This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: X+1w0MVMSzs1Li1HN9DNUVOmxK5KXfHDlblFep6NBiU=
Subject key identifier: D3:54:CE:E5:35:0F:8B:82:4D:DC:06:65:2B:11:86:37:D6:25:F1:1C
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 019C4246C521D0BEA2F84E52F8121D89209A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 1501
Signing time: Mon 09 Feb 2026 12:01:00 +0000
Manifest this update: Mon 09 Feb 2026 12:01:00 +0000
Manifest next update: Tue 10 Feb 2026 12:01:00 +0000
Files and hashes: 1: 3tG3zwbaaFuFl6cpIqxTe91Iu4g.roa (hash: JJoTnqlPPDa1SmZHbLUdf1Go4yaIrlgXIH2dNpLzAn8=)
2: 53l_D5g_N2hEJkJMJ3_8BjIEv2Y.roa (hash: XGQ+zMpVhvmcmw4I8+8i5OdAGzf1VzpgvnNvlvgbkC0=)
3: Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa (hash: w1Q8xSxbmL/6LZW2i41+YiB+eNvVEBq+XNQ8qrTEQhU=)
4: OZvI4MXWtnolgxghoQ6_cphW1W4.roa (hash: Oi9ZbYQx2WEELwMB6HBFHb18B/3Zxcuia5/qRlgnoFw=)
5: S07AeLQ2NYxvgtMR17xnrys_0A8.roa (hash: xF4nltUlnbXwDKnVSE40BEpkV8WuHnGlPrCS02d5En4=)
6: aDzvIFmPuasW-wZl4h5nCLEftQ0.roa (hash: V99/4bZyDIbs4HJhhHYscdVnYmUcdsRDsQGQFwRiELE=)
7: lXLif39D5KxldHNZbTu-0rsSDYY.roa (hash: mVxFtPQntFOFsnZXkQ8/rUjDQRMlvViyOfc1fE3bjpY=)
8: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: g4dMVRmCwo3YPZ7aBb1PPbVquSJYB+t9lCx474Qsfj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:c5:21:d0:be:a2:f8:4e:52:f8:12:1d:89:20:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Feb 9 12:01:00 2026 GMT
Not After : Feb 10 12:01:00 2026 GMT
Subject: CN=d354cee5350f8b824ddc06652b118637d625f11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:85:c2:0e:1d:32:1e:4f:4d:37:da:a9:0c:
b7:b5:5d:b0:84:c8:38:51:2e:9c:be:04:f8:4c:6a:
b1:22:22:89:87:29:aa:b3:74:f9:64:bb:56:db:5e:
c8:f1:d9:7f:b9:92:b3:f3:be:4e:d4:e7:74:7e:53:
87:59:9e:f8:a6:60:24:49:31:b9:c9:e3:56:be:5d:
57:4b:51:15:e7:4c:52:ce:49:54:73:b0:9d:35:d5:
d0:02:25:ea:26:95:ca:3c:31:6d:d1:66:4e:56:1f:
cd:72:ac:6a:fb:23:8f:0c:8f:a0:8e:4a:08:48:10:
c1:37:37:1e:95:88:f9:b0:cd:f7:c0:f7:8c:e4:10:
9c:ce:64:bb:23:9b:06:31:d5:d6:e8:65:32:1c:1e:
de:58:57:62:f7:70:79:ec:cb:74:b6:9d:f9:cc:ba:
1c:df:70:14:26:81:d0:74:8d:87:c9:4b:2c:62:3a:
59:5a:ac:05:99:1f:47:a7:c9:a2:ac:84:35:7e:76:
df:b0:4e:b9:2d:b6:d8:6c:4b:53:f6:cb:28:fd:30:
7d:1d:2a:47:8b:1f:e9:b5:63:6f:68:9a:1a:3a:99:
8f:ca:8f:e5:ae:25:6b:9e:06:5e:00:e2:b8:93:9a:
