This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: u0gMCiyHPePIHDkINW0bdLaRZM/cZPudYcMx82smzsk=
Subject key identifier: 2B:ED:CE:11:7E:B7:C6:24:42:92:36:D3:F7:ED:93:CC:12:EF:5E:1F
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019C427D36D43F177230FC8AA509DA54EED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 11ED
Signing time: Mon 09 Feb 2026 13:00:28 +0000
Manifest this update: Mon 09 Feb 2026 13:00:28 +0000
Manifest next update: Tue 10 Feb 2026 13:00:28 +0000
Files and hashes: 1: 7_HY5yB8d3Njtf3VZahbVmixIZU.roa (hash: H45Wi9cbUIzhStJ6D1qNpJlOHim13UV0HCf2YP0fQEc=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
6: pZS2FuCyE0ac7bgviGBWTjEjxK8.roa (hash: BY2QLyJHYDD23aKTMOr6Dhb2Ou5jiMnicXO1uDe86kk=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: BSfn+X3SR6TV6fc1+R1nHOPMdbBBzSV2qh04fSJ8t88=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:36:d4:3f:17:72:30:fc:8a:a5:09:da:54:ee:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Feb 9 13:00:28 2026 GMT
Not After : Feb 10 13:00:28 2026 GMT
Subject: CN=2bedce117eb7c624429236d3f7ed93cc12ef5e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:2c:82:56:e1:9a:67:b3:aa:67:8e:03:68:
86:47:09:75:3b:91:d6:90:94:d5:dc:bd:f0:3e:2b:
e9:76:e3:c8:03:b0:42:1c:95:97:32:4c:df:e2:e7:
47:d0:b6:98:5c:57:cb:ef:07:fc:bd:39:fe:43:05:
45:79:7c:34:54:ff:59:8e:87:ea:b2:df:30:fb:3f:
ff:55:e8:d7:e7:04:6c:77:35:98:51:b7:3a:30:72:
14:e4:7a:d3:07:18:21:ac:a3:b1:25:ee:dc:1c:b7:
cc:1d:4e:13:52:2d:70:24:ec:93:2d:64:aa:80:c0:
68:6d:b6:54:46:6f:9d:d5:b5:45:46:65:8d:cc:66:
41:97:29:fd:83:8a:4f:22:56:ce:11:aa:54:41:1d:
3f:42:21:91:24:41:91:24:95:11:26:d5:ea:5a:64:
d0:64:dd:30:a8:8d:e3:0b:03:11:f7:53:5e:db:74:
ed:79:83:1a:da:a4:cd:dc:b5:65:20:96:83:16:4b:
0f:62:3a:ae:f5:0b:77:10:ff:e6:bf:5c:09:4f:61:
4c:6e:3c:42:c1:97:a0:4e:4b:38:22:9d:20:70:b1:
68:73:f3:70:94:93:39:f1:ec:17:86:03:b9:01:b8:
e5:f2:55:07:90:34:6f:68:b3:9c:da:3f:88:11:a9:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:ED:CE:11:7E:B7:C6:24:42:92:36:D3:F7:ED:93:CC:12:EF:5E:1F
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:08:b5:89:bc:3f:02:9a:8a:68:1b:b0:92:1d:67:c0:5e:38:
65:39:3c:0a:84:72:b8:c5:95:03:97:9b:f8:2d:f3:c7:30:72:
02:b9:9e:87:46:3d:11:fc:48:d4:af:e9:21:23:40:31:d3:2f:
d2:b8:b8:84:c2:d8:c9:71:74:af:b4:0c:6d:4b:d8:6f:da:2e:
09:56:53:04:09:00:e4:1b:53:b5:23:68:a0:fc:23:49:50:e3:
a8:27:f7:3f:fb:f9:fd:70:1e:f8:b0:a1:66:79:c1:c3:d7:b3:
59:a5:b1:9b:ca:30:14:98:0d:0f:9e:1e:13:5e:b3:e7:60:a1:
97:87:fd:0e:2e:b9:13:96:cf:39:12:89:f0:9a:66:d1:59:7f:
89:1a:57:66:6c:62:22:52:fd:a6:04:01:01:82:18:89:eb:76:
9a:87:07:ff:a6:5f:47:45:78:da:f3:49:5c:f6:d9:bb:eb:0a:
8e:12:0e:52:81:dc:11:de:68:68:c3:84:56:51:20:e6:34:75:
16:80:b2:4e:66:37:1c:47:a4:ae:7c:5f:86:a1:d1:a4:0e:9e:
63:04:d6:09:14:ad:13:37:e4:e6:72:93:df:61:45:96:33:c4:
da:d8:de:97:4d:92:fc:3a:9b:a3:42:2e:e2:4d:53:38:cb:6f:
e4:23:46:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:46 2026 by rpki-client