This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
File: iydIPcFsMY5a__gyKTDIF_0ZLJE.mft (raw, json)
Hash identifier: vx0PRrXHiobynHFohbg7aLZW/wvm+m4L03e29HWf/K0=
Subject key identifier: 9D:B3:F6:14:73:5A:30:4D:76:A2:A2:22:E7:A1:54:8F:B2:F0:6B:86
Authority key identifier: 8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
Certificate issuer: /CN=8b27483dc16c318e5afff8322930c817fd192c91
Certificate serial: 019C424670725A59F1E21D64AA17347349EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
Manifest number: 0B70
Signing time: Mon 09 Feb 2026 12:00:38 +0000
Manifest this update: Mon 09 Feb 2026 12:00:38 +0000
Manifest next update: Tue 10 Feb 2026 12:00:38 +0000
Files and hashes: 1: 1-oQkBgC1KtD4YbEgIZgWwDGwMZI.roa (hash: dv8y3sb289eQlJ2it24+CyBcLvJoFUqHwqUDVlJyHUA=)
2: iydIPcFsMY5a__gyKTDIF_0ZLJE.crl (hash: 4A416f/OAVo5y125w3aSl4OKRUkt2oPpFtF/ZAHOASU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:70:72:5a:59:f1:e2:1d:64:aa:17:34:73:49:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b27483dc16c318e5afff8322930c817fd192c91
Validity
Not Before: Feb 9 12:00:38 2026 GMT
Not After : Feb 10 12:00:38 2026 GMT
Subject: CN=9db3f614735a304d76a2a222e7a1548fb2f06b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:74:c0:9e:5e:f5:f1:04:70:de:d9:b5:35:
be:c9:3d:bf:62:88:ff:10:7a:01:fb:4a:a7:fa:cf:
ef:9c:74:86:bb:af:37:5d:f0:74:ae:2a:2f:52:bb:
c1:8a:78:50:bd:fe:ad:d8:13:fe:57:fa:56:5f:0c:
40:a4:56:54:4b:32:7a:91:8d:d0:81:8d:36:40:72:
1f:33:c6:ef:b4:67:e9:8f:7b:d5:74:49:8d:57:76:
23:4e:16:61:03:53:c2:77:3a:15:e1:73:38:eb:a6:
8b:dc:91:e8:8e:11:62:d2:68:97:c7:b2:18:37:ca:
a3:23:cd:2c:40:45:df:d3:91:a5:0e:2b:dd:d8:47:
f4:57:8a:0f:d7:ea:a0:b0:e4:5a:39:a3:f8:c0:4f:
a1:96:81:e0:b1:e4:3f:53:d5:b1:46:57:70:5c:86:
48:fe:11:86:e2:c8:94:7d:e7:1e:57:df:6d:88:8d:
de:7d:b7:0d:8e:7a:94:b1:e8:cc:15:c0:c5:a8:dc:
58:e4:b0:61:b9:50:bb:8e:b0:83:0a:7a:f2:25:b1:
ae:7e:f4:a1:20:eb:76:f8:96:cc:bd:fa:76:51:df:
97:09:13:70:3d:70:6a:1e:4f:1e:73:a1:1e:ff:76:
4c:23:22:2c:12:32:d7:fa:13:e7:23:83:0e:0c:f7:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B3:F6:14:73:5A:30:4D:76:A2:A2:22:E7:A1:54:8F:B2:F0:6B:86
X509v3 Authority Key Identifier:
keyid:8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:23:94:8f:21:00:7e:df:2d:18:34:1b:11:e8:0d:16:4b:7e:
ce:01:42:98:a0:f5:bb:66:d5:5e:1e:2f:4c:d0:bf:9f:7b:09:
59:8f:62:57:9a:ec:ad:18:df:38:98:e8:a3:c8:12:59:57:e2:
13:40:c2:b7:00:da:4b:cb:14:e8:9e:f2:26:1f:31:84:ac:d6:
65:53:d5:37:32:c4:2b:8c:77:2e:0b:75:cc:dc:a5:62:0e:9e:
f5:06:ae:07:e0:8d:50:15:92:30:d9:d5:67:f0:4c:4d:de:b2:
50:46:dd:b2:ee:6b:ba:dc:ee:19:e3:ac:3f:75:5e:1e:18:3f:
84:37:4b:d4:96:cf:ca:c1:1a:26:43:21:af:7b:ad:57:78:c2:
ed:9b:ae:86:91:cf:b9:2e:95:58:15:57:b6:d7:aa:d8:70:1f:
85:71:ba:17:2a:65:5e:4e:1c:d2:16:a8:72:d6:bc:a2:4e:63:
47:64:a6:70:5d:74:33:c3:58:b0:d0:6e:2e:a2:fa:8b:aa:ea:
20:a8:46:ee:db:f1:e3:2d:37:31:f9:94:9e:d5:b9:e1:c2:0e:
bc:a4:e1:a0:52:a7:10:a5:e0:a2:a6:1e:3d:fc:f0:f3:f7:02:
5d:ea:7d:17:e4:f9:d8:3d:aa:1b:7f:a4:97:83:29:9e:87:db:
11:ba:2e:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRnByWlnx4h1kqhc0c0nrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMjc0ODNkYzE2YzMxOGU1YWZmZjgzMjI5MzBjODE3ZmQx
OTJjOTEwHhcNMjYwMjA5MTIwMDM4WhcNMjYwMjEwMTIwMDM4WjAzMTEwLwYDVQQD
Eyg5ZGIzZjYxNDczNWEzMDRkNzZhMmEyMjJlN2ExNTQ4ZmIyZjA2Yjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk250wJ5e9fEEcN7ZtTW+yT2/Yoj/
EHoB+0qn+s/vnHSGu683XfB0riovUrvBinhQvf6t2BP+V/pWXwxApFZUSzJ6kY3Q
gY02QHIfM8bvtGfpj3vVdEmNV3YjThZhA1PCdzoV4XM466aL3JHojhFi0miXx7IY
N8qjI80sQEXf05GlDivd2Ef0V4oP1+qgsORaOaP4wE+hloHgseQ/U9WxRldwXIZI
/hGG4siUfeceV99tiI3efbcNjnqUsejMFcDFqNxY5LBhuVC7jrCDCnryJbGufvSh
IOt2+JbMvfp2Ud+XCRNwPXBqHk8ec6Ee/3ZMIyIsEjLX+hPnI4MODPeqhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2z9hRzWjBNdqKiIuehVI+y8GuGMB8GA1UdIwQY
MBaAFIsnSD3BbDGOWv/4MikwyBf9GSyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81NTllOGMtMzgyNS00OTNkLWE4Yzct
ZmI4OTNlMzkwOGQyLzEvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC81NTllOGMtMzgyNS00OTNkLWE4YzctZmI4OTNlMzkwOGQy
LzEvaXlkSVBjRnNNWTVhX19neUtURElGXzBaTEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyOUjyEA
ft8tGDQbEegNFkt+zgFCmKD1u2bVXh4vTNC/n3sJWY9iV5rsrRjfOJjoo8gSWVfi
E0DCtwDaS8sU6J7yJh8xhKzWZVPVNzLEK4x3Lgt1zNylYg6e9QauB+CNUBWSMNnV
Z/BMTd6yUEbdsu5rutzuGeOsP3VeHhg/hDdL1JbPysEaJkMhr3utV3jC7ZuuhpHP
uS6VWBVXtteq2HAfhXG6FyplXk4c0haocta8ok5jR2SmcF10M8NYsNBuLqL6i6rq
IKhG7tvx4y03MfmUntW54cIOvKThoFKnEKXgoqYePfzw8/cCXep9F+T52D2qG3+k
l4MpnofbEbou5w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:35 2026 by rpki-client