16:66:ff:c3:a8:e4:7b:9b:5e:75:63:5b:0b:ab:04:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:CE:E5:35:0F:8B:82:4D:DC:06:65:2B:11:86:37:D6:25:F1:1C
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:97:85:b9:56:df:bd:ce:68:d4:40:90:10:0c:27:5e:8d:0b:
df:b7:77:25:2e:83:ac:7f:90:1a:1b:48:cb:0a:d9:b3:6c:40:
cc:21:e5:cb:6c:4e:ce:62:e8:7e:3f:f8:21:c0:17:47:59:52:
d6:23:fd:76:17:53:a8:1a:7f:f9:4c:51:48:3e:cf:8f:e3:14:
e6:b8:33:19:b6:12:56:80:7d:dd:18:32:6e:d4:cf:07:68:b5:
23:de:fb:82:1d:9b:4c:2a:6e:80:b0:40:d8:19:7b:fe:30:e3:
ce:b7:db:c1:28:76:c7:66:df:8e:3a:23:02:12:60:6f:88:57:
df:fb:92:7d:0a:40:d0:89:01:1e:8f:99:95:16:51:5b:e7:8b:
07:fb:60:e7:f3:9f:55:c1:5b:71:7d:32:de:28:a0:6d:3a:7d:
3a:1c:92:be:b7:78:b6:59:21:2c:5f:fb:29:29:13:73:3c:db:
57:2d:bb:83:99:11:d9:21:fd:81:5e:f4:dc:51:c5:f9:03:c3:
0e:17:2e:f4:2a:19:3a:04:ea:8b:a6:1a:6e:80:e3:5b:b3:5a:
53:67:fa:c9:8a:9e:bf:1a:e5:0d:36:31:fa:2c:26:30:be:f9:
89:59:79:b1:24:bb:77:1c:ae:11:e4:3b:8c:e3:18:6d:37:a5:
16:21:dd:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRsUh0L6i+E5S+BIdiSCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNDM1MTQ2MzBkYzE3ZjNmZTliNTFkZDQzNDE4NGQwYjYy
YjAzYzAwHhcNMjYwMjA5MTIwMTAwWhcNMjYwMjEwMTIwMTAwWjAzMTEwLwYDVQQD
EyhkMzU0Y2VlNTM1MGY4YjgyNGRkYzA2NjUyYjExODYzN2Q2MjVmMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHWFwg4dMh5PTTfaqQy3tV2whMg4
US6cvgT4TGqxIiKJhymqs3T5ZLtW217I8dl/uZKz875O1Od0flOHWZ74pmAkSTG5
yeNWvl1XS1EV50xSzklUc7CdNdXQAiXqJpXKPDFt0WZOVh/Ncqxq+yOPDI+gjkoI
SBDBNzcelYj5sM33wPeM5BCczmS7I5sGMdXW6GUyHB7eWFdi93B57Mt0tp35zLoc
33AUJoHQdI2HyUssYjpZWqwFmR9Hp8mirIQ1fnbfsE65LbbYbEtT9sso/TB9HSpH
ix/ptWNvaJoaOpmPyo/lriVrngZeAOK4k5oWZv/DqOR7m151Y1sLqwRQ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNUzuU1D4uCTdwGZSsRhjfWJfEcMB8GA1UdIwQY
MBaAFLNDUUYw3Bfz/ptR3UNBhNC2KwPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt
YTcyNDdlOWQ1ZjNhLzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh
LzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpeFuVbf
vc5o1ECQEAwnXo0L37d3JS6DrH+QGhtIywrZs2xAzCHly2xOzmLofj/4IcAXR1lS
1iP9dhdTqBp/+UxRSD7Pj+MU5rgzGbYSVoB93RgybtTPB2i1I977gh2bTCpugLBA
2Bl7/jDjzrfbwSh2x2bfjjojAhJgb4hX3/uSfQpA0IkBHo+ZlRZRW+eLB/tg5/Of
VcFbcX0y3iigbTp9OhySvrd4tlkhLF/7KSkTczzbVy27g5kR2SH9gV703FHF+QPD
Dhcu9CoZOgTqi6YaboDjW7NaU2f6yYqevxrlDTYx+iwmML75iVl5sSS7dxyuEeQ7
jOMYbTelFiHdDg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:36 2026 by rpki-client