This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier: Obq93r9Mc2tApREFaj4qBr9e2Hfc03rbViZn8XiJc3w=
Subject key identifier: 2C:CF:38:71:44:46:F9:B1:5E:D9:08:3F:3F:5B:70:BF:81:D6:FC:62
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 019C43590B6625D8A92123913BBFD9270A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number: 1720
Signing time: Mon 09 Feb 2026 17:00:34 +0000
Manifest this update: Mon 09 Feb 2026 17:00:34 +0000
Manifest next update: Tue 10 Feb 2026 17:00:34 +0000
Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: azclSWvBr61K36BEpT4VT0KFhCqs/dLdxwLoWhTFgRM=)
2: TzWq1qnWBn4k19NSOwTmTuj33kc.roa (hash: Nw9JTG7M5i34iKuoPA+hKZe2GJ6kfRFbcg47nxl4mFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:0b:66:25:d8:a9:21:23:91:3b:bf:d9:27:0a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Feb 9 17:00:34 2026 GMT
Not After : Feb 10 17:00:34 2026 GMT
Subject: CN=2ccf38714446f9b15ed9083f3f5b70bf81d6fc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:2b:07:b3:05:30:80:22:c9:a8:ff:68:84:
75:19:3d:a0:4e:1a:53:94:d6:48:7c:b4:32:86:7c:
cd:c5:80:9e:da:33:0b:00:90:6e:37:9b:16:89:5e:
52:78:fc:5c:e6:01:40:f7:ef:f6:0e:df:d5:02:e5:
90:61:cf:b5:07:aa:cf:c3:f4:e5:0d:1b:a0:3f:af:
e3:1c:7f:22:16:09:94:45:90:66:43:68:88:d3:55:
42:14:20:8b:db:48:e2:b4:58:78:33:0b:28:04:60:
e6:22:27:42:d6:b1:55:57:92:6a:68:b6:33:df:5a:
f5:80:9c:19:cd:0f:f8:d9:43:92:16:a6:c7:17:5d:
4d:69:ec:fc:94:3d:bc:dc:aa:bf:a6:cd:70:32:a8:
f6:b4:70:b4:64:b3:4d:af:cb:a5:f8:1b:71:81:7e:
d3:ac:a3:d8:51:e8:83:cd:c4:29:66:b0:fd:f4:0e:
1d:a2:2d:57:f6:43:ef:3a:b2:92:21:78:a4:d4:c8:
4d:c2:99:eb:c7:ab:ae:83:7b:c8:e4:2b:3d:c2:fc:
18:24:18:4e:d4:bd:62:06:e0:2a:2d:b4:00:4a:0a:
fa:ba:56:14:9e:e2:fc:e4:d1:8a:3e:41:a5:f3:7a:
37:1e:f7:48:4c:24:fb:2d:9c:1c:56:27:5b:14:7d:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CF:38:71:44:46:F9:B1:5E:D9:08:3F:3F:5B:70:BF:81:D6:FC:62
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:10:22:b5:38:73:bf:27:24:ea:81:a4:84:d7:c9:1b:92:03:
ea:0b:f7:05:d6:a1:bd:af:1c:02:18:69:c1:df:c4:68:11:5b:
c0:f5:80:ab:0f:90:96:8e:bb:ee:30:2d:db:b6:17:15:7a:f7:
a1:df:51:61:fc:08:06:06:99:73:a4:d2:d2:f6:11:ac:38:73:
bb:80:1e:e3:6e:f5:a4:e9:1f:f7:b7:bb:ee:8b:1a:f6:5a:44:
ce:cb:4b:3b:94:e5:ec:15:63:50:34:e0:69:0b:a9:2d:ed:b7:
be:2b:5e:65:60:03:07:d3:5d:89:83:26:d9:7b:4f:be:03:e6:
ba:67:30:ae:a9:77:41:09:59:6f:35:f6:34:37:97:b6:f5:cc:
87:de:b8:9a:3c:ec:25:37:a8:21:4d:fc:ca:85:28:0c:7b:e8:
54:7c:4a:be:ba:9c:a2:ea:b1:0d:9d:b4:09:03:2b:2e:e1:3b:
6a:00:75:4c:50:c1:3c:ae:ec:a8:30:6a:13:83:07:4b:e0:87:
74:2d:32:d0:30:69:08:d6:fe:d8:1e:98:58:79:e0:f9:57:79:
a3:9f:0e:8f:5d:d0:81:86:fc:38:69:d9:0d:eb:05:1e:1a:01:
92:9c:f1:2c:de:dc:71:1a:38:95:cd:ab:ca:79:87:e5:80:03:
dc:8c:4b:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWQtmJdipISORO7/ZJwopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MjIzMWU3MTNmMGY4MzRiZDA5YzNmNzZlMTJlMjUwZTc3
M2MyOTAwHhcNMjYwMjA5MTcwMDM0WhcNMjYwMjEwMTcwMDM0WjAzMTEwLwYDVQQD
EygyY2NmMzg3MTQ0NDZmOWIxNWVkOTA4M2YzZjViNzBiZjgxZDZmYzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uArB7MFMIAiyaj/aIR1GT2gThpT
lNZIfLQyhnzNxYCe2jMLAJBuN5sWiV5SePxc5gFA9+/2Dt/VAuWQYc+1B6rPw/Tl
DRugP6/jHH8iFgmURZBmQ2iI01VCFCCL20jitFh4MwsoBGDmIidC1rFVV5JqaLYz
31r1gJwZzQ/42UOSFqbHF11Naez8lD283Kq/ps1wMqj2tHC0ZLNNr8ul+BtxgX7T
rKPYUeiDzcQpZrD99A4doi1X9kPvOrKSIXik1MhNwpnrx6uug3vI5Cs9wvwYJBhO
1L1iBuAqLbQASgr6ulYUnuL85NGKPkGl83o3HvdITCT7LZwcVidbFH2jjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzPOHFERvmxXtkIPz9bcL+B1vxiMB8GA1UdIwQY
MBaAFEYiMecT8Pg0vQnD924S4lDnc8KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5Mzct
YWQ0YmQ3ZjIzY2U0LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YWIzYTUtMWM0Ni00YmUwLTg5MzctYWQ0YmQ3ZjIzY2U0
LzEvUmlJeDV4UHctRFM5Q2NQM2JoTGlVT2R6d3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRAitThz
vyck6oGkhNfJG5ID6gv3Bdahva8cAhhpwd/EaBFbwPWAqw+Qlo677jAt27YXFXr3
od9RYfwIBgaZc6TS0vYRrDhzu4Ae4271pOkf97e77osa9lpEzstLO5Tl7BVjUDTg
aQupLe23viteZWADB9NdiYMm2XtPvgPmumcwrql3QQlZbzX2NDeXtvXMh964mjzs
JTeoIU38yoUoDHvoVHxKvrqcouqxDZ20CQMrLuE7agB1TFDBPK7sqDBqE4MHS+CH
dC0y0DBpCNb+2B6YWHng+Vd5o58Oj13QgYb8OGnZDesFHhoBkpzxLN7ccRo4lc2r
ynmH5YAD3IxLFA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:26 2026 by rpki-client