This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
File: mfL0sCJG5gTiN_N5RaOCv62hJ38.mft (raw, json)
Hash identifier: rj99/6woieZdA4DZPi+B/xzMlXDW7rivK570Y88n8ls=
Subject key identifier: 49:A0:7B:E7:58:59:64:DD:91:61:7B:36:F9:AE:ED:0C:64:4A:A9:99
Authority key identifier: 99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
Certificate issuer: /CN=99f2f4b02246e604e237f37945a382bfada1277f
Certificate serial: 019C43C72B40387B07E0540FD9FB7E899C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
Manifest number: 08FB
Signing time: Mon 09 Feb 2026 19:00:51 +0000
Manifest this update: Mon 09 Feb 2026 19:00:51 +0000
Manifest next update: Tue 10 Feb 2026 19:00:51 +0000
Files and hashes: 1: aLZv5zfSsWmyyFeeVsMlO2WoEOI.roa (hash: 3bBdTpTJvuXiahizaCJvEqZFOKH3JQrv3q1L3oXewkc=)
2: mfL0sCJG5gTiN_N5RaOCv62hJ38.crl (hash: kMURXfq2TGTprlZ7A7TRXBrK7rr0FO4qwXuGLywwXKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:2b:40:38:7b:07:e0:54:0f:d9:fb:7e:89:9c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f2f4b02246e604e237f37945a382bfada1277f
Validity
Not Before: Feb 9 19:00:51 2026 GMT
Not After : Feb 10 19:00:51 2026 GMT
Subject: CN=49a07be7585964dd91617b36f9aeed0c644aa999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:60:55:bb:36:b3:de:9d:d8:2f:6c:ef:cd:
80:de:fb:14:92:39:18:ec:6e:e9:80:93:df:89:70:
b4:08:55:6b:6b:db:7f:ec:e4:a0:96:3d:36:82:7f:
42:55:aa:bf:35:3e:a4:6d:9c:02:c6:9c:ce:10:3d:
fa:bf:cf:a2:3e:8a:82:ce:28:af:46:6f:6e:80:0e:
6a:cc:9f:82:bb:db:f8:0e:07:2a:9e:21:3e:d3:65:
43:87:bb:58:d6:59:61:b6:8a:1f:2b:b6:56:19:77:
b0:82:fd:ff:59:13:da:58:b2:dd:84:97:85:a4:67:
55:13:bd:7d:c9:32:13:6d:26:bb:ea:d0:74:fa:85:
b7:19:7b:24:ba:83:82:d8:31:36:48:f7:fb:3f:25:
1f:a8:f4:32:c2:32:9e:2b:b8:e5:30:ea:ba:39:ae:
52:ff:69:5e:28:e8:25:16:8b:95:8c:f2:82:b2:45:
6e:72:e7:02:e2:35:92:d0:09:17:d4:15:f9:94:29:
85:f1:c0:58:6b:19:96:ff:66:80:e7:ff:fc:4e:f9:
c8:f8:33:fb:8c:f9:e1:49:86:f6:53:e2:23:4d:e5:
d1:ec:d1:4d:3e:bd:35:58:3e:66:74:c6:b2:0f:a2:
ef:91:8c:7e:d2:c0:b6:61:8d:74:c9:ef:f1:02:49:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A0:7B:E7:58:59:64:DD:91:61:7B:36:F9:AE:ED:0C:64:4A:A9:99
X509v3 Authority Key Identifier:
keyid:99:F2:F4:B0:22:46:E6:04:E2:37:F3:79:45:A3:82:BF:AD:A1:27:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfL0sCJG5gTiN_N5RaOCv62hJ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/60bc06-c721-4e30-a757-6f4d818941a8/1/mfL0sCJG5gTiN_N5RaOCv62hJ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e5:93:d5:6b:b7:bb:ab:3a:bc:cf:ae:83:ad:9c:01:86:e1:
5e:de:28:10:a9:d5:5d:90:45:75:9d:49:e8:06:db:6a:54:cd:
96:a7:c7:7f:63:78:b0:cc:f7:e5:e7:c5:c7:fd:e8:00:68:61:
57:7c:e5:51:e4:48:f3:1e:68:b4:e6:33:29:fe:ed:9b:9a:58:
c5:b1:c9:b7:00:5e:0d:d1:2b:7c:1c:f8:df:8a:44:5f:45:2a:
fc:a4:aa:54:a8:12:94:03:92:d5:6c:40:27:13:b1:5a:65:ca:
b6:8e:7d:6f:c0:48:ae:31:a3:cf:d8:0f:8b:a9:76:b1:42:25:
54:f9:70:6b:57:00:be:87:1a:d4:56:7f:cf:ae:41:b9:de:5d:
ea:7c:ed:13:fd:e5:2b:15:38:dc:5c:fd:b2:d6:3d:47:ba:31:
21:68:27:59:02:4e:60:cf:74:d3:31:43:41:4e:f8:d4:80:d0:
1d:d7:1c:20:de:7e:94:dd:ed:39:3d:2e:29:9c:95:60:d1:99:
3d:ac:1b:9b:d5:6b:86:94:21:23:9e:49:5c:d5:c1:79:a6:b5:
4b:12:a6:9e:f5:26:99:c8:2b:30:8b:54:5d:f1:92:21:ab:b0:
33:d0:4f:6d:10:7a:42:06:99:c8:1d:1e:f9:18:a7:dc:49:3b:
3f:27:22:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:28 2026 by rpki-client