This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File: 0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier: pHdWBti2zQsk59/+1c/tXKfsxrivV4SweFxh1u60glU=
Subject key identifier: 09:F7:95:CC:55:88:CE:B9:3D:CE:13:BB:87:83:FD:08:BB:B1:5E:D1
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer: /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial: 019C41D8CB653C82D9EE9B8360A39B857E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number: 03B6
Signing time: Mon 09 Feb 2026 10:00:52 +0000
Manifest this update: Mon 09 Feb 2026 10:00:52 +0000
Manifest next update: Tue 10 Feb 2026 10:00:52 +0000
Files and hashes: 1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: udGc6a22jWhnTbTu3fbnTt8rz4fyYEUb9q5denoA6eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:cb:65:3c:82:d9:ee:9b:83:60:a3:9b:85:7e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Validity
Not Before: Feb 9 10:00:52 2026 GMT
Not After : Feb 10 10:00:52 2026 GMT
Subject: CN=09f795cc5588ceb93dce13bb8783fd08bbb15ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:5e:cf:ae:31:80:62:2f:a4:c9:00:31:57:08:
d3:a0:cf:76:2f:25:2f:39:a3:99:87:cf:86:76:a3:
02:78:39:16:62:ba:e7:e3:76:9d:63:72:2f:66:a0:
cd:83:f6:a3:68:92:5a:a0:5e:df:8c:be:82:78:78:
86:ee:25:a6:d1:20:d2:9a:ea:26:cb:80:eb:b8:a1:
b4:b8:fe:cc:ae:8b:31:b7:fb:61:8a:21:15:10:e9:
91:85:fd:9f:c2:35:5f:4c:ed:5b:01:91:57:35:bf:
25:22:e8:df:cb:4c:2f:60:c6:46:3c:37:cc:d2:df:
74:2e:63:17:2d:df:a6:9c:da:93:0d:3e:a9:29:48:
e5:9f:b3:f0:7e:9a:3e:ae:77:c9:39:f4:62:c4:c2:
7c:f5:82:0a:cf:42:19:66:a5:6a:c0:c2:2e:f5:cf:
c1:78:32:d0:2e:7e:f0:83:9c:23:60:40:62:5c:bb:
8e:39:a2:bf:e6:54:fc:ab:ae:6b:bf:0e:fb:44:98:
13:f9:6c:58:a8:95:50:b5:c7:c8:3b:01:48:5c:86:
5e:0f:e2:1d:6b:19:ac:08:75:d8:32:44:e8:a3:1b:
f5:ea:de:bc:dd:6f:73:79:d9:d4:f9:2b:66:50:46:
29:96:ae:e4:9f:3f:c8:c3:2a:ac:55:b3:e7:b2:8c:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:95:CC:55:88:CE:B9:3D:CE:13:BB:87:83:FD:08:BB:B1:5E:D1
X509v3 Authority Key Identifier:
keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3b:c6:ab:b8:6f