This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: MpPHfQzSywME6Oer8arTUnfa1JsOtfUAv+fepp3MxJQ=
Subject key identifier: 97:61:BB:76:EF:CE:70:D9:82:76:6B:4C:0F:43:C9:82:9B:4D:ED:25
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 019C41A1A656980E36FB9EE6BEEFD720662F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0B07
Signing time: Mon 09 Feb 2026 09:00:38 +0000
Manifest this update: Mon 09 Feb 2026 09:00:38 +0000
Manifest next update: Tue 10 Feb 2026 09:00:38 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: bK9oPbMOikC9nlMmuuKVyphrxd9VZFbz/fGzHhVcvZ0=)
2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:a6:56:98:0e:36:fb:9e:e6:be:ef:d7:20:66:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Feb 9 09:00:38 2026 GMT
Not After : Feb 10 09:00:38 2026 GMT
Subject: CN=9761bb76efce70d982766b4c0f43c9829b4ded25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:c2:00:01:88:c8:fa:3c:a5:b7:9c:b1:e1:
4a:5a:4d:2d:14:9d:b5:57:50:54:1c:d5:2d:f1:7f:
d3:10:55:b3:78:84:39:7a:ed:e1:d1:f0:0e:92:d3:
f8:34:7b:15:cd:0c:ae:1a:28:4c:5b:38:1d:90:74:
53:e0:dc:ef:85:ae:8b:ac:62:20:77:68:a5:8c:91:
20:6e:46:27:ba:98:e3:3f:4b:3f:f3:cc:a2:f9:28:
6a:4e:0f:a3:6a:85:84:ca:34:49:fe:be:08:ba:5a:
df:07:78:7b:25:ed:e9:03:c1:18:de:91:b0:85:9c:
9d:b3:d4:fe:5d:e0:97:31:83:67:ed:3d:98:91:28:
d0:a3:8f:1b:21:a6:a7:42:cb:d8:7f:f7:a2:d5:cf:
03:46:68:d1:75:5d:ac:1f:1e:5c:e7:f6:a5:bd:7e:
f8:0f:6a:34:19:d8:8a:66:89:d4:eb:71:98:1d:b9:
60:e3:e2:d3:5a:24:79:06:a1:e6:e7:a8:c4:ef:69:
06:ce:fa:57:72:bf:94:d3:ac:84:9c:7d:e4:cf:db:
54:46:6e:15:96:1d:2f:43:97:2e:1c:5a:d9:86:ce:
87:7c:c0:42:09:d3:f4:cd:28:b3:f6:ca:2b:e3:b0:
88:d1:13:e4:97:43:66:ff:83:e2:a7:78:10:da:8f:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:BB:76:EF:CE:70:D9:82:76:6B:4C:0F:43:C9:82:9B:4D:ED:25
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b2:38:0d:26:b3:96:1d:4b:95:41:35:78:01:79:49:63:2d:
e3:99:9c:5a:9a:3d:01:c0:9b:da:ee:f6:40:d9:18:d7:ba:97:
74:97:b4:ce:7f:b3:7d:1c:aa:d8:47:c3:5e:4f:fe:48:f4:aa:
06:5a:52:7c:6f:de:3b:d7:89:87:64:1c:63:2d:aa:89:34:83:
f6:45:7f:0b:59:7f:8c:6d:9e:a7:02:50:54:46:39:65:fc:20:
f3:a1:b2:b8:a6:16:50:6b:af:92:85:5d:55:5e:6b:d5:7e:f3:
8a:a5:55:d8:7a:48:fc:88:26:9c:0f:a0:73:a1:06:16:fd:53:
e7:a2:ab:d7:9d:7d:0b:5f:be:86:d2:e2:44:3f:ff:17:2a:7c:
eb:97:17:1c:99:e4:76:1e:58:a3:00:8e:c5:1b:a5:73:54:4e:
c0:30:db:3f:ad:c5:e5:c3:91:8a:34:5e:c7:79:59:30:25:1d:
f3:bb:a1:3a:ec:a3:60:fb:a6:69:c9:c8:da:7b:9a:29:16:91:
c1:29:83:4b:53:c1:ae:1a:de:12:80:a9:42:e8:81:18:f7:31:
c2:87:1a:63:d5:17:97:a3:59:55:bc:72:1b:3a:b7:42:d7:fa:
88:0c:92:e5:2f:e2:37:e4:c7:d4:8c:d8:be:5a:03:44:fe:66:
fc:6e:99:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoaZWmA42+57mvu/XIGYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjE0ZThkMGIzZGVmYjAzMDQyNzAxMzBkMTE0N2FlMGRk
OTJkOGIwHhcNMjYwMjA5MDkwMDM4WhcNMjYwMjEwMDkwMDM4WjAzMTEwLwYDVQQD
Eyg5NzYxYmI3NmVmY2U3MGQ5ODI3NjZiNGMwZjQzYzk4MjliNGRlZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUDCAAGIyPo8pbecseFKWk0tFJ21
V1BUHNUt8X/TEFWzeIQ5eu3h0fAOktP4NHsVzQyuGihMWzgdkHRT4Nzvha6LrGIg
d2iljJEgbkYnupjjP0s/88yi+ShqTg+jaoWEyjRJ/r4IulrfB3h7Je3pA8EY3pGw
hZyds9T+XeCXMYNn7T2YkSjQo48bIaanQsvYf/ei1c8DRmjRdV2sHx5c5/alvX74
D2o0GdiKZonU63GYHblg4+LTWiR5BqHm56jE72kGzvpXcr+U06yEnH3kz9tURm4V
lh0vQ5cuHFrZhs6HfMBCCdP0zSiz9sor47CI0RPkl0Nm/4Pip3gQ2o/CpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdhu3bvznDZgnZrTA9DyYKbTe0lMB8GA1UdIwQY
MBaAFBvxTo0LPe+wMEJwEw0RR64N2S2LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMt
ODE5YTI1MzIyNWNjLzEvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lYWRhZmUtNmM5ZC00YWUwLTg3MzMtODE5YTI1MzIyNWNj
LzEvR19GT2pRczk3N0F3UW5BVERSRkhyZzNaTFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrI4DSaz
lh1LlUE1eAF5SWMt45mcWpo9AcCb2u72QNkY17qXdJe0zn+zfRyq2EfDXk/+SPSq
BlpSfG/eO9eJh2QcYy2qiTSD9kV/C1l/jG2epwJQVEY5Zfwg86GyuKYWUGuvkoVd
VV5r1X7ziqVV2HpI/IgmnA+gc6EGFv1T56Kr1519C1++htLiRD//Fyp865cXHJnk
dh5YowCOxRulc1ROwDDbP63F5cORijRex3lZMCUd87uhOuyjYPumacnI2nuaKRaR
wSmDS1PBrhreEoCpQuiBGPcxwocaY9UXl6NZVbxyGzq3Qtf6iAyS5S/iN+TH1IzY
vloDRP5m/G6ZOA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:58 2026 by rpki-client