This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: oF2atwS01cg52UkheOLgJgCJVpUfvAXzu6skBIZSwjA=
Subject key identifier: A1:CC:82:DD:6E:09:AF:4B:85:8D:9D:F0:B7:35:2B:89:83:27:B5:13
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 019C4322D6189746AFE4DBB460D922CC8A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 06E8
Signing time: Mon 09 Feb 2026 16:01:22 +0000
Manifest this update: Mon 09 Feb 2026 16:01:22 +0000
Manifest next update: Tue 10 Feb 2026 16:01:22 +0000
Files and hashes: 1: LH31eWblzc9N88J9ihjcAEm2GSU.roa (hash: aA7SpWPZXBL5dHzOmD7+zSVA2s9TImnC5p7oJrbvDXA=)
2: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: /7yE+WSDwDUlId1aay+uMVtNl4+Rc6Pjv7VkHdtlLzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:d6:18:97:46:af:e4:db:b4:60:d9:22:cc:8a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Feb 9 16:01:22 2026 GMT
Not After : Feb 10 16:01:22 2026 GMT
Subject: CN=a1cc82dd6e09af4b858d9df0b7352b898327b513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:52:0b:aa:bd:e1:dd:85:8f:3e:a7:e2:68:
4f:5c:67:aa:18:23:95:63:4e:84:2d:fd:a4:57:31:
6a:a0:07:4a:0c:99:e7:b7:fb:fc:a0:7e:ab:22:df:
30:f5:53:38:05:4a:2d:d2:9b:8f:28:57:0f:6c:49:
0b:6d:cc:be:ce:38:9a:60:d3:32:b3:d9:9f:05:54:
3b:b7:06:3c:66:b5:b0:00:58:93:d0:21:aa:a9:de:
e9:75:2d:9a:d1:92:36:77:d2:5f:fc:71:22:39:84:
34:ac:fb:88:7d:b7:ee:5b:be:d3:fa:80:27:8d:2d:
16:c6:c2:52:89:ac:f6:c9:27:ad:4f:97:70:fe:bd:
85:60:f6:ea:26:3e:6f:6d:55:7b:a6:44:6c:82:a9:
b6:a3:ea:5a:52:50:25:da:f4:4a:f2:9f:fb:38:e4:
d8:f1:d7:d5:a3:72:07:4d:40:36:23:b6:0d:fa:dc:
6f:07:df:4e:d9:6b:6a:78:eb:ea:1e:94:66:38:d4:
f1:53:8e:3d:88:d2:d7:ed:ba:b6:82:94:bf:b9:c4:
d4:28:91:34:7b:28:19:9e:ac:2b:1e:4e:de:df:36:
87:74:fd:51:d4:e2:95:b5:f6:74:13:65:1a:fa:fb:
8e:68:5e:44:8a:51:bb:1b:3a:d8:c9:41:5a:aa:c9:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CC:82:DD:6E:09:AF:4B:85:8D:9D:F0:B7:35:2B:89:83:27:B5:13
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e8:f3:5a:ed:4f:c0:45:2c:f0:c9:eb:be:9a:45:cb:c4:3d:
2f:29:a4:92:07:84:e3:7b:28:e1:39:81:d6:4f:24:70:02:0d:
69:c8:6c:dd:e4:f7:1f:85:5a:ca:dc:01:5a:b8:ff:3f:ce:68:
a8:14:48:62:a0:b1:65:12:ac:d4:f5:85:80:bb:32:9f:c3:53:
67:e9:96:ca:0d:7c:f6:82:3e:b0:d5:ce:a2:ed:a7:4a:1f:a1:
66:83:64:e4:96:24:c1:c2:e6:ae:c0:76:71:6e:42:a4:23:eb:
99:60:ad:25:c1:ca:c8:3e:f1:4d:25:c2:88:a0:a7:49:23:9c:
41:f9:24:34:cc:de:b0:7e:1d:85:9a:5f:6b:50:f6:e1:07:22:
f5:35:06:ec:92:6d:55:73:cc:b0:4f:15:ba:e8:f8:8d:84:b0:
7d:b9:09:b6:00:24:95:d7:d8:7b:d8:c8:77:0c:5f:ba:a9:25:
2a:23:9c:57:49:36:00:45:f4:a4:1e:52:f1:bb:62:47:7c:fe:
9b:db:f4:2d:7a:cd:9e:74:fb:7f:01:ba:35:0d:ed:4d:f7:7d:
7d:aa:f0:5b:1b:29:6f:cb:a3:f1:f7:df:69:33:f8:d0:92:ba:
4c:e3:91:48:ca:78:60:38:1b:78:de:f1:2d:1b:19:1e:7a:7a:
9e:6d:56:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDItYYl0av5Nu0YNkizIpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTUzZThhYzQ2ZGI1Y2U1NzRiYTdlMzllODdlOGFmMDk2
YzFhODkwHhcNMjYwMjA5MTYwMTIyWhcNMjYwMjEwMTYwMTIyWjAzMTEwLwYDVQQD
EyhhMWNjODJkZDZlMDlhZjRiODU4ZDlkZjBiNzM1MmI4OTgzMjdiNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjtSC6q94d2Fjz6n4mhPXGeqGCOV
Y06ELf2kVzFqoAdKDJnnt/v8oH6rIt8w9VM4BUot0puPKFcPbEkLbcy+zjiaYNMy
s9mfBVQ7twY8ZrWwAFiT0CGqqd7pdS2a0ZI2d9Jf/HEiOYQ0rPuIfbfuW77T+oAn
jS0WxsJSiaz2ySetT5dw/r2FYPbqJj5vbVV7pkRsgqm2o+paUlAl2vRK8p/7OOTY
8dfVo3IHTUA2I7YN+txvB99O2WtqeOvqHpRmONTxU449iNLX7bq2gpS/ucTUKJE0
eygZnqwrHk7e3zaHdP1R1OKVtfZ0E2Ua+vuOaF5EilG7GzrYyUFaqslNXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHMgt1uCa9LhY2d8Lc1K4mDJ7UTMB8GA1UdIwQY
MBaAFEYVPorEbbXOV0un456H6K8JbBqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wZDExNzItNGJiMi00OTJjLWI1MTEt
NzhkYzdiMmMzZTg4LzEvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wZDExNzItNGJiMi00OTJjLWI1MTEtNzhkYzdiMmMzZTg4
LzEvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+jzWu1P
wEUs8MnrvppFy8Q9LymkkgeE43so4TmB1k8kcAINachs3eT3H4VaytwBWrj/P85o
qBRIYqCxZRKs1PWFgLsyn8NTZ+mWyg189oI+sNXOou2nSh+hZoNk5JYkwcLmrsB2
cW5CpCPrmWCtJcHKyD7xTSXCiKCnSSOcQfkkNMzesH4dhZpfa1D24Qci9TUG7JJt
VXPMsE8Vuuj4jYSwfbkJtgAkldfYe9jIdwxfuqklKiOcV0k2AEX0pB5S8btiR3z+
m9v0LXrNnnT7fwG6NQ3tTfd9farwWxspb8uj8fffaTP40JK6TOORSMp4YDgbeN7x
LRsZHnp6nm1WhA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:50 2026 by rpki-client