This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: VBsFWr3uffiCeJ4SdFmAauoAYTsIlI7RbvQMbpm1hDQ=
Subject key identifier: 80:F6:4C:9E:7A:54:CF:6C:AA:93:04:92:5E:21:61:51:F2:EB:61:84
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019C446C012D56581A6A1CA8B63DBCC2455E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 05E1
Signing time: Mon 09 Feb 2026 22:00:54 +0000
Manifest this update: Mon 09 Feb 2026 22:00:54 +0000
Manifest next update: Tue 10 Feb 2026 22:00:54 +0000
Files and hashes: 1: oowSifZpNNKYzrjcaNUZJWL3m3Y.roa (hash: uwi3PfId3re9pl7ftEeebbIx30aPGmKfgvOr1N4WMJM=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: NLENxxgbyJvbE8DK6Aedp1aZoNLQf9jKXrqFlVEgQ18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:01:2d:56:58:1a:6a:1c:a8:b6:3d:bc:c2:45:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Feb 9 22:00:54 2026 GMT
Not After : Feb 10 22:00:54 2026 GMT
Subject: CN=80f64c9e7a54cf6caa9304925e216151f2eb6184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:40:59:0b:12:e9:e1:90:16:d4:a3:aa:37:
9b:7b:82:cd:fd:c5:df:14:fc:b3:73:68:4e:04:22:
b3:ad:92:2b:e0:c4:e9:db:ef:f0:58:42:c1:f4:d7:
e9:6d:6a:2c:12:f2:fa:be:56:6f:d3:d7:e6:bd:5b:
7e:fd:93:2c:9e:9a:43:f3:e7:43:46:0d:a0:90:2c:
a4:12:31:e2:85:88:b1:1f:70:fb:fc:a7:18:e1:3a:
ec:ae:ba:ac:2c:91:fe:02:15:2b:1a:f7:7d:68:d1:
7b:3a:6f:b9:21:72:58:05:cc:36:dd:ca:9e:91:82:
e4:db:31:11:ca:f7:c9:58:23:8f:33:b6:5e:7a:4e:
87:f9:1b:4f:46:d7:82:60:1f:d5:1c:6b:e8:3e:b5:
f0:48:64:22:53:18:eb:ef:77:03:35:7e:b4:5c:aa:
fb:de:05:2e:ec:81:55:61:ee:db:17:ee:32:7a:fa:
ba:6a:1e:60:de:8b:f8:e6:26:87:d7:e3:1f:97:9a:
a8:f3:dd:c4:bd:40:70:6b:61:7b:1b:5a:18:0d:5d:
4e:ff:d5:21:82:f9:6a:d7:60:c3:fa:c7:33:80:11:
32:de:06:db:d6:47:8a:7b:b4:83:eb:6b:69:3a:0b:
e5:8e:ad:a7:ff:42:bc:a2:ff:85:78:40:93:36:48:
dc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F6:4C:9E:7A:54:CF:6C:AA:93:04:92:5E:21:61:51:F2:EB:61:84
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d8:87:3f:a5:c8:87:96:7f:4c:77:41:35:8a:24:b7:0c:c9:
a2:6d:7e:e9:8c:10:18:0e:73:76:ee:12:8b:fc:e6:4f:4a:33:
7d:57:37:c4:78:c4:8d:2c:42:79:45:31:77:f4:c2:4b:57:1f:
23:9c:d4:76:b0:9c:0e:5d:9a:5e:94:c3:04:ba:c6:6b:12:8f:
4f:76:9e:9c:b5:75:ee:6c:d7:60:cd:f6:ef:e6:6f:2d:34:b7:
ce:ec:bd:15:09:9e:c2:51:db:fc:f6:62:3c:f2:04:09:b1:b2:
86:7e:b2:bb:75:3d:c8:3d:47:40:6d:fd:5d:03:f0:51:0e:39:
38:3c:90:8b:c4:7c:60:dc:98:76:77:43:e0:4e:1b:22:7a:d1:
a9:ae:4f:24:90:bf:29:18:ed:f6:84:bb:fc:90:da:20:d3:bd:
12:ea:10:79:e7:e8:b9:b7:65:b3:cb:56:11:02:87:ec:54:6f:
4b:50:34:e9:e8:b5:3d:93:12:02:3f:f7:6d:13:b1:46:0d:9e:
85:1d:52:ec:31:a8:aa:45:4c:74:1c:ea:d9:9f:52:53:33:b6:
cc:da:7a:1e:f5:be:50:1d:95:ba:24:44:68:55:14:f3:11:f2:
fb:35:d2:b4:ed:1e:da:0c:32:74:86:72:63:65:77:f1:34:2a:
02:35:a6:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEbAEtVlgaahyotj28wkVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzA2ZmNkYjdlZjA1ODBmNGZmMjAzMmNlZWZmZDI5Yjcw
YWI2MzkwHhcNMjYwMjA5MjIwMDU0WhcNMjYwMjEwMjIwMDU0WjAzMTEwLwYDVQQD
Eyg4MGY2NGM5ZTdhNTRjZjZjYWE5MzA0OTI1ZTIxNjE1MWYyZWI2MTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubxAWQsS6eGQFtSjqjebe4LN/cXf
FPyzc2hOBCKzrZIr4MTp2+/wWELB9NfpbWosEvL6vlZv09fmvVt+/ZMsnppD8+dD
Rg2gkCykEjHihYixH3D7/KcY4TrsrrqsLJH+AhUrGvd9aNF7Om+5IXJYBcw23cqe
kYLk2zERyvfJWCOPM7Zeek6H+RtPRteCYB/VHGvoPrXwSGQiUxjr73cDNX60XKr7
3gUu7IFVYe7bF+4yevq6ah5g3ov45iaH1+Mfl5qo893EvUBwa2F7G1oYDV1O/9Uh
gvlq12DD+sczgBEy3gbb1keKe7SD62tpOgvljq2n/0K8ov+FeECTNkjcAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFID2TJ56VM9sqpMEkl4hYVHy62GEMB8GA1UdIwQY
MBaAFLFwb8237wWA9P8gMs7v/Sm3CrY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQt
ZTgxY2Q3MDIyNTUzLzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQtZTgxY2Q3MDIyNTUz
LzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdiHP6XI
h5Z/THdBNYoktwzJom1+6YwQGA5zdu4Si/zmT0ozfVc3xHjEjSxCeUUxd/TCS1cf
I5zUdrCcDl2aXpTDBLrGaxKPT3aenLV17mzXYM327+ZvLTS3zuy9FQmewlHb/PZi
PPIECbGyhn6yu3U9yD1HQG39XQPwUQ45ODyQi8R8YNyYdndD4E4bInrRqa5PJJC/
KRjt9oS7/JDaINO9EuoQeefoubdls8tWEQKH7FRvS1A06ei1PZMSAj/3bROxRg2e
hR1S7DGoqkVMdBzq2Z9SUzO2zNp6HvW+UB2VuiREaFUU8xHy+zXStO0e2gwydIZy
Y2V38TQqAjWmGQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:42 2026 by rpki-client