This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier: +AOgAyXMhput8YogqBmn84ylF9MR+LSmgeX9NnBeCUE=
Subject key identifier: A2:87:84:C6:67:C9:B1:8A:F5:32:39:1B:CB:5F:54:AB:A5:A8:C4:7E
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019C329CB1D3778308E7DA41E8B41945F767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number: 181E
Signing time: Fri 06 Feb 2026 11:00:55 +0000
Manifest this update: Fri 06 Feb 2026 11:00:55 +0000
Manifest next update: Sat 07 Feb 2026 11:00:55 +0000
Files and hashes: 1: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=)
2: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=)
3: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=)
4: jvhkF9zZUoCtiIStjQVfFpY-eCA.roa (hash: a828Rcu57Q2acj26tMyqKDV9+DfqcT8p0FxdBA7X02w=)
5: mHSXqHaswANkLe-lLH1pLGWb5cg.roa (hash: Us+Pye2v9h2+HPNZe5BkW94pIt7c48UM8z1k0a6qZ/k=)
6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: HEMkRh+bewUY3p7UshuZ3XjtrQ+ExUPVNblE0+fOkCA=)
7: utrEgwJwLbTpHCfcvjESTRVItuo.roa (hash: 40MtnQyHLkVsVsOjvVmmsz/QywUZ/3iyuCNgoHLxl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Feb 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:32:9c:b1:d3:77:83:08:e7:da:41:e8:b4:19:45:f7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Feb 6 11:00:55 2026 GMT
Not After : Feb 7 11:00:55 2026 GMT
Subject: CN=a28784c667c9b18af532391bcb5f54aba5a8c47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:58:5a:14:6a:8f:e4:5d:ae:97:7f:f0:d1:
72:f8:62:11:f7:60:f9:0a:6e:57:f0:56:c1:60:0f:
91:4f:1f:cd:90:8f:7b:cc:d6:09:f8:bd:44:db:ea:
de:7c:9a:1f:52:cc:19:08:b7:52:f1:44:26:55:bb:
f4:ef:45:84:92:3b:bd:2c:3d:4c:66:ac:89:d4:4e:
f9:c1:cf:c4:df:f3:47:87:37:74:0f:18:c2:1c:9a:
fe:ff:77:d5:c0:68:c4:a4:ca:57:80:bc:59:45:5d:
97:c7:4a:73:2c:f9:ce:63:fc:99:5a:34:9d:a4:52:
c1:6e:13:5e:c5:09:dd:4d:75:22:21:57:24:cb:69:
11:26:2d:62:d4:53:aa:2e:c3:4b:cb:80:3b:01:e5:
e5:30:1b:72:c8:7e:b8:11:14:97:2b:7d:45:19:57:
8a:d6:da:16:a9:86:79:bc:2f:10:d4:74:af:76:06:
7b:0a:58:49:4e:75:cc:7c:0e:b5:52:a8:9a:49:4d:
d7:2f:2d:a0:96:4f:63:df:a6:26:67:62:57:20:31:
23:f9:ce:5b:20:02:2c:fa:43:8d:ec:45:fe:48:fb:
0e:52:fb:03:48:08:40:71:10:20:6f:15:fd:5f:cf:
49:19:15:03:1b:1b:c5:ef:7e:ec:55:cd:07:da:14:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:87:84:C6:67:C9:B1:8A:F5:32:39:1B:CB:5F:54:AB:A5:A8:C4:7E
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2a:50:ce:0b:87:73:61:cf:d0:ee:9a:a9:ac:5a:9b:4f:0a:
72:32:d2:a1:b2:ab:ab:5a:6a:9b:63:d8:dd:cd:1d:7e:97:de:
4a:9e:f3:78:2f:83:dc:b7:21:52:8d:e1:0c:b2:81:66:d7:64:
c2:cf:06:30:7f:70:cb:b3:c6:7e:fc:a1:f5:5a:c6:ab:57:92:
be:fe:c0:6d:e6:9d:43:bc:e9:51:24:54:16:0f:c8:d2:2a:cf:
ec:f8:bf:87:fc:b1:df:97:ca:fe:8c:c7:22:77:1b:e3:57:1f:
59:a5:a4:8f:e5:6a:dc:c0:9a:e4:c3:97:26:50:18:80:19:e7:
39:f9:80:8e:5f:89:88:b7:a8:c6:6d:6d:96:43:ff:73:3d:2c:
a3:84:24:ff:74:ef:e0:7d:02:46:d0:b6:e4:5c:22:c9:ec:54:
e1:d7:f6:8c:a0:d3:ac:d2:23:1f:f7:3c:3f:a7:29:be:1d:a8:
ba:2f:3d:2f:96:00:c6:39:47:c5:7d:42:ab:0b:20:5c:97:0c:
93:28:e3:e6:da:f0:85:75:1c:e6:90:e7:43:f7:51:0b:9b:44:
91:56:6b:17:0f:ce:4b:a3:74:2b:e6:1b:1d:3f:a5:c2:65:6f:
88:36:d8:3d:9c:42:b2:0a:68:38:e3:b6:ce:f2:17:7e:5e:52:
f6:b4:31:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwynLHTd4MI59pB6LQZRfdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjYwMjA2MTEwMDU1WhcNMjYwMjA3MTEwMDU1WjAzMTEwLwYDVQQD
EyhhMjg3ODRjNjY3YzliMThhZjUzMjM5MWJjYjVmNTRhYmE1YThjNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6C5YWhRqj+Rdrpd/8NFy+GIR92D5
Cm5X8FbBYA+RTx/NkI97zNYJ+L1E2+refJofUswZCLdS8UQmVbv070WEkju9LD1M
ZqyJ1E75wc/E3/NHhzd0DxjCHJr+/3fVwGjEpMpXgLxZRV2Xx0pzLPnOY/yZWjSd
pFLBbhNexQndTXUiIVcky2kRJi1i1FOqLsNLy4A7AeXlMBtyyH64ERSXK31FGVeK
1toWqYZ5vC8Q1HSvdgZ7ClhJTnXMfA61UqiaSU3XLy2glk9j36YmZ2JXIDEj+c5b
IAIs+kON7EX+SPsOUvsDSAhAcRAgbxX9X89JGRUDGxvF737sVc0H2hT3MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKHhMZnybGK9TI5G8tfVKulqMR+MB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbipQzguH
c2HP0O6aqaxam08KcjLSobKrq1pqm2PY3c0dfpfeSp7zeC+D3LchUo3hDLKBZtdk
ws8GMH9wy7PGfvyh9VrGq1eSvv7AbeadQ7zpUSRUFg/I0irP7Pi/h/yx35fK/ozH
Incb41cfWaWkj+Vq3MCa5MOXJlAYgBnnOfmAjl+JiLeoxm1tlkP/cz0so4Qk/3Tv
4H0CRtC25FwiyexU4df2jKDTrNIjH/c8P6cpvh2oui89L5YAxjlHxX1CqwsgXJcM
kyjj5trwhXUc5pDnQ/dRC5tEkVZrFw/OS6N0K+YbHT+lwmVviDbYPZxCsgpoOOO2
zvIXfl5S9rQxXQ==
-----END CERTIFICATE-----
Generated at Fri Feb 6 21:15:24 2026 by rpki-client