This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier: ZcODN8xGDKe2GDcRbHfxzFG/osDTHtzcf8UxlU0MAXc=
Subject key identifier: 72:1B:1F:DF:93:54:E9:24:65:55:D3:FC:2B:9C:9F:E2:BA:8C:F4:D3
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial: 019C41A166E14F7632A54B73E2FF959C0DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number: 073B
Signing time: Mon 09 Feb 2026 09:00:22 +0000
Manifest this update: Mon 09 Feb 2026 09:00:22 +0000
Manifest next update: Tue 10 Feb 2026 09:00:22 +0000
Files and hashes: 1: L4GTgn9egBv7X8ozBy3W1tdX8eU.roa (hash: WLET1VlxTbzpa1IgY9ty4OjbAIQ5DWuzb+zM7ZHvhBc=)
2: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: Gu+IoMy8uZ9pa9l9KTVU3HkDtl0DcGCqf+GEPjvzfyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:66:e1:4f:76:32:a5:4b:73:e2:ff:95:9c:0d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
Validity
Not Before: Feb 9 09:00:22 2026 GMT
Not After : Feb 10 09:00:22 2026 GMT
Subject: CN=721b1fdf9354e9246555d3fc2b9c9fe2ba8cf4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:ba:71:f3:58:cd:85:ba:7c:75:d4:31:3e:
47:47:16:35:07:e6:12:08:ea:5c:2c:98:ff:91:72:
8b:3e:9e:a2:af:0e:e4:fb:77:29:d2:85:fc:81:4b:
7e:bf:6b:53:9f:b4:ef:c6:29:07:c8:12:ec:13:3b:
eb:bf:5c:be:86:09:2a:2f:b8:50:52:b7:83:7b:92:
8b:09:3b:45:d9:a4:4c:8d:b2:a6:75:af:81:90:20:
45:33:82:98:7b:51:01:ad:47:8c:6a:33:d7:88:e3:
12:11:be:fc:64:d8:95:35:0f:c8:a3:a2:ab:86:46:
90:79:02:af:d3:f2:42:0e:34:9c:7d:32:0a:88:7d:
93:0e:3f:f3:a9:d5:f4:47:b5:1e:ad:f8:a2:77:ed:
41:b7:99:43:99:fe:d4:df:09:d5:2b:b8:7b:f4:c3:
ad:2f:30:2b:d0:cc:dd:df:e8:01:33:09:7b:76:97:
6d:c5:47:3c:cb:51:bb:65:b2:a2:77:b9:d6:bb:7a:
4f:c8:a3:27:fa:63:52:f3:08:7e:78:6a:9f:6e:a6:
cc:fd:b2:2a:52:de:3d:46:95:3a:59:06:e9:86:df:
42:c7:a0:28:7a:ca:42:b6:e6:8c:a0:2b:1d:57:2a:
6f:91:3b:1b:65:ab:58:7f:d4:5d:87:27:b0:3c:5e:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1B:1F:DF:93:54:E9:24:65:55:D3:FC:2B:9C:9F:E2:BA:8C:F4:D3
X509v3 Authority Key Identifier:
keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:26:f1:c4:8f:83:2d:3b:4a:ae:29:ab:b6:f6:e4:8c:42:32:
f8:6a:4d:9c:0e:20:24:af:a6:f1:99:a4:e1:5a:34:16:bb:ac:
00:fc:3f:6b:60:17:4e:b1:0a:61:44:db:95:15:93:9d:10:b8:
af:ca:69:e0:87:4c:06:e8:b8:c1:d5:16:73:f9:97:55:53:5b:
74:ba:9f:3b:de:10:29:06:48:d8:fa:77:37:67:ee:eb:6f:a3:
f7:0f:5b:66:00:b3:ca:a6:11:64:4d:72:0d:95:53:d9:34:81:
8b:a5:ba:3e:18:11:ef:85:10:5e:a9:ad:e0:d9:43:54:41:03:
6d:ab:d2:34:68:46:ad:72:a0:b5:59:76:da:6f:ac:a2:81:8f:
1e:28:e8:0f:65:fb:7c:0a:8a:e9:3a:ea:09:8a:d5:3f:32:fd:
50:fa:b1:a5:c9:b8:84:ca:80:b4:fe:f4:23:88:7c:50:b8:68:
23:04:33:af:51:d1:ef:98:f7:16:d3:fa:87:30:2a:d9:6d:e2:
60:59:27:2e:dc:e0:8b:09:0a:45:40:4b:f3:6e:0b:1a:7e:85:
fa:02:0d:87:14:16:56:a9:17:d3:63:6c:2f:b3:ff:dd:a1:97:
18:7b:ba:02:02:25:96:fe:31:43:97:ba:03:9f:84:b5:fa:2f:
e6:c7:b6:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoWbhT3YypUtz4v+VnA3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0
YWZjZWIwHhcNMjYwMjA5MDkwMDIyWhcNMjYwMjEwMDkwMDIyWjAzMTEwLwYDVQQD
Eyg3MjFiMWZkZjkzNTRlOTI0NjU1NWQzZmMyYjljOWZlMmJhOGNmNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3O6cfNYzYW6fHXUMT5HRxY1B+YS
COpcLJj/kXKLPp6irw7k+3cp0oX8gUt+v2tTn7TvxikHyBLsEzvrv1y+hgkqL7hQ
UreDe5KLCTtF2aRMjbKmda+BkCBFM4KYe1EBrUeMajPXiOMSEb78ZNiVNQ/Io6Kr
hkaQeQKv0/JCDjScfTIKiH2TDj/zqdX0R7Uerfiid+1Bt5lDmf7U3wnVK7h79MOt
LzAr0Mzd3+gBMwl7dpdtxUc8y1G7ZbKid7nWu3pPyKMn+mNS8wh+eGqfbqbM/bIq
Ut49RpU6WQbpht9Cx6AoespCtuaMoCsdVypvkTsbZatYf9RdhyewPF6K5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIbH9+TVOkkZVXT/Cucn+K6jPTTMB8GA1UdIwQY
MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt
MDZmMzY2MjhjOGExLzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx
LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACibxxI+D
LTtKrimrtvbkjEIy+GpNnA4gJK+m8Zmk4Vo0FrusAPw/a2AXTrEKYUTblRWTnRC4
r8pp4IdMBui4wdUWc/mXVVNbdLqfO94QKQZI2Pp3N2fu62+j9w9bZgCzyqYRZE1y
DZVT2TSBi6W6PhgR74UQXqmt4NlDVEEDbavSNGhGrXKgtVl22m+sooGPHijoD2X7
fAqK6TrqCYrVPzL9UPqxpcm4hMqAtP70I4h8ULhoIwQzr1HR75j3FtP6hzAq2W3i
YFknLtzgiwkKRUBL824LGn6F+gINhxQWVqkX02NsL7P/3aGXGHu6AgIllv4xQ5e6
A5+Etfov5se2hA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:28 2026 by rpki-client