This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File: 70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier: zzlG58QccTg+4tSP5DOBcB2eEQz8vQ7b36koA7w/64E=
Subject key identifier: B0:12:FF:0D:12:85:C7:0C:4F:46:42:3B:6F:66:FB:43:93:CF:BE:AE
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer: /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial: 019C44A2C60A97583273EBFD42A9147E03FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number: 0C3A
Signing time: Mon 09 Feb 2026 23:00:44 +0000
Manifest this update: Mon 09 Feb 2026 23:00:44 +0000
Manifest next update: Tue 10 Feb 2026 23:00:44 +0000
Files and hashes: 1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: ahl3QGWq/wFzRUhQLVAqgR6qoXmovcN9Y1er1cERBLY=)
2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:c6:0a:97:58:32:73:eb:fd:42:a9:14:7e:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
Validity
Not Before: Feb 9 23:00:44 2026 GMT
Not After : Feb 10 23:00:44 2026 GMT
Subject: CN=b012ff0d1285c70c4f46423b6f66fb4393cfbeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:75:14:29:d4:1b:31:04:74:28:f5:11:33:
1e:70:2c:a9:e0:79:0b:f5:c9:91:9e:28:83:dc:02:
b0:9c:5b:7b:0b:f5:0a:74:c5:ff:a1:29:ee:ce:aa:
d9:97:87:85:e8:2f:72:d9:7a:f3:69:90:7a:9f:4a:
cf:d4:b8:46:eb:7e:8e:c3:81:67:84:86:42:12:1a:
0b:c0:12:a8:20:de:a5:50:dc:00:73:09:f4:43:1f:
07:1c:54:34:5e:4a:d2:88:b4:1d:59:84:46:2e:0e:
57:1d:a3:ca:b1:65:ff:a1:0e:c5:7a:16:da:82:67:
7b:7b:f7:0f:80:2c:ec:95:6f:dc:fe:44:b3:fe:df:
a7:ab:d5:c3:16:28:ed:07:70:d2:07:a3:b2:b5:4d:
63:8a:07:a2:73:ce:b2:b4:0a:fd:04:f8:b1:3c:fa:
33:9c:7e:a9:37:87:7a:3c:5d:20:24:48:b6:1b:e0:
57:43:33:f4:96:0e:17:ef:30:c3:f4:1c:eb:24:8c:
3c:66:d6:c4:01:6a:c7:b0:c3:61:c4:a1:a1:05:b4:
0e:7b:38:78:8d:5a:fd:a8:f5:f0:7f:2c:ef:55:98:
dd:dc:af:37:ff:a2:b0:45:b2:dc:28:d8:e2:b8:16:
42:74:15:bf:5f:93:aa:7e:b3:53:ce:c4:bd:c0:d6:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:12:FF:0D:12:85:C7:0C:4F:46:42:3B:6F:66:FB:43:93:CF:BE:AE
X509v3 Authority Key Identifier:
keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:44:f5:01:41:d8:6a:14:51:c9:65:c0:c7:f5:63:3e:ea:d4:
0b:a6:e8:09:3d:51:b2:82:51:2d:88:92:4a:ea:b4:7b:df:95:
17:3e:c9:cc:29:5c:aa:24:df:58:7b:86:c8:03:39:ed:cb:97:
10:a3:04:bc:79:9e:eb:d6:1e:43:f3:fc:0b:45:b9:72:98:f9:
26:fc:2b:50:14:32:05:6d:aa:65:34:87:10:54:f8:96:ca:09:
dc:5a:1e:78:07:55:38:ec:f0:1e:98:30:33:f4:ca:c2:9b:93:
c1:e2:87:59:07:a1:8a:a4:79:36:af:be:a6:e7:35:03:37:81:
c6:a8:af:35:d5:35:67:d1:f1:18:4a:c5:61:63:d6:4d:98:44:
76:32:c9:7f:1f:21:80:bf:a4:41:f4:cb:e7:c0:ff:bc:06:4d:
58:2c:2d:92:8f:92:ae:88:4d:34:63:74:40:3e:9a:b6:08:41:
30:7a:79:ce:91:40:9e:72:de:3f:1f:0e:b2:da:b0:6c:e7:92:
b4:a7:a2:36:ad:35:02:ad:49:c9:96:17:7e:21:c6:53:cc:61:
18:1f:c9:85:b8:d4:6e:b1:00:dd:be:f1:fc:11:3e:de:85:ef:
0f:57:fc:75:cd:5d:d5:7d:7f:34:48:d5:6d:b7:cf:36:ab:18:
b0:af:3c:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEosYKl1gyc+v9QqkUfgP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDljYWMxNTFkYjE1OGVkNmE4NTYzMzU4NTU1NTdmNGU3
NWY3MjUwHhcNMjYwMjA5MjMwMDQ0WhcNMjYwMjEwMjMwMDQ0WjAzMTEwLwYDVQQD
EyhiMDEyZmYwZDEyODVjNzBjNGY0NjQyM2I2ZjY2ZmI0MzkzY2ZiZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfF1FCnUGzEEdCj1ETMecCyp4HkL
9cmRniiD3AKwnFt7C/UKdMX/oSnuzqrZl4eF6C9y2XrzaZB6n0rP1LhG636Ow4Fn
hIZCEhoLwBKoIN6lUNwAcwn0Qx8HHFQ0XkrSiLQdWYRGLg5XHaPKsWX/oQ7Fehba
gmd7e/cPgCzslW/c/kSz/t+nq9XDFijtB3DSB6OytU1jigeic86ytAr9BPixPPoz
nH6pN4d6PF0gJEi2G+BXQzP0lg4X7zDD9BzrJIw8ZtbEAWrHsMNhxKGhBbQOezh4
jVr9qPXwfyzvVZjd3K83/6KwRbLcKNjiuBZCdBW/X5OqfrNTzsS9wNYVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAS/w0ShccMT0ZCO29m+0OTz76uMB8GA1UdIwQY
MBaAFO9JysFR2xWO1qhWM1hVVX9OdfclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2It
ZDhhN2EyY2M4NzNiLzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80ZDRlNGMtZDZhOS00MjJkLWJhY2ItZDhhN2EyY2M4NzNi
LzEvNzBuS3dWSGJGWTdXcUZZeldGVlZmMDUxOXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFET1AUHY
ahRRyWXAx/VjPurUC6boCT1RsoJRLYiSSuq0e9+VFz7JzClcqiTfWHuGyAM57cuX
EKMEvHme69YeQ/P8C0W5cpj5JvwrUBQyBW2qZTSHEFT4lsoJ3FoeeAdVOOzwHpgw
M/TKwpuTweKHWQehiqR5Nq++puc1AzeBxqivNdU1Z9HxGErFYWPWTZhEdjLJfx8h
gL+kQfTL58D/vAZNWCwtko+SrohNNGN0QD6atghBMHp5zpFAnnLePx8OstqwbOeS
tKeiNq01Aq1JyZYXfiHGU8xhGB/JhbjUbrEA3b7x/BE+3oXvD1f8dc1d1X1/NEjV
bbfPNqsYsK88HA==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:36 2026 by rpki-client