This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
File: D5_AEbXohjvPO7cq12ldMZdCuEQ.mft (raw, json)
Hash identifier: ZIB72JDArJF++CzO5KLk7+9TUKoqMAoLv241IKRdktI=
Subject key identifier: F2:B2:FC:9C:28:81:06:03:D7:DB:2E:D1:86:06:C8:C4:3A:09:D2:82
Authority key identifier: 0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44
Certificate issuer: /CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844
Certificate serial: 019C420F57903260862B38EE2ED260300EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
Manifest number: B7
Signing time: Mon 09 Feb 2026 11:00:27 +0000
Manifest this update: Mon 09 Feb 2026 11:00:27 +0000
Manifest next update: Tue 10 Feb 2026 11:00:27 +0000
Files and hashes: 1: C2alc4W0qUaR_O2dT6t7YsOa3tU.roa (hash: XKnTKvL5wXPD8yEbAMnox+MgSzxyy4w+ZP5niGbD9/U=)
2: D5_AEbXohjvPO7cq12ldMZdCuEQ.crl (hash: ssvKPeQwYHQLjBYL+TKczdS/Uv9dcmZVFSpzR+QbKsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:57:90:32:60:86:2b:38:ee:2e:d2:60:30:0e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9fc011b5e8863bcf3bb72ad7695d319742b844
Validity
Not Before: Feb 9 11:00:27 2026 GMT
Not After : Feb 10 11:00:27 2026 GMT
Subject: CN=f2b2fc9c28810603d7db2ed18606c8c43a09d282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:9d:3c:41:43:c2:62:f2:ee:8f:58:63:e3:
8a:79:fb:31:2f:04:22:23:be:3c:65:81:61:f1:31:
ab:5c:65:f6:4b:d1:6b:78:5b:43:e3:43:4a:18:27:
28:56:a1:32:48:71:5a:b1:f9:cb:f8:5a:7a:ce:16:
0c:f9:fa:ea:f8:84:fe:0a:73:7c:7b:bc:b5:60:e8:
14:35:59:36:e9:2a:7b:39:5f:79:18:8e:8a:93:69:
0a:42:c4:e9:36:8c:ae:76:93:5e:99:91:1f:55:39:
50:53:40:96:f3:8a:86:d7:22:29:32:43:ab:67:df:
d6:c4:5c:de:92:c3:ba:6f:38:7d:86:4f:35:56:e4:
30:28:19:0c:41:5a:49:d9:2b:3d:d6:c1:6a:54:4f:
9f:0c:5e:3c:ee:8f:7c:9b:66:b4:96:a6:e8:38:58:
89:dc:8e:db:9c:af:28:cc:ba:68:e5:95:47:ff:b2:
0e:a4:0d:5e:15:c8:4c:c3:1e:24:c4:bf:2a:dc:12:
00:b9:69:0b:d5:63:dc:a9:02:b1:a6:fa:94:d6:c9:
ef:11:58:96:1e:4a:72:4d:62:56:43:26:1b:43:14:
eb:d8:fc:6f:f8:cc:dd:84:61:ee:db:54:5a:ba:e6:
ef:aa:68:87:89:77:f3:53:ec:65:87:0f:d2:35:d8:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B2:FC:9C:28:81:06:03:D7:DB:2E:D1:86:06:C8:C4:3A:09:D2:82
X509v3 Authority Key Identifier:
keyid:0F:9F:C0:11:B5:E8:86:3B:CF:3B:B7:2A:D7:69:5D:31:97:42:B8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5_AEbXohjvPO7cq12ldMZdCuEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3abc74-a84f-4c6c-af0d-70c589dd2171/1/D5_AEbXohjvPO7cq12ldMZdCuEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:48:5a:a4:7d:61:06:84:d3:a7:34:73:ce:bd:da:49:a8:
3c:ce:01:de:d2:96:d7:4e:39:26:bd:8a:8b:5d:94:a8:8d:cf:
66:8e:d9:ab:35:d7:3a:02:c6:dd:c1:87:f1:4f:2b:2a:29:78:
ff:c7:30:f5:59:99:68:0d:32:0f:21:7c:9a:68:02:79:a8:3a:
64:68:b1:70:78:75:90:1f:8a:4a:1e:8e:b0:5d:2f:2f:21:12:
00:7e:16:d1:e6:3b:4f:b0:66:80:5c:eb:16:d1:19:71:78:59:
63:a0:66:10:2a:1a:e2:7e:f7:39:10:04:fc:32:29:d1:dd:85:
f2:9b:4f:83:ef:7c:22:3b:38:3d:46:ee:7b:5a:5d:d6:86:ea:
e5:0b:54:8e:fc:e7:53:c8:7e:e4:4a:73:9d:65:0f:37:2a:81:
cb:eb:2d:9e:35:ec:c1:11:7f:99:fa:4e:5e:27:0d:46:0c:fa:
d6:c5:9d:e3:b1:11:ba:b6:c5:f0:a7:59:4a:13:4e:0e:57:06:
6a:b9:c4:41:fa:0c:1c:c0:87:b0:41:33:0f:5e:d1:48:48:a1:
34:e7:36:68:5d:29:60:53:cb:ce:ad:6c:24:bb:5b:ba:00:57:
7d:9b:7d:7d:a8:c8:da:22:88:7e:47:09:72:2e:d1:f1:24:3a:
f6:d3:c0:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD1eQMmCGKzjuLtJgMA6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWZjMDExYjVlODg2M2JjZjNiYjcyYWQ3Njk1ZDMxOTc0
MmI4NDQwHhcNMjYwMjA5MTEwMDI3WhcNMjYwMjEwMTEwMDI3WjAzMTEwLwYDVQQD
EyhmMmIyZmM5YzI4ODEwNjAzZDdkYjJlZDE4NjA2YzhjNDNhMDlkMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AadPEFDwmLy7o9YY+OKefsxLwQi
I748ZYFh8TGrXGX2S9FreFtD40NKGCcoVqEySHFasfnL+Fp6zhYM+frq+IT+CnN8
e7y1YOgUNVk26Sp7OV95GI6Kk2kKQsTpNoyudpNemZEfVTlQU0CW84qG1yIpMkOr
Z9/WxFzeksO6bzh9hk81VuQwKBkMQVpJ2Ss91sFqVE+fDF487o98m2a0lqboOFiJ
3I7bnK8ozLpo5ZVH/7IOpA1eFchMwx4kxL8q3BIAuWkL1WPcqQKxpvqU1snvEViW
HkpyTWJWQyYbQxTr2Pxv+MzdhGHu21RauubvqmiHiXfzU+xlhw/SNdhpmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKy/JwogQYD19su0YYGyMQ6CdKCMB8GA1UdIwQY
MBaAFA+fwBG16IY7zzu3KtdpXTGXQrhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQt
NzBjNTg5ZGQyMTcxLzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zYWJjNzQtYTg0Zi00YzZjLWFmMGQtNzBjNTg5ZGQyMTcx
LzEvRDVfQUViWG9oanZQTzdjcTEybGRNWmRDdUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblhIWqR9
YQaE06c0c8692kmoPM4B3tKW1045Jr2Ki12UqI3PZo7ZqzXXOgLG3cGH8U8rKil4
/8cw9VmZaA0yDyF8mmgCeag6ZGixcHh1kB+KSh6OsF0vLyESAH4W0eY7T7BmgFzr
FtEZcXhZY6BmECoa4n73ORAE/DIp0d2F8ptPg+98Ijs4PUbue1pd1obq5QtUjvzn
U8h+5EpznWUPNyqBy+stnjXswRF/mfpOXicNRgz61sWd47ERurbF8KdZShNODlcG
arnEQfoMHMCHsEEzD17RSEihNOc2aF0pYFPLzq1sJLtbugBXfZt9fajI2iKIfkcJ
ci7R8SQ69tPAIQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:37 2026 by rpki-client