This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier: XevUeczefeK7AwNgjWu2eSjmfD3pVVpP28YHfvnFwa4=
Subject key identifier: 78:BB:97:20:40:45:2D:60:FB:EC:9B:2F:8E:0E:6F:BA:92:8F:33:6F
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 019C420FFD24F271C02481A58F4484CEBDD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number: 0C62
Signing time: Mon 09 Feb 2026 11:01:09 +0000
Manifest this update: Mon 09 Feb 2026 11:01:09 +0000
Manifest next update: Tue 10 Feb 2026 11:01:09 +0000
Files and hashes: 1: 6Jo867Q7kI_xg37Z2hR0Zp-bKLA.roa (hash: nuQ+eCxmU3VLRBrNEQL/R2CLOaS7uJaHx+gJkQcGWrE=)
2: bpCdtlID1rH2DrjVzMcBmork2aQ.roa (hash: BSKDPkYhU8I5fR9wBcNo+U5cc/fHr2mCsZj2Lep7Q84=)
3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: WKrGag74LwjtkezZekHLxYqoYz49DVmI0Y7WJM+UqoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:fd:24:f2:71:c0:24:81:a5:8f:44:84:ce:bd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Feb 9 11:01:09 2026 GMT
Not After : Feb 10 11:01:09 2026 GMT
Subject: CN=78bb972040452d60fbec9b2f8e0e6fba928f336f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:fd:8d:07:71:f2:8f:1b:40:55:fe:c1:53:
65:54:f5:f3:1c:b6:be:20:26:d6:4a:78:f1:3f:9a:
30:3f:33:cc:d2:0d:fa:c5:da:c0:7e:c7:d6:f6:c8:
52:7f:69:d4:9b:f5:f9:4b:27:dc:0e:4e:a5:45:af:
c7:a0:7a:dc:2d:eb:f7:3f:62:36:a1:d0:82:63:a6:
23:b3:2e:4c:db:26:2b:b9:12:13:9b:03:ea:16:5c:
de:88:d1:b4:73:5d:45:3e:cb:4f:e0:61:40:f0:47:
fc:47:31:78:fb:05:92:16:13:cc:00:0d:08:f7:1e:
5c:fe:bc:4f:18:d8:6f:2a:36:f5:67:72:b2:a2:56:
43:75:42:41:bf:3a:37:d3:73:9d:53:47:41:dc:0a:
d2:be:38:96:a9:99:4e:ab:83:d0:b7:45:d3:00:6f:
92:fb:b6:0c:8c:53:d4:ed:f4:e8:df:81:84:0f:72:
34:06:76:60:56:79:b0:45:24:e6:68:a0:e0:7e:e9:
65:3a:35:4c:9e:15:d5:dd:e2:b5:16:be:9c:e8:04:
fe:97:b4:63:c1:f5:20:d5:74:b9:0d:ed:09:75:bd:
47:b6:a9:53:62:fa:6e:d8:e1:d5:2f:8c:58:32:b5:
6d:69:88:e3:38:8e:19:dd:93:98:d0:de:8e:b3:37:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BB:97:20:40:45:2D:60:FB:EC:9B:2F:8E:0E:6F:BA:92:8F:33:6F
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:19:e9:f3:3e:1d:ad:ae:74:67:38:a5:ed:4c:bb:ef:ed:ec:
93:72:72:a7:2f:9b:1c:b3:e1:ad:5a:c6:19:43:54:54:29:fe:
72:70:1a:74:d3:d3:e2:88:33:3d:1f:c4:ce:da:37:31:f8:5b:
10:86:10:ae:5b:97:d6:c8:21:54:74:aa:9d:ce:d1:8b:e2:bb:
9e:7f:7f:d2:67:6b:1d:8a:c5:6d:e2:ea:d8:cb:74:03:2d:e7:
2e:52:58:df:ca:87:31:61:e3:db:74:3d:58:c1:70:b5:0d:2f:
76:04:22:77:18:63:35:d6:2e:3c:a3:c2:ca:ba:a9:cf:ad:2d:
06:79:47:59:85:8c:21:eb:50:a1:6b:9b:7a:b1:3b:d2:30:70:
0d:b5:e3:fe:a8:3c:f6:fa:6f:0b:dc:ec:3b:a8:a5:98:3f:08:
e6:89:ab:72:45:1b:14:0f:33:d0:15:e8:b9:28:56:4b:84:b2:
87:53:ca:29:47:f1:80:5e:9e:a3:f1:a0:6d:8b:5a:e2:8b:a4:
45:c0:54:64:b0:28:eb:5e:44:37:0c:a4:66:53:7d:81:0f:93:
8b:59:d9:77:ab:b0:6f:5a:ee:3c:6e:c2:ee:53:2f:39:a7:b6:
08:b0:95:d3:cb:25:9f:31:97:82:aa:2c:50:28:75:c6:65:98:
bb:17:74:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD/0k8nHAJIGlj0SEzr3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDNhM2YxMDY5ZmNkNTEyZGE1MTRmNjZkNmVlMzRiYTNk
ZWJiMGYwHhcNMjYwMjA5MTEwMTA5WhcNMjYwMjEwMTEwMTA5WjAzMTEwLwYDVQQD
Eyg3OGJiOTcyMDQwNDUyZDYwZmJlYzliMmY4ZTBlNmZiYTkyOGYzMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAP9jQdx8o8bQFX+wVNlVPXzHLa+
ICbWSnjxP5owPzPM0g36xdrAfsfW9shSf2nUm/X5SyfcDk6lRa/HoHrcLev3P2I2
odCCY6Yjsy5M2yYruRITmwPqFlzeiNG0c11FPstP4GFA8Ef8RzF4+wWSFhPMAA0I
9x5c/rxPGNhvKjb1Z3KyolZDdUJBvzo303OdU0dB3ArSvjiWqZlOq4PQt0XTAG+S
+7YMjFPU7fTo34GED3I0BnZgVnmwRSTmaKDgfullOjVMnhXV3eK1Fr6c6AT+l7Rj
wfUg1XS5De0Jdb1HtqlTYvpu2OHVL4xYMrVtaYjjOI4Z3ZOY0N6OszfzqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHi7lyBARS1g++ybL44Ob7qSjzNvMB8GA1UdIwQY
MBaAFM/To/EGn81RLaUU9m1u40uj3rsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2Mjkt
MzgyOTIwMTU1ZmZiLzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2MjktMzgyOTIwMTU1ZmZi
LzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBnp8z4d
ra50Zzil7Uy77+3sk3Jypy+bHLPhrVrGGUNUVCn+cnAadNPT4ogzPR/Ezto3Mfhb
EIYQrluX1sghVHSqnc7Ri+K7nn9/0mdrHYrFbeLq2Mt0Ay3nLlJY38qHMWHj23Q9
WMFwtQ0vdgQidxhjNdYuPKPCyrqpz60tBnlHWYWMIetQoWuberE70jBwDbXj/qg8
9vpvC9zsO6ilmD8I5omrckUbFA8z0BXouShWS4Syh1PKKUfxgF6eo/GgbYta4ouk
RcBUZLAo615ENwykZlN9gQ+Ti1nZd6uwb1ruPG7C7lMvOae2CLCV08slnzGXgqos
UCh1xmWYuxd0XQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:36 2026 by rpki-client