:a1:42:ad:22:e5:49:ab:ac:81:88:b1:18:38:7f:d8:
fe:68:2d:3d:8e:29:28:91:4e:e3:c1:f6:fa:f9:98:a8:60:3e:
21:fe:ba:60:fa:ac:35:d8:b9:f6:33:b7:ef:87:a4:77:4a:46:
f1:10:ff:56:7e:78:16:25:ca:de:62:ad:f5:7e:14:ef:db:d7:
c4:4b:3e:23:c8:87:e2:d5:36:c8:51:e4:02:16:87:20:6c:10:
aa:36:58:5c:1e:06:77:52:34:b4:f0:99:1a:ea:46:26:0d:ec:
e6:07:3c:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBal0ccnAe37Sx0iB5RMFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzY2I3N2E3MDc1ZjkyN2NjNDAxOGQ1NmU2Y2Q3NWM1OThk
YzNhNTEwHhcNMjYwMjA5MDgwMDE1WhcNMjYwMjEwMDgwMDE1WjAzMTEwLwYDVQQD
Eyg5NGMyOGNmOTI1OWVlNWMwYTNjZGNmNzZiYjk4YjRiOWUzYTFjOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApguZLjF1lq0dNAwp0lFc0lm8keUJ
iY6Mz25Txz723sgBtTwco19QtPqzssNFOWp5a7IV//LDhb0h9hxpTkxgwwC14pNl
n9tTtXeqqL1HgqkVXFKkNWrfiw3yVsIopj9XVxKGy2hICNYMMsmaZZ7bGJhLTmLs
ufF3xoL4NR5ZW6UEEbTmW4+ACOQnMA72Xn2Y/xSaQSiUG2873aDNA5GdelCBrLyB
anND+A5swgPkNyt/re7IuPfuP383XtBF0AN2mkxckxCq/06e7w3xrNepbybXCzAd
wJKCydkLmgAUPqlaDFb5ZVJVnsjUWSBiuwb5yYA8ifKNBj1882csFYAgLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTCjPklnuXAo83PdruYtLnjockeMB8GA1UdIwQY
MBaAFPPLd6cHX5J8xAGNVubNdcWY3DpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQt
NzA3NzExYjgxZWY3LzEvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kZDAxYWQtNmMyNy00NTdmLWIwNjQtNzA3NzExYjgxZWY3
LzEvODh0M3B3ZGZrbnpFQVkxVzVzMTF4WmpjT2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUO7iRQe
3rduZIpAW90jrNGyA8Vy9JXct6cT2m8WW6nqQRTNg+KREDTSxNhwakST3ZJYXWYU
k6RcwnXVYTUclgj0P+E5Eli+J523gvuiCbEMoHj1PyvL2tts/YTvK9E381VypGkh
uaNQbljW15G+AlyFyEjl7ta+Hes8AD+b2Tk0RewpWASShjGwPfh4oep5FM23oUKt
IuVJq6yBiLEYOH/Y/mgtPY4pKJFO48H2+vmYqGA+If66YPqsNdi59jO374ekd0pG
8RD/Vn54FiXK3mKt9X4U79vXxEs+I8iH4tU2yFHkAhaHIGwQqjZYXB4Gd1I0tPCZ
GupGJg3s5gc83g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:25 2026 by rpki-client