This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: QQEdlbSHi2nmfcSrYbVwsZrCEp7BYyofiGSgF9fr4gs=
Subject key identifier: C6:24:50:9D:8C:01:3D:23:B8:49:99:E2:E3:25:5E:85:1F:9E:67:C1
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 019C1BA6B7840165A9261426C749652B1105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 0B6C
Signing time: Mon 02 Feb 2026 00:00:36 +0000
Manifest this update: Mon 02 Feb 2026 00:00:36 +0000
Manifest next update: Tue 03 Feb 2026 00:00:36 +0000
Files and hashes: 1: A4IQPKMY2VOtogijBuwLkSr_g5k.asa (hash: tj8IYv9LlTx0IXapf0CTWli/SmSES+YcjhcSCMOAsus=)
2: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: Uv/JTrntRO5VkpyGp2ZL47Rr48tJwBrem++ws8QlQ9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:a6:b7:84:01:65:a9:26:14:26:c7:49:65:2b:11:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Feb 2 00:00:36 2026 GMT
Not After : Feb 3 00:00:36 2026 GMT
Subject: CN=c624509d8c013d23b84999e2e3255e851f9e67c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:de:4f:5e:1f:67:78:49:86:5d:5c:a0:88:
8b:f4:32:d8:c9:c5:31:6c:c9:b0:1c:4a:48:6b:ea:
94:cd:11:e1:e1:c6:40:6c:9c:f4:42:9c:6a:0b:6f:
63:db:ea:3c:ec:87:01:c3:2e:c4:84:32:18:39:ef:
bf:2f:16:e3:55:35:ac:67:61:f4:46:09:30:e6:01:
b1:6c:4e:01:62:57:de:10:48:e8:94:0a:2c:6e:15:
09:04:f1:e3:47:34:f7:d4:49:d2:a0:61:11:46:6c:
5a:29:3b:6d:39:99:c2:d6:ea:e9:22:65:df:b6:42:
78:75:36:2d:43:be:ec:7a:8b:41:31:7a:53:0f:c8:
6e:cc:56:29:b4:eb:49:53:77:6a:e9:4b:98:a2:ba:
7e:4c:68:6f:6f:2f:8e:2f:47:ae:52:c1:79:6e:3d:
0e:74:d7:7b:9d:d7:78:e2:38:c3:aa:37:5a:08:29:
c7:8f:a4:33:c8:0e:1d:70:aa:fd:0c:46:5a:85:b3:
30:f3:16:ca:10:f3:3c:d3:19:8e:a0:14:c9:5f:b1:
c2:4b:3f:61:78:de:e8:1e:cc:21:a7:c5:2f:96:c3:
5c:8e:18:30:e4:c9:68:e7:41:4b:bd:35:f9:bb:85:
f7:7f:ed:df:87:26:ca:36:05:aa:26:5c:af:65:7d:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:24:50:9D:8C:01:3D:23:B8:49:99:E2:E3:25:5E:85:1F:9E:67:C1
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e0:73:ec:c6:f1:b1:1c:50:36:43:fe:bf:54:8b:31:9c:99:
8d:ad:57:1a:09:62:b1:fa:cd:e9:a0:6d:d7:b6:67:43:83:57:
30:27:3a:20:9d:91:2b:06:89:eb:42:8e:d1:76:56:82:cc:fa:
d5:86:82:25:e2:89:db:79:e7:2f:87:69:1c:b8:ed:d7:90:b5:
00:3e:67:39:e5:bb:5b:c7:fa:4d:0e:c7:a3:91:e7:46:cc:29:
88:13:19:88:aa:26:10:e1:b5:49:57:55:37:43:42:db:50:60:
84:1f:f6:b2:33:89:f1:aa:e9:7e:05:ca:17:18:d7:51:15:d9:
2f:89:53:86:56:97:09:68:e2:19:9b:ba:ad:17:33:00:e0:48:
37:96:43:d6:d8:ab:0f:fd:63:79:99:33:16:e5:c4:fa:04:38:
10:ab:9b:71:95:22:b0:90:36:13:d5:c7:cf:fc:4c:4e:b0:35:
7f:f5:70:3d:1c:7e:c5:f2:6b:99:d7:92:27:7c:2b:1b:59:d3:
11:66:97:46:cb:58:75:64:1a:69:b5:4c:e0:b8:d5:f7:54:81:
f4:c5:90:ae:57:34:19:72:2a:d8:76:7c:38:40:d6:05:fe:56:
7d:eb:a7:e9:04:55:04:0c:e1:60:11:5b:63:5a:54:bc:cf:b4:
76:44:7d:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwbpreEAWWpJhQmx0llKxEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTI3YTFjZTc3YmNkNGM2NDk3ZTI4NWJmMmJhNmYzMjQ0
MzllYjgwHhcNMjYwMjAyMDAwMDM2WhcNMjYwMjAzMDAwMDM2WjAzMTEwLwYDVQQD
EyhjNjI0NTA5ZDhjMDEzZDIzYjg0OTk5ZTJlMzI1NWU4NTFmOWU2N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G/eT14fZ3hJhl1coIiL9DLYycUx
bMmwHEpIa+qUzRHh4cZAbJz0QpxqC29j2+o87IcBwy7EhDIYOe+/LxbjVTWsZ2H0
Rgkw5gGxbE4BYlfeEEjolAosbhUJBPHjRzT31EnSoGERRmxaKTttOZnC1urpImXf
tkJ4dTYtQ77seotBMXpTD8huzFYptOtJU3dq6UuYorp+TGhvby+OL0euUsF5bj0O
dNd7ndd44jjDqjdaCCnHj6QzyA4dcKr9DEZahbMw8xbKEPM80xmOoBTJX7HCSz9h
eN7oHswhp8UvlsNcjhgw5Mlo50FLvTX5u4X3f+3fhybKNgWqJlyvZX18PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYkUJ2MAT0juEmZ4uMlXoUfnmfBMB8GA1UdIwQY
MBaAFHDiehzne81MZJfihb8rpvMkQ564MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2Mt
MGJlYzk2Nzg3OTM3LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2MtMGJlYzk2Nzg3OTM3
LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOBz7Mbx
sRxQNkP+v1SLMZyZja1XGglisfrN6aBt17ZnQ4NXMCc6IJ2RKwaJ60KO0XZWgsz6
1YaCJeKJ23nnL4dpHLjt15C1AD5nOeW7W8f6TQ7Ho5HnRswpiBMZiKomEOG1SVdV
N0NC21BghB/2sjOJ8arpfgXKFxjXURXZL4lThlaXCWjiGZu6rRczAOBIN5ZD1tir
D/1jeZkzFuXE+gQ4EKubcZUisJA2E9XHz/xMTrA1f/VwPRx+xfJrmdeSJ3wrG1nT
EWaXRstYdWQaabVM4LjV91SB9MWQrlc0GXIq2HZ8OEDWBf5Wfeun6QRVBAzhYBFb
Y1pUvM+0dkR9/A==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:50 2026 by rpki-client