This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: 4Zd87EEnyjyFBN9eZHYbQxl3emh9SFIueKzsRXjDhsg=
Subject key identifier: D4:D2:43:17:F0:9D:97:17:A9:7D:21:B8:41:B0:41:8D:95:BB:D1:B0
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019C408F594D9233ECC1ECBD6264AF32A992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 1012
Signing time: Mon 09 Feb 2026 04:01:02 +0000
Manifest this update: Mon 09 Feb 2026 04:01:02 +0000
Manifest next update: Tue 10 Feb 2026 04:01:02 +0000
Files and hashes: 1: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=)
2: ERNFrnzBGMp5dbReFDeBkgmcPh8.roa (hash: fopuSknYAN9eY8CjJVKKrYqlanNz4e2UGCvAXKYoocE=)
3: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=)
4: ZzjkBXr5q1g4RTOv6r81K4wPzek.roa (hash: EbxKJ4vDtHIhISfCa5emGMn2e3XIMHISVR6d79MhkPc=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: hO3sEgb6H1CuYdGOigaUKiHKr3ovht3Ibksht3DdQFE=)
6: uQF7IyytbS3yrbTg44uQRPpFYao.roa (hash: k+4BWSV4vpxlK8x4wwgoZ+fmKkoDTHmAUh9+Y4xZiic=)
7: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=)
8: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:8f:59:4d:92:33:ec:c1:ec:bd:62:64:af:32:a9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Feb 9 04:01:02 2026 GMT
Not After : Feb 10 04:01:02 2026 GMT
Subject: CN=d4d24317f09d9717a97d21b841b0418d95bbd1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:30:8a:5f:70:7e:41:df:4f:f2:bc:7d:65:
79:b1:36:f8:35:17:f8:43:71:8b:ce:a6:b3:c8:dd:
88:80:c7:cd:48:24:81:3d:d8:0c:0e:74:8a:0c:5a:
5d:eb:59:8a:a8:5e:25:4d:a1:4d:fb:3e:7e:03:e2:
0c:9d:cb:7c:b9:a2:90:e4:f7:b8:61:dd:f0:e2:c0:
12:28:e3:82:b8:89:15:27:57:6a:9b:b8:d1:77:70:
4b:f4:a3:cf:64:7c:52:7f:c8:75:27:63:ff:58:00:
c5:a6:a9:aa:20:e0:35:68:06:36:e7:9c:f0:bf:9b:
84:bf:03:3c:4f:b7:f0:6a:70:31:14:b2:c8:43:c8:
8b:2b:b0:1c:16:dd:0f:69:b5:a6:9f:88:65:48:db:
cb:f7:32:f8:ff:ba:2f:db:22:eb:ab:44:d8:52:d1:
3d:91:df:39:92:71:35:c6:a7:52:45:99:3a:52:d1:
ff:ae:51:b4:60:c1:1e:0c:05:82:a5:6b:f6:51:88:
da:98:ba:1c:dd:ce:50:06:8b:3f:22:f6:9b:a9:53:
b9:19:08:20:7d:62:55:80:52:7f:18:9d:fd:20:f7:
73:73:1a:2a:f4:97:09:6c:55:c1:2b:a7:8f:1a:6f:
c3:f4:d1:f3:0e:42:f1:92:ae:18:31:56:df:76:4d:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:43:17:F0:9D:97:17:A9:7D:21:B8:41:B0:41:8D:95:BB:D1:B0
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9f:29:93:ca:87:02:21:12:cc:f9:e1:0c:dc:8c:63:31:8c:
9e:bf:6b:42:8c:39:7f:93:b5:56:2e:04:f1:19:6f:95:99:54:
c0:4d:18:0c:b0:0a:94:bb:98:ac:a7:f8:5e:7f:4d:e5:67:65:
29:3d:0d:34:e1:6f:6b:7c:dd:e6:a9:ba:03:31:60:f9:86:71:
eb:dd:4b:fc:b7:2a:39:4c:ac:27:00:dd:7e:88:4b:ee:23:ef:
2c:8e:3d:d4:f2:77:e2:8e:b7:4e:3c:46:fc:af:e9:2d:c1:41:
0d:00:14:7c:f7:37:52:7c:52:cb:94:08:9f:b2:a8:d6:7b:eb:
22:7f:b9:e6:03:11:48:63:7b:eb:3f:84:e7:7e:f0:05:5b:47:
45:64:d9:54:28:e6:b7:a0:91:82:eb:26:36:40:ca:fb:93:33:
52:c2:f1:28:93:7d:97:69:33:da:fd:3b:ed:e4:79:89:a4:75:
d9:0f:49:f4:ea:80:93:19:40:36:f2:07:09:dd:ed:66:9d:ad:
51:cb:34:20:af:75:17:3a:6d:00:d6:a0:06:43:69:f5:29:51:
eb:08:7a:66:83:b9:78:b0:aa:78:31:18:39:f6:c7:b3:e9:01:
2f:12:21:a7:a5:3a:fa:90:7c:12:67:2a:a0:1a:6b:b4:b5:da:
c2:de:3c:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxAj1lNkjPswey9YmSvMqmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2
ZGVmMjAwHhcNMjYwMjA5MDQwMTAyWhcNMjYwMjEwMDQwMTAyWjAzMTEwLwYDVQQD
EyhkNGQyNDMxN2YwOWQ5NzE3YTk3ZDIxYjg0MWIwNDE4ZDk1YmJkMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqMwil9wfkHfT/K8fWV5sTb4NRf4
Q3GLzqazyN2IgMfNSCSBPdgMDnSKDFpd61mKqF4lTaFN+z5+A+IMnct8uaKQ5Pe4
Yd3w4sASKOOCuIkVJ1dqm7jRd3BL9KPPZHxSf8h1J2P/WADFpqmqIOA1aAY255zw
v5uEvwM8T7fwanAxFLLIQ8iLK7AcFt0PabWmn4hlSNvL9zL4/7ov2yLrq0TYUtE9
kd85knE1xqdSRZk6UtH/rlG0YMEeDAWCpWv2UYjamLoc3c5QBos/IvabqVO5GQgg
fWJVgFJ/GJ39IPdzcxoq9JcJbFXBK6ePGm/D9NHzDkLxkq4YMVbfdk2igQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTSQxfwnZcXqX0huEGwQY2Vu9GwMB8GA1UdIwQY
MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt
MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1
LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJ8pk8qH
AiESzPnhDNyMYzGMnr9rQow5f5O1Vi4E8RlvlZlUwE0YDLAKlLuYrKf4Xn9N5Wdl
KT0NNOFva3zd5qm6AzFg+YZx691L/LcqOUysJwDdfohL7iPvLI491PJ34o63TjxG
/K/pLcFBDQAUfPc3UnxSy5QIn7Ko1nvrIn+55gMRSGN76z+E537wBVtHRWTZVCjm
t6CRgusmNkDK+5MzUsLxKJN9l2kz2v077eR5iaR12Q9J9OqAkxlANvIHCd3tZp2t
Ucs0IK91FzptANagBkNp9SlR6wh6ZoO5eLCqeDEYOfbHs+kBLxIhp6U6+pB8Emcq
oBprtLXawt48ZA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 14:25:08 2026 by rpki-client