This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json)
Hash identifier: Sgfcr0x3lLzK5keaPwzcMqvciyIsGmTARKnZDUYa+jU=
Subject key identifier: 25:DB:27:96:AD:72:0D:F7:78:F5:87:3E:8B:BB:F4:7A:80:13:85:54
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial: 019C43FD8A1D0727CA7D3BC417A668C2CF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
Manifest number: 0CCC
Signing time: Mon 09 Feb 2026 20:00:15 +0000
Manifest this update: Mon 09 Feb 2026 20:00:15 +0000
Manifest next update: Tue 10 Feb 2026 20:00:15 +0000
Files and hashes: 1: MjSrEKMCWcyMEE6nS-q7WuWv6TI.roa (hash: 4Sap9NoQcaB7qcwGKxc8FZ4d2698TBnl8zwNLDBPALw=)
2: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: 8x0JTZ0++qxHWmt+mYlKAOsj7BGVIDFd6+iipnERZ7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:8a:1d:07:27:ca:7d:3b:c4:17:a6:68:c2:cf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Validity
Not Before: Feb 9 20:00:15 2026 GMT
Not After : Feb 10 20:00:15 2026 GMT
Subject: CN=25db2796ad720df778f5873e8bbbf47a80138554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:b6:a7:25:ba:7a:3a:2a:1f:43:a4:02:f0:
e1:58:01:25:0a:82:bb:b4:e5:ff:61:e0:27:77:fd:
49:d3:2c:53:36:e8:ea:f5:27:bf:b7:8a:2f:a6:e9:
f9:07:dc:79:02:0d:40:41:82:69:42:5e:61:b1:09:
c5:c2:a9:50:97:d7:55:19:31:fd:dc:46:06:78:b4:
f3:a9:2d:48:49:fd:83:24:36:c6:9c:82:d0:c0:b9:
99:8f:8f:35:94:e3:0e:6c:75:3e:48:f1:8f:cd:ec:
71:e8:e6:10:93:f6:73:05:1c:34:5a:f9:cf:7c:71:
80:87:f1:fb:0e:bf:ec:dc:29:8e:16:39:87:b4:4f:
fd:cf:01:a8:b3:6b:b3:19:7d:96:5d:4c:d8:d1:9f:
d4:6d:a2:b2:82:2b:c5:62:12:25:a0:6e:c8:c0:86:
74:62:a6:cb:f1:c7:a4:04:b1:5e:ba:4c:76:fe:21:
d7:a8:17:00:21:eb:f3:99:43:01:b7:61:1e:22:24:
fc:3f:aa:da:dc:f3:3d:6f:ac:d9:3e:28:8a:d9:6f:
c1:2b:6c:1a:0e:43:59:d1:e9:4f:c5:43:7c:77:de:
57:4f:15:fc:b7:05:36:2c:ed:7d:42:b6:5c:fc:76:
ca:cc:9f:20:b3:3d:07:d6:83:a0:9c:8f:ad:03:75:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:27:96:AD:72:0D:F7:78:F5:87:3E:8B:BB:F4:7A:80:13:85:54
X509v3 Authority Key Identifier:
keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a8:19:90:0f:e8:8e:48:25:c0:12:8d:6c:0c:99:74:93:dd:
11:b6:33:17:c8:00:c6:27:10:1d:5d:1c:f4:de:b7:a3:0b:e7:
58:ec:35:89:0c:8d:21:b8:33:7e:fd:69:d6:63:ea:a2:0e:ed:
33:54:10:7a:f0:65:65:69:97:ff:da:a0:89:71:88:6f:55:f8:
63:c6:76:8a:dd:03:67:29:b7:48:d6:9e:5d:14:06:23:c1:d2:
7a:00:23:a6:95:d5:f7:55:a7:54:e1:da:4b:92:ff:b2:f4:1d:
56:be:b3:be:18:03:2d:d4:17:00:10:48:e6:aa:59:55:64:8f:
82:33:fe:50:1d:65:d4:71:08:ae:f6:43:61:e7:14:4b:43:0a:
18:19:ae:8d:8e:16:ca:9c:04:ed:0f:b6:03:9b:69:dd:56:12:
66:de:89:c6:3a:04:52:99:30:ab:18:bc:eb:b9:25:30:a8:87:
4e:06:d5:e4:67:c3:4f:b7:5f:41:ec:7f:0c:77:24:98:f2:3e:
55:45:c5:d6:81:67:4b:72:a4:d2:aa:d0:16:da:92:5d:a2:df:
d9:dd:a1:12:1a:43:26:90:32:a9:23:27:bc:60:61:da:d5:69:
89:e1:44:6a:08:aa:b3:f0:98:4b:71:c5:b0:87:91:f2:b2:99:
cd:4f:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:02 2026 by rpki-client