This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: gIZAEtG2NBhIP155f5wB17PVR4SbThvSHbhHBX1FrQg=
Subject key identifier: D3:D7:04:00:EC:C1:6A:24:EB:DC:0A:7E:AF:E6:0C:B6:98:AC:64:9D
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 019C416ADEF4F5C9CECFF9A184CCF914982F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 08:00:48 +0000
Manifest this update: Mon 09 Feb 2026 08:00:48 +0000
Manifest next update: Tue 10 Feb 2026 08:00:48 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: 49JqSm7HyRuHyBef7m5FSV5+eSsiwoa6D3EMgmIch0c=)
2: a2dGgMgkDvSFz9UvYkCXlH5tzZU.roa (hash: c2MCuHjIaTWBayfSiKP1qGbzAEWRP5fSSTHUf07P0Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:de:f4:f5:c9:ce:cf:f9:a1:84:cc:f9:14:98:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Feb 9 08:00:48 2026 GMT
Not After : Feb 10 08:00:48 2026 GMT
Subject: CN=d3d70400ecc16a24ebdc0a7eafe60cb698ac649d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:69:05:26:76:48:9f:0e:36:e5:81:f8:22:
92:e9:0c:d1:b6:d7:f2:ab:14:e8:0a:9c:dc:67:52:
12:30:2f:3f:fc:8c:09:2b:18:f0:67:78:de:68:c3:
2c:ba:c1:bb:7f:16:4f:04:3d:c6:ee:d0:6d:e0:86:
59:49:23:44:10:15:8b:f6:2d:df:e6:29:da:0b:75:
c2:89:e6:e8:8e:77:b1:41:24:e0:ac:4a:b5:53:ac:
11:03:7f:3a:0b:71:f0:58:65:0d:ce:29:c9:44:95:
9f:1b:fd:97:e7:10:b9:12:5d:f9:16:f6:3d:33:d2:
a8:0c:9e:83:10:fc:01:78:43:84:74:12:b5:39:e0:
8e:9a:23:81:8f:ac:37:56:58:d6:c7:65:63:29:6f:
99:1a:5e:de:87:7a:a8:a7:cc:1a:d1:7e:57:b3:8c:
75:aa:9a:db:de:66:ba:bf:5a:68:e9:ec:af:28:4f:
fa:8a:2c:9e:15:10:3e:e3:fc:40:24:4e:9b:31:57:
3a:b5:0a:7d:99:ff:b7:77:15:c6:1f:84:18:0b:d3:
b5:a4:07:9b:36:d9:7f:25:79:2d:ad:78:ee:86:e5:
88:44:50:55:02:b3:4f:be:a9:ac:4f:c7:79:66:df:
f8:fd:57:37:3f:55:a5:e4:d7:22:0b:1b:62:49:f0:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:04:00:EC:C1:6A:24:EB:DC:0A:7E:AF:E6:0C:B6:98:AC:64:9D
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e5:0a:1a:b1:ce:96:13:9d:8b:a0:2a:33:db:d2:54:b6:7b:
7f:82:05:e3:db:a8:09:b0:bc:89:48:ea:05:05:f5:fb:e2:46:
b7:02:c4:81:b6:41:04:88:a9:0c:96:e3:6f:71:85:d1:ba:8e:
27:0f:65:f2:77:16:08:ec:de:7f:0d:60:26:37:72:f0:6a:e7:
42:47:08:7e:2b:6a:46:04:f8:86:3c:36:4f:f7:ed:76:61:cc:
78:a6:c3:b4:04:d3:cf:fc:45:7d:59:fa:0d:80:ca:77:9f:ac:
55:10:79:6c:25:f4:9c:53:0e:23:2e:31:95:8a:15:e5:fb:89:
45:08:d0:d1:be:91:e4:74:7f:97:1c:f6:a3:3b:73:0d:b0:74:
bc:84:9b:2d:4f:fe:d1:25:df:b4:db:7e:bd:94:5b:fe:b6:87:
1e:5f:99:d7:da:b5:6a:31:b2:68:d5:8e:34:e9:f4:da:d6:74:
17:96:c8:4e:08:b3:81:fd:51:0e:a9:62:35:9b:1f:e0:44:be:
bb:4c:43:be:f3:2d:4f:08:5e:b3:d7:a7:ca:04:86:8e:51:52:
b9:ac:19:52:0b:18:19:6d:9d:f5:25:9d:5e:d2:89:74:70:24:
fe:86:70:a9:a9:5d:67:39:0c:b9:1b:85:2a:ef:fb:3a:c1:07:
d7:51:51:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBat709cnOz/mhhMz5FJgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Nzk5NjhlNjZlZGJlYTM3MmVmOTViYWEyYmY2ODkxMzg1
NjdhNDAwHhcNMjYwMjA5MDgwMDQ4WhcNMjYwMjEwMDgwMDQ4WjAzMTEwLwYDVQQD
EyhkM2Q3MDQwMGVjYzE2YTI0ZWJkYzBhN2VhZmU2MGNiNjk4YWM2NDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqshpBSZ2SJ8ONuWB+CKS6QzRttfy
qxToCpzcZ1ISMC8//IwJKxjwZ3jeaMMsusG7fxZPBD3G7tBt4IZZSSNEEBWL9i3f
5inaC3XCiebojnexQSTgrEq1U6wRA386C3HwWGUNzinJRJWfG/2X5xC5El35FvY9
M9KoDJ6DEPwBeEOEdBK1OeCOmiOBj6w3VljWx2VjKW+ZGl7eh3qop8wa0X5Xs4x1
qprb3ma6v1po6eyvKE/6iiyeFRA+4/xAJE6bMVc6tQp9mf+3dxXGH4QYC9O1pAeb
Ntl/JXktrXjuhuWIRFBVArNPvqmsT8d5Zt/4/Vc3P1Wl5NciCxtiSfB5/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPXBADswWok69wKfq/mDLaYrGSdMB8GA1UdIwQY
MBaAFNd5lo5m7b6jcu+VuqK/aJE4VnpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYt
NmU2ZmEzOWJiMWVjLzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYtNmU2ZmEzOWJiMWVj
LzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuUKGrHO
lhOdi6AqM9vSVLZ7f4IF49uoCbC8iUjqBQX1++JGtwLEgbZBBIipDJbjb3GF0bqO
Jw9l8ncWCOzefw1gJjdy8GrnQkcIfitqRgT4hjw2T/ftdmHMeKbDtATTz/xFfVn6
DYDKd5+sVRB5bCX0nFMOIy4xlYoV5fuJRQjQ0b6R5HR/lxz2oztzDbB0vISbLU/+
0SXftNt+vZRb/raHHl+Z19q1ajGyaNWONOn02tZ0F5bITgizgf1RDqliNZsf4ES+
u0xDvvMtTwhes9enygSGjlFSuawZUgsYGW2d9SWdXtKJdHAk/oZwqaldZzkMuRuF
Ku/7OsEH11FRQw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:00 2026 by rpki-client