This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: jz1mogtOgmCgOySQVG02/qdZvS3h9cTzrnj7YHtUmQQ=
Subject key identifier: F2:44:A4:39:B1:58:BA:0A:DB:23:0C:3D:BC:8E:65:F3:B5:4A:DA:2F
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019C41345E5B2E2F59A5B1237C571F0BC428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 0561
Signing time: Mon 09 Feb 2026 07:01:16 +0000
Manifest this update: Mon 09 Feb 2026 07:01:16 +0000
Manifest next update: Tue 10 Feb 2026 07:01:16 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: pMD7iI5ViCtNjxxXrxYGxzPI3em7CbCKTfveiARXq/M=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:5e:5b:2e:2f:59:a5:b1:23:7c:57:1f:0b:c4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Feb 9 07:01:16 2026 GMT
Not After : Feb 10 07:01:16 2026 GMT
Subject: CN=f244a439b158ba0adb230c3dbc8e65f3b54ada2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:bb:59:da:18:0c:5c:92:85:2f:f5:04:99:
96:d7:2d:82:46:6c:26:6b:18:79:99:b4:e1:c0:ff:
3f:3b:51:f3:88:40:ae:53:d5:1d:0b:0c:b8:76:b2:
2f:3a:8d:bb:cb:49:42:fb:ee:e4:39:a6:98:d9:c1:
fd:35:1c:23:21:bc:e2:be:27:ef:b2:1c:be:7e:8d:
e6:e4:1b:2d:0d:19:60:33:f4:b3:5b:a2:ee:91:e7:
a7:8c:0b:d9:3e:7e:78:e8:41:fa:6a:3e:8b:21:9f:
66:9f:51:e3:37:cd:f9:e3:05:8e:a2:49:2b:7c:6b:
bb:46:0e:6b:3c:26:8d:0b:57:29:bb:19:62:43:83:
6a:c2:25:59:17:de:f4:3c:70:44:2a:80:f2:ff:98:
0e:48:da:9a:c9:a8:73:75:fd:e0:4d:25:c6:7f:7c:
8f:45:6a:8c:18:52:f1:16:95:e2:13:be:c3:a0:8b:
b6:50:fa:3c:43:01:69:df:c1:20:6a:4f:a2:d1:df:
4e:ef:db:0c:d0:a1:7b:4e:14:d6:85:c0:55:80:b6:
12:33:86:f4:4b:c9:46:db:0d:3a:bc:4a:74:8c:7f:
f0:07:84:58:a3:74:40:7a:1e:8d:46:af:e4:fb:13:
20:40:25:03:ff:78:e3:03:9d:4e:82:78:5e:76:49:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:A4:39:B1:58:BA:0A:DB:23:0C:3D:BC:8E:65:F3:B5:4A:DA:2F
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:da:83:5d:f3:18:84:9b:48:ac:d0:2e:e7:94:57:fd:0a:7c:
a0:b4:e2:0c:1c:ac:40:6b:56:de:3d:6e:c8:88:ed:63:7e:17:
b9:9f:9b:2c:b0:b8:72:5f:1d:20:62:d5:a3:a1:1b:26:7d:97:
17:d9:dc:0a:fa:3d:11:59:b5:5f:c1:28:5e:fb:cc:e6:be:39:
27:35:bd:0f:5c:64:ff:a3:32:6e:46:f6:11:6f:7a:9f:95:f9:
28:4a:85:d1:96:6f:b6:bd:59:bf:2d:bd:b7:88:e7:a7:fe:35:
f6:f1:14:99:69:5b:89:98:a9:4b:cc:a0:aa:71:bc:ad:86:2e:
57:20:13:c1:4d:40:2c:79:09:84:da:b8:3f:97:fc:76:8d:e4:
d4:cd:00:9b:cc:f9:b8:9c:85:58:83:c3:b6:eb:a9:8c:c0:0e:
8e:89:80:18:02:91:38:6d:63:91:28:2b:1c:a0:32:d3:cb:40:
7b:c8:4d:32:2a:f2:13:4f:86:bd:1f:9c:3f:a4:1d:b2:d3:4c:
81:f1:78:59:2e:c9:8e:d5:e7:55:1c:03:65:0f:d2:f7:8c:c4:
be:73:b8:d0:eb:b4:21:31:b1:be:44:d2:39:6b:24:09:20:0f:
8e:8b:4e:df:3d:f5:72:86:5f:be:8b:55:b0:c0:23:46:ab:cb:
36:98:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:27 2026 by rpki-client