This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File: pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier: YDpWDyVcUpv0+a5U8uJg7RmkZRyKzSxP18zc5Qh7A+M=
Subject key identifier: DA:37:D7:02:90:98:A5:E6:FA:2F:19:3B:B8:AB:5C:5C:28:10:20:B3
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 019C42B41E15C022D818D65011E6DB3467F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number: 0EE1
Signing time: Mon 09 Feb 2026 14:00:26 +0000
Manifest this update: Mon 09 Feb 2026 14:00:26 +0000
Manifest next update: Tue 10 Feb 2026 14:00:26 +0000
Files and hashes: 1: 1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa (hash: cYggAnbxJcT3dfayKBFM1pT3DCCSeOQKuJH//n4lQos=)
2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: 1kEil+J4UlzrjInk4gtm7a5SEoPCeqTER+ZwwxoQW3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:1e:15:c0:22:d8:18:d6:50:11:e6:db:34:67:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Feb 9 14:00:26 2026 GMT
Not After : Feb 10 14:00:26 2026 GMT
Subject: CN=da37d7029098a5e6fa2f193bb8ab5c5c281020b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:1c:b7:2a:e4:e0:93:49:8a:31:8b:dc:b2:
f1:e1:e4:b6:db:d5:84:b3:90:6f:9e:76:60:b9:84:
03:96:91:de:fa:d8:e1:93:52:3a:04:71:eb:dd:98:
22:3d:6c:e4:7c:96:21:f4:57:7f:74:e4:2c:f9:15:
63:46:56:5b:59:72:9f:e9:91:1d:28:91:c4:55:d3:
da:51:59:04:35:77:db:19:e9:27:8a:8a:1e:90:96:
cf:9e:0e:13:95:34:38:30:c5:ee:64:c6:b5:9b:da:
bf:b3:39:a6:5b:66:3b:2d:1b:f0:ec:55:1d:6b:df:
a0:fb:ce:70:91:f7:f5:f3:49:ff:db:c8:ee:55:a8:
16:62:87:42:67:26:a1:fb:24:84:01:dd:ae:5d:5f:
ff:ab:0d:78:55:ce:92:d1:2c:e5:30:db:8b:b4:f8:
3e:2e:72:8e:3c:4f:de:58:b5:94:1a:ab:82:1b:e5:
3d:b0:36:fc:c7:b5:9c:5b:f7:16:b3:fc:1d:c9:44:
17:81:f9:03:bb:7b:95:b1:e8:9c:d5:05:82:8f:28:
0d:6e:54:c8:81:99:68:bb:53:e8:2e:48:4d:e5:dd:
c1:1d:c3:bb:10:60:b7:8e:58:34:52:62:60:b5:6c:
d8:eb:23:52:fa:cd:f0:3b:14:37:e1:3e:cc:42:34:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:D7:02:90:98:A5:E6:FA:2F:19:3B:B8:AB:5C:5C:28:10:20:B3
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:63:53:48:b8:15:5c:29:3f:da:a9:c1:98:64:09:f0:c1:f7:
5d:68:b7:b3:44:af:d0:88:78:24:68:3f:32:6a:f4:27:50:1d:
f9:d0:db:23:ad:c0:72:de:f1:1f:ef:c7:78:65:5f:a6:e9:5d:
9a:43:a8:03:74:e5:68:45:c4:53:0b:3b:1d:df:ea:26:5b:1b:
99:69:c1:13:b8:34:b9:a2:51:f0:68:16:9d:91:8e:e6:6b:ef:
0b:88:d7:f2:c0:f1:1f:25:a6:8d:78:c0:a7:e6:8f:3b:96:4b:
ca:19:6c:61:dc:26:96:16:e4:b9:13:d7:f1:3c:60:df:71:5c:
d6:2c:34:f0:d9:a0:f6:20:b3:16:51:7b:4f:bd:f9:eb:e6:b7:
96:f8:38:ae:4f:5f:62:97:e7:a2:d7:59:77:86:af:45:9b:a2:
62:f7:67:5e:83:f1:85:a0:e6:7a:de:c4:7c:e2:be:e1:e8:28:
ec:45:76:80:25:3b:52:b7:04:04:da:bc:d9:48:df:37:b8:c9:
fe:c4:09:f3:60:93:af:ec:da:cd:b6:09:57:56:d7:dc:9f:f9:
94:96:8c:9c:a9:7f:96:a4:ab:5c:23:3b:e2:48:b0:80:71:83:
b5:e6:42:57:11:22:30:09:e6:d2:cf:af:20:3f:8e:c2:78:89:
56:6a:c1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtB4VwCLYGNZQEebbNGfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2Q0Y2ZlNjBmOGEzMGE0ZDBmZjk0Yjk0ZWJhZGZjODhj
OWFjMTEwHhcNMjYwMjA5MTQwMDI2WhcNMjYwMjEwMTQwMDI2WjAzMTEwLwYDVQQD
EyhkYTM3ZDcwMjkwOThhNWU2ZmEyZjE5M2JiOGFiNWM1YzI4MTAyMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Actyrk4JNJijGL3LLx4eS229WE
s5BvnnZguYQDlpHe+tjhk1I6BHHr3ZgiPWzkfJYh9Fd/dOQs+RVjRlZbWXKf6ZEd
KJHEVdPaUVkENXfbGekniooekJbPng4TlTQ4MMXuZMa1m9q/szmmW2Y7LRvw7FUd
a9+g+85wkff180n/28juVagWYodCZyah+ySEAd2uXV//qw14Vc6S0SzlMNuLtPg+
LnKOPE/eWLWUGquCG+U9sDb8x7WcW/cWs/wdyUQXgfkDu3uVseic1QWCjygNblTI
gZlou1PoLkhN5d3BHcO7EGC3jlg0UmJgtWzY6yNS+s3wOxQ34T7MQjQzewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo31wKQmKXm+i8ZO7irXFwoECCzMB8GA1UdIwQY
MBaAFKV9TP5g+KMKTQ/5S5TrrfyIyawRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgt
ZTgwZjMyMDczZjNkLzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80OGMwNzItMjJkZS00NGQ3LWJlZDgtZTgwZjMyMDczZjNk
LzEvcFgxTV9tRDRvd3BORF9sTGxPdXRfSWpKckJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2NTSLgV
XCk/2qnBmGQJ8MH3XWi3s0Sv0Ih4JGg/Mmr0J1Ad+dDbI63Act7xH+/HeGVfpuld
mkOoA3TlaEXEUws7Hd/qJlsbmWnBE7g0uaJR8GgWnZGO5mvvC4jX8sDxHyWmjXjA
p+aPO5ZLyhlsYdwmlhbkuRPX8Txg33Fc1iw08Nmg9iCzFlF7T7356+a3lvg4rk9f
YpfnotdZd4avRZuiYvdnXoPxhaDmet7EfOK+4ego7EV2gCU7UrcEBNq82UjfN7jJ
/sQJ82CTr+zazbYJV1bX3J/5lJaMnKl/lqSrXCM74kiwgHGDteZCVxEiMAnm0s+v
ID+OwniJVmrBpA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:37 2026 by rpki-client