This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: eCnPfYcNt0YeCuoyFrx4dGzqrNquQk4agmacptY2jYQ=
Subject key identifier: 6B:A3:90:4C:4D:06:01:66:68:0A:67:23:89:38:92:01:FF:C5:0E:69
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 019C43FDFABDEEA96EE05768DC8479B05B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 1817
Signing time: Mon 09 Feb 2026 20:00:44 +0000
Manifest this update: Mon 09 Feb 2026 20:00:44 +0000
Manifest next update: Tue 10 Feb 2026 20:00:44 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: 6lV+TO+XcrP1E1jqKeuUDy6mjrb0W2rhxZQrNDU26Ns=)
2: iTc4QiTRTDUVzAoc9HgTQBj9vNk.roa (hash: M7YGFKI/ySmqCxDcz0c66t0IiUvrgr0f2weY7qCCabo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:fa:bd:ee:a9:6e:e0:57:68:dc:84:79:b0:5b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Feb 9 20:00:44 2026 GMT
Not After : Feb 10 20:00:44 2026 GMT
Subject: CN=6ba3904c4d060166680a672389389201ffc50e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:b4:ef:9f:09:0f:1b:13:3d:14:7c:05:55:
43:a1:3e:4f:22:98:33:69:c9:a1:f2:09:e7:78:31:
e7:0e:01:84:17:65:da:da:0e:cc:c8:e8:00:5b:e2:
52:40:78:5b:56:19:d3:e2:15:f6:8c:04:6f:53:18:
29:2d:1a:bd:24:6b:f8:9c:c1:1b:51:41:14:39:58:
36:ed:37:f1:69:04:e3:3c:f5:c5:fa:4a:d5:bd:fe:
9b:c1:34:f1:90:92:a1:a6:cf:d0:b4:28:b6:b2:e8:
45:07:c8:8f:d7:9e:5a:20:99:5f:6e:22:33:66:cf:
86:76:a7:27:d8:6f:9d:91:3c:16:e0:0f:66:b4:ed:
a3:fe:ad:82:c2:0e:34:ed:39:8d:42:aa:66:94:f8:
b7:36:4a:23:15:26:71:7f:16:9f:ff:96:3e:21:9d:
01:1b:ba:8a:fb:64:e2:24:11:5f:34:ea:f8:7d:31:
29:9d:8c:96:0d:0b:b5:9c:7e:29:28:d7:0f:7d:02:
fa:54:c1:da:9e:01:a2:b2:8c:6c:25:1b:10:38:87:
d9:ae:b1:5e:4f:f0:1c:08:d2:b9:df:c0:2f:67:7f:
a7:20:40:f2:ca:80:70:80:a9:6a:10:77:a8:02:15:
43:f8:ea:93:36:ca:83:60:82:0d:fe:6a:d5:07:d8:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A3:90:4C:4D:06:01:66:68:0A:67:23:89:38:92:01:FF:C5:0E:69
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7e:31:9c:fc:1f:71:b8:05:61:fa:62:57:4d:5a:d7:4f:c3:
89:d4:82:5b:29:7c:f0:12:69:94:5c:8e:ca:d3:ff:94:67:b2:
14:ab:25:73:f1:0b:6c:01:4a:80:3e:66:c9:65:c5:36:6f:ab:
5f:0d:d8:8d:3a:2c:14:51:be:e8:bf:3d:fd:d5:ce:3f:29:b6:
f0:e3:99:80:7f:d9:5c:d5:31:22:03:57:b1:10:1e:cd:b1:53:
d3:62:13:8d:c8:7f:7a:d4:d0:4c:f8:62:87:c9:06:47:91:43:
e4:06:0b:dd:b6:df:8f:56:7e:c0:04:c1:0f:6a:14:f8:44:23:
f3:3d:38:f5:70:75:30:13:98:1c:9c:cf:75:cc:74:b3:9f:cb:
f0:b0:98:3c:da:e7:9c:ad:12:bf:c4:c8:14:32:8a:f5:4d:4a:
08:80:bd:d8:62:88:c3:a6:6b:96:32:dc:ec:32:cd:ed:7d:88:
23:9f:cf:07:c0:a5:50:62:6e:3f:c9:51:cf:77:d1:22:8d:e3:
a7:32:10:00:6f:ae:af:50:79:8f:17:bd:32:22:38:f8:af:d7:
ec:a3:b3:71:7b:0d:2b:72:85:5d:d5:53:4d:65:8a:29:d3:ee:
b5:46:dd:90:80:4f:bf:64:4e:ec:8b:49:90:1a:e6:5d:76:e7:
cf:25:42:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/fq97qlu4Fdo3IR5sFtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmRkNTk2MjY3ZDU2ZjdjZTU2ZWJmYWVjODZhMzI3MDhm
ZWRlMDAwHhcNMjYwMjA5MjAwMDQ0WhcNMjYwMjEwMjAwMDQ0WjAzMTEwLwYDVQQD
Eyg2YmEzOTA0YzRkMDYwMTY2NjgwYTY3MjM4OTM4OTIwMWZmYzUwZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkum0758JDxsTPRR8BVVDoT5PIpgz
acmh8gnneDHnDgGEF2Xa2g7MyOgAW+JSQHhbVhnT4hX2jARvUxgpLRq9JGv4nMEb
UUEUOVg27TfxaQTjPPXF+krVvf6bwTTxkJKhps/QtCi2suhFB8iP155aIJlfbiIz
Zs+Gdqcn2G+dkTwW4A9mtO2j/q2Cwg407TmNQqpmlPi3NkojFSZxfxaf/5Y+IZ0B
G7qK+2TiJBFfNOr4fTEpnYyWDQu1nH4pKNcPfQL6VMHangGisoxsJRsQOIfZrrFe
T/AcCNK538AvZ3+nIEDyyoBwgKlqEHeoAhVD+OqTNsqDYIIN/mrVB9juFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGujkExNBgFmaApnI4k4kgH/xQ5pMB8GA1UdIwQY
MBaAFNT91ZYmfVb3zlbr+uyGoycI/t4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAt
NjdhODdkOGEzYjliLzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jZDRhZjYtYjc0Mi00Y2RjLWIzYTAtNjdhODdkOGEzYjli
LzEvMVAzVmxpWjlWdmZPVnV2NjdJYWpKd2otM2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJX4xnPwf
cbgFYfpiV01a10/DidSCWyl88BJplFyOytP/lGeyFKslc/ELbAFKgD5myWXFNm+r
Xw3YjTosFFG+6L89/dXOPym28OOZgH/ZXNUxIgNXsRAezbFT02ITjch/etTQTPhi
h8kGR5FD5AYL3bbfj1Z+wATBD2oU+EQj8z049XB1MBOYHJzPdcx0s5/L8LCYPNrn
nK0Sv8TIFDKK9U1KCIC92GKIw6ZrljLc7DLN7X2II5/PB8ClUGJuP8lRz3fRIo3j
pzIQAG+ur1B5jxe9MiI4+K/X7KOzcXsNK3KFXdVTTWWKKdPutUbdkIBPv2RO7ItJ
kBrmXXbnzyVCDg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:11 2026 by rpki-client