This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: 8aLvFYdinf1b73EEjND9i2tupWhow8QomK1sheD7Oqs=
Subject key identifier: ED:FB:FD:B5:0A:96:CC:24:A6:2A:AC:A9:EC:D5:4C:66:B6:49:AD:2C
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 019C43C76AC8B66E80750C53CEFFC649C1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 19:01:08 +0000
Manifest this update: Mon 09 Feb 2026 19:01:08 +0000
Manifest next update: Tue 10 Feb 2026 19:01:08 +0000
Files and hashes: 1: EdPdMzgnPs41cXxU2dcI-fVK9_o.roa (hash: VU+rMMG4Ct00NxP8HYLLqEFuKnv7Lx/dqWlvPJ9BsVI=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: 6qXS4yKBu1NvCPOlbJgYr4sfSp0VWtLz1VWNJuDzAIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:6a:c8:b6:6e:80:75:0c:53:ce:ff:c6:49:c1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Feb 9 19:01:08 2026 GMT
Not After : Feb 10 19:01:08 2026 GMT
Subject: CN=edfbfdb50a96cc24a62aaca9ecd54c66b649ad2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:f3:26:c6:d6:d9:5a:22:b7:92:eb:9a:35:
34:36:65:b2:bd:b4:8e:4e:7a:de:69:9f:90:27:b5:
26:36:81:1b:a7:3d:d8:6a:6f:85:14:0a:9b:04:ce:
15:43:a0:f1:e0:c0:20:a5:f6:10:05:aa:df:a0:af:
e6:ae:d6:46:59:c4:45:64:a5:42:97:f2:2d:cf:20:
a1:ff:91:61:2d:fc:0a:81:f7:4a:ec:a8:0d:7b:af:
0a:a5:ee:bb:73:9d:5c:a9:f9:13:28:db:c7:cb:de:
48:00:bf:26:4c:f1:26:a9:9e:dd:00:0b:d5:64:96:
67:a8:0b:24:78:05:71:2f:e0:98:11:2a:e8:f3:7e:
7d:00:eb:3f:ed:d9:73:ec:5e:85:d3:d7:74:5c:8e:
36:eb:5e:66:f2:17:b4:0a:6a:35:d0:65:07:37:19:
63:53:74:73:8f:24:03:d0:b2:44:b1:d6:4e:85:67:
73:d9:bf:ed:da:19:9a:ec:37:16:8e:ef:ae:08:a4:
49:6d:e2:57:13:22:53:34:9f:86:43:d2:9c:91:20:
b4:83:9e:95:8f:f0:58:52:e6:63:ca:b9:d5:c5:47:
04:db:9d:6f:a0:28:93:35:01:c5:9c:e9:98:94:29:
9e:6b:37:45:8b:5c:c7:d3:ec:b3:72:4a:91:4a:6c:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FB:FD:B5:0A:96:CC:24:A6:2A:AC:A9:EC:D5:4C:66:B6:49:AD:2C
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:03:15:46:cf:61:59:74:f9:55:f2:d4:e2:cc:ad:92:95:49:
4d:f7:d9:ea:ac:43:e2:74:30:75:d4:aa:10:b8:57:42:c2:3e:
d1:0d:c2:c1:5d:5a:d3:74:df:78:e0:42:a0:4d:a6:6b:e2:bd:
5f:27:43:36:95:19:c9:ca:43:32:76:d0:35:0c:fc:95:aa:a7:
09:73:6b:31:82:72:47:c0:f5:ce:ef:16:98:d5:60:4c:23:5e:
99:dd:54:15:85:72:93:0d:5a:a6:24:24:5f:45:5c:e9:cb:80:
2c:de:8f:e7:fb:65:27:93:e2:f2:40:38:9e:63:27:bc:f1:e0:
69:d0:06:88:d3:22:fe:a7:8b:66:38:75:c3:ba:6f:82:8a:1e:
8b:87:13:5e:d2:32:b5:f4:e9:2c:87:cf:c3:42:28:23:ee:59:
7b:05:12:d7:ac:34:69:98:c2:70:97:69:05:44:06:1c:36:83:
5e:bc:2b:fd:06:a5:85:9c:b2:4a:25:1d:0e:8d:21:9f:bd:dc:
fe:1c:b2:99:ec:f0:1d:62:e5:84:1e:76:5d:48:e3:06:84:5f:
2d:57:86:51:5c:0b:01:07:7a:56:5e:5c:7d:ca:02:d2:b5:12:
c9:c6:3d:58:ac:d7:57:94:ca:8b:77:2d:be:09:e7:6c:ee:d0:
6d:e0:a7:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDx2rItm6AdQxTzv/GScH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2E0NTZjYWQyMzg4MzBiMzhlY2Q0ZDI2N2NhY2ZhNWNk
NWYxZjEwHhcNMjYwMjA5MTkwMTA4WhcNMjYwMjEwMTkwMTA4WjAzMTEwLwYDVQQD
EyhlZGZiZmRiNTBhOTZjYzI0YTYyYWFjYTllY2Q1NGM2NmI2NDlhZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0//zJsbW2Voit5LrmjU0NmWyvbSO
TnreaZ+QJ7UmNoEbpz3Yam+FFAqbBM4VQ6Dx4MAgpfYQBarfoK/mrtZGWcRFZKVC
l/ItzyCh/5FhLfwKgfdK7KgNe68Kpe67c51cqfkTKNvHy95IAL8mTPEmqZ7dAAvV
ZJZnqAskeAVxL+CYESro8359AOs/7dlz7F6F09d0XI42615m8he0Cmo10GUHNxlj
U3RzjyQD0LJEsdZOhWdz2b/t2hma7DcWju+uCKRJbeJXEyJTNJ+GQ9KckSC0g56V
j/BYUuZjyrnVxUcE251voCiTNQHFnOmYlCmeazdFi1zH0+yzckqRSmzQDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO37/bUKlswkpiqsqezVTGa2Sa0sMB8GA1UdIwQY
MBaAFHLKRWytI4gws47NTSZ8rPpc1fHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2It
MmNhMTNkZDFkYjYzLzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2ItMmNhMTNkZDFkYjYz
LzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwMVRs9h
WXT5VfLU4sytkpVJTffZ6qxD4nQwddSqELhXQsI+0Q3CwV1a03TfeOBCoE2ma+K9
XydDNpUZycpDMnbQNQz8laqnCXNrMYJyR8D1zu8WmNVgTCNemd1UFYVykw1apiQk
X0Vc6cuALN6P5/tlJ5Pi8kA4nmMnvPHgadAGiNMi/qeLZjh1w7pvgooei4cTXtIy
tfTpLIfPw0IoI+5ZewUS16w0aZjCcJdpBUQGHDaDXrwr/QalhZyySiUdDo0hn73c
/hyymezwHWLlhB52XUjjBoRfLVeGUVwLAQd6Vl5cfcoC0rUSycY9WKzXV5TKi3ct
vgnnbO7QbeCnKA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:01 2026 by rpki-client