This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: XW0L9lUjRcBSR9xFoe5u7rq6TdvvOfZTIja0HicadZU=
Subject key identifier: 29:D3:FF:CF:07:C5:DD:14:24:69:80:15:EA:65:B6:A3:82:08:3C:FB
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 019C432220FF592EB0327BFD79C03A659EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: 053F
Signing time: Mon 09 Feb 2026 16:00:35 +0000
Manifest this update: Mon 09 Feb 2026 16:00:35 +0000
Manifest next update: Tue 10 Feb 2026 16:00:35 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: /epcKgEetyWeXv436LsBU0fo5YJlHTxLPFlviAUnv5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:20:ff:59:2e:b0:32:7b:fd:79:c0:3a:65:9e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Feb 9 16:00:35 2026 GMT
Not After : Feb 10 16:00:35 2026 GMT
Subject: CN=29d3ffcf07c5dd1424698015ea65b6a382083cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:ac:8b:78:56:e2:c7:60:6a:44:bd:ba:05:
18:06:0c:5b:15:c1:03:56:31:c3:d3:a5:49:3a:9e:
44:c3:2e:44:6e:75:79:8e:40:0c:dd:5b:10:27:f9:
37:c0:fd:33:62:18:4d:72:d1:90:c7:8f:ae:c6:57:
88:ed:5f:23:20:88:93:74:c1:7f:21:45:21:e5:ba:
dd:42:20:71:19:c1:62:14:c2:f2:6c:13:3c:62:f9:
fd:4a:5f:d1:c0:a3:98:76:29:38:cd:c7:5b:19:8a:
e3:3e:9b:b0:2f:bd:33:3b:2d:98:3b:38:fb:d3:79:
05:5c:d6:70:e4:0a:38:6e:af:55:7f:1e:0a:35:8c:
7c:d0:19:87:c7:3b:99:a6:3b:c4:dd:97:63:96:97:
31:0e:c1:33:27:82:6d:40:bd:14:92:da:f3:38:9e:
5d:50:99:8a:23:e5:58:03:ec:50:0e:6a:6c:82:5b:
5e:a7:4e:d5:aa:cc:2d:ce:a0:43:e7:95:0f:c0:69:
d6:09:b5:47:5f:5f:39:73:98:72:2d:aa:cc:bd:28:
4f:0b:d6:15:37:98:98:6a:da:c7:37:81:f1:01:0c:
37:12:f3:c8:9d:97:9e:b4:91:f7:a2:44:ef:0e:3e:
bf:49:30:97:f0:91:7a:bf:e3:ab:ad:8c:8a:92:65:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D3:FF:CF:07:C5:DD:14:24:69:80:15:EA:65:B6:A3:82:08:3C:FB
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f0:55:f3:7e:9a:bb:fe:3f:5b:40:1c:aa:54:3c:66:25:3f:
94:92:53:d5:f7:ce:a7:16:30:85:c4:41:94:1f:98:03:4d:4d:
87:c9:a3:1e:05:a8:a8:95:0f:61:43:4b:1d:86:3f:a6:83:88:
35:6b:8a:dd:f1:74:2a:61:ea:c5:8b:6d:68:b9:63:ab:dd:39:
d6:e7:16:bc:c6:d8:4e:5a:19:ba:50:39:d0:c3:32:ef:26:fe:
3f:f8:c1:1f:8f:e0:3d:67:27:6d:30:ec:0e:3a:9b:c6:9f:de:
11:bb:23:64:4c:69:de:77:aa:c0:91:bc:54:ad:6f:38:00:60:
9d:2e:01:09:fa:b4:33:61:45:7c:6e:87:00:fe:36:f0:b8:ad:
ff:e6:b5:b6:07:6c:b4:28:ca:03:09:d6:c0:9c:2a:50:5f:d0:
2b:d5:0d:8e:ff:68:e7:40:b6:12:e2:af:4f:46:b5:1a:19:41:
11:2f:b4:23:a0:6a:15:f7:24:d0:15:07:19:74:91:d2:28:23:
42:62:1a:87:64:d3:09:2a:b8:85:73:76:e3:0b:40:12:59:f4:
c1:b4:54:59:c0:30:85:b0:bf:c0:2d:f9:a0:41:48:cb:b6:c1:
e2:d1:7b:07:21:68:60:8c:88:58:14:14:f3:7f:60:25:f6:98:
9e:80:7c:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIiD/WS6wMnv9ecA6ZZ6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDZjZTJiMWE5ODBmYmQxZWY5OWMzZjU2NTM2OGFkNjIx
YmM0ZjQwHhcNMjYwMjA5MTYwMDM1WhcNMjYwMjEwMTYwMDM1WjAzMTEwLwYDVQQD
EygyOWQzZmZjZjA3YzVkZDE0MjQ2OTgwMTVlYTY1YjZhMzgyMDgzY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzGsi3hW4sdgakS9ugUYBgxbFcED
VjHD06VJOp5Ewy5EbnV5jkAM3VsQJ/k3wP0zYhhNctGQx4+uxleI7V8jIIiTdMF/
IUUh5brdQiBxGcFiFMLybBM8Yvn9Sl/RwKOYdik4zcdbGYrjPpuwL70zOy2YOzj7
03kFXNZw5Ao4bq9Vfx4KNYx80BmHxzuZpjvE3ZdjlpcxDsEzJ4JtQL0UktrzOJ5d
UJmKI+VYA+xQDmpsgltep07VqswtzqBD55UPwGnWCbVHX185c5hyLarMvShPC9YV
N5iYatrHN4HxAQw3EvPInZeetJH3okTvDj6/STCX8JF6v+OrrYyKkmXFAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnT/88Hxd0UJGmAFepltqOCCDz7MB8GA1UdIwQY
MBaAFJkGzisamA+9HvmcP1ZTaK1iG8T0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjIt
YTJmZTQ5OTFhMDM3LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjItYTJmZTQ5OTFhMDM3
LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/BV836a
u/4/W0AcqlQ8ZiU/lJJT1ffOpxYwhcRBlB+YA01Nh8mjHgWoqJUPYUNLHYY/poOI
NWuK3fF0KmHqxYttaLljq9051ucWvMbYTloZulA50MMy7yb+P/jBH4/gPWcnbTDs
Djqbxp/eEbsjZExp3neqwJG8VK1vOABgnS4BCfq0M2FFfG6HAP428Lit/+a1tgds
tCjKAwnWwJwqUF/QK9UNjv9o50C2EuKvT0a1GhlBES+0I6BqFfck0BUHGXSR0igj
QmIah2TTCSq4hXN24wtAEln0wbRUWcAwhbC/wC35oEFIy7bB4tF7ByFoYIyIWBQU
839gJfaYnoB8Og==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:15 2026 by rpki-client