This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
File: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft (raw, json)
Hash identifier: 62PUCqtPHzsLvI7lHBm0djjTWkon7WDw6ymTy+Nhhao=
Subject key identifier: 95:DF:C4:D2:53:E8:C2:03:4B:4D:17:A7:CA:06:13:75:D7:21:7E:FB
Authority key identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
Certificate issuer: /CN=ac328756dece8f29f97f41b81a087db524e159b7
Certificate serial: 019C4321D194AD7D4BB07D5CB757FCFEE1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
Manifest number: 145B
Signing time: Mon 09 Feb 2026 16:00:15 +0000
Manifest this update: Mon 09 Feb 2026 16:00:15 +0000
Manifest next update: Tue 10 Feb 2026 16:00:15 +0000
Files and hashes: 1: W3MdpZwq4nd-n5ES7yDiCOVHqpo.roa (hash: 8BK9ZS1JvVx0ZUCH1KW40WgG0466nVGYcl484oqJH48=)
2: rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl (hash: grriG1eAYRiKSvhtOGPiWOtSmaQq52XK20C29NOfNUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:d1:94:ad:7d:4b:b0:7d:5c:b7:57:fc:fe:e1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac328756dece8f29f97f41b81a087db524e159b7
Validity
Not Before: Feb 9 16:00:15 2026 GMT
Not After : Feb 10 16:00:15 2026 GMT
Subject: CN=95dfc4d253e8c2034b4d17a7ca061375d7217efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a1:93:e4:78:69:4a:29:d5:7b:7c:b3:1e:e7:
c8:cb:f2:96:cb:8d:b0:fc:36:12:82:84:ca:fb:58:
5d:99:19:8e:7a:90:f5:b0:90:65:b5:f7:66:0e:08:
6c:2b:72:df:a8:f0:50:9b:82:b4:89:5f:27:11:9e:
59:08:60:00:bc:99:5d:f3:ef:01:47:37:64:28:8a:
02:1e:59:73:6c:66:a5:1a:51:69:65:9d:ad:4b:25:
d9:d1:36:28:44:18:76:c1:f5:a0:f5:04:be:5c:14:
fa:20:40:e3:18:f6:6e:a4:4a:7a:2d:db:de:96:50:
cd:e4:fb:27:ae:6c:45:85:2f:11:1d:91:5a:4f:2a:
ee:70:5c:19:38:78:19:4e:4c:4b:8e:86:fd:36:fe:
46:18:7b:66:93:e2:35:34:ee:31:f9:c7:ba:ea:5d:
ab:04:2b:b1:fb:e9:3e:76:6c:e0:d1:01:34:bb:ed:
bd:5c:b4:77:24:8f:d8:f3:36:20:ad:9f:99:87:29:
52:11:7c:3a:5c:62:e7:97:22:7f:33:85:e2:b1:5f:
46:3f:8e:90:e9:b0:6b:1c:61:78:8c:a0:59:c7:6a:
4b:90:9f:e7:75:5f:1d:29:14:76:b2:4e:9b:50:db:
2e:ed:f4:52:ec:61:90:8b:c5:5d:85:ac:4f:98:eb:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DF:C4:D2:53:E8:C2:03:4B:4D:17:A7:CA:06:13:75:D7:21:7E:FB
X509v3 Authority Key Identifier:
keyid:AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e0:f0:6e:42:1a:ee:95:d4:a9:68:85:84:62:34:b0:4d:b2:
ac:2d:dc:8d:52:a2:bf:ec:4d:ce:b3:6e:94:ef:4c:fa:30:16:
73:8c:36:20:12:35:4e:25:84:9a:4b:cb:b7:4d:f9:22:48:8f:
a4:11:59:9d:95:98:b8:ad:90:a1:bf:cf:50:c0:67:fe:0a:83:
dc:f3:3d:e4:80:dd:f3:96:3d:21:51:a3:50:35:de:17:4c:d7:
7d:74:c8:04:db:ba:d7:d6:33:06:89:f0:13:33:aa:7a:35:13:
52:e0:b8:ba:83:58:14:e9:aa:cc:48:19:78:04:09:d7:3f:36:
33:68:77:58:49:28:7e:1b:3a:87:f9:f6:1a:ad:22:8f:f6:95:
41:0f:85:f0:a7:47:14:67:ac:c3:ce:ce:70:35:5b:53:c9:25:
35:b0:4d:4d:8d:e4:95:e6:a2:b6:b9:b5:e0:41:ba:cd:ab:4c:
8f:43:fe:9c:d0:fc:6e:99:87:f8:3c:57:9b:1d:88:51:81:11:
62:65:0c:19:04:2a:b3:36:d2:18:b8:64:bd:a4:2b:52:50:58:
57:1a:b3:54:2a:bc:ee:8b:3f:cc:3e:fb:84:5b:e6:a5:04:22:
46:42:59:41:6f:e5:99:5a:7f:16:e7:16:ec:13:8d:62:bc:e6:
e2:3f:1d:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIdGUrX1LsH1ct1f8/uGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMzI4NzU2ZGVjZThmMjlmOTdmNDFiODFhMDg3ZGI1MjRl
MTU5YjcwHhcNMjYwMjA5MTYwMDE1WhcNMjYwMjEwMTYwMDE1WjAzMTEwLwYDVQQD
Eyg5NWRmYzRkMjUzZThjMjAzNGI0ZDE3YTdjYTA2MTM3NWQ3MjE3ZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKGT5HhpSinVe3yzHufIy/KWy42w
/DYSgoTK+1hdmRmOepD1sJBltfdmDghsK3LfqPBQm4K0iV8nEZ5ZCGAAvJld8+8B
RzdkKIoCHllzbGalGlFpZZ2tSyXZ0TYoRBh2wfWg9QS+XBT6IEDjGPZupEp6Ldve
llDN5PsnrmxFhS8RHZFaTyrucFwZOHgZTkxLjob9Nv5GGHtmk+I1NO4x+ce66l2r
BCux++k+dmzg0QE0u+29XLR3JI/Y8zYgrZ+ZhylSEXw6XGLnlyJ/M4XisV9GP46Q
6bBrHGF4jKBZx2pLkJ/ndV8dKRR2sk6bUNsu7fRS7GGQi8VdhaxPmOv+FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXfxNJT6MIDS00Xp8oGE3XXIX77MB8GA1UdIwQY
MBaAFKwyh1bezo8p+X9BuBoIfbUk4Vm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mYjc4YWQtOTE4ZS00NGMyLTk1MDEt
MDI0YWQ0ZmIzNzA4LzEvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mYjc4YWQtOTE4ZS00NGMyLTk1MDEtMDI0YWQ0ZmIzNzA4
LzEvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuDwbkIa
7pXUqWiFhGI0sE2yrC3cjVKiv+xNzrNulO9M+jAWc4w2IBI1TiWEmkvLt035IkiP
pBFZnZWYuK2Qob/PUMBn/gqD3PM95IDd85Y9IVGjUDXeF0zXfXTIBNu619YzBonw
EzOqejUTUuC4uoNYFOmqzEgZeAQJ1z82M2h3WEkofhs6h/n2Gq0ij/aVQQ+F8KdH
FGesw87OcDVbU8klNbBNTY3kleaitrm14EG6zatMj0P+nND8bpmH+DxXmx2IUYER
YmUMGQQqszbSGLhkvaQrUlBYVxqzVCq87os/zD77hFvmpQQiRkJZQW/lmVp/FucW
7BONYrzm4j8dFg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:42 2026 by rpki-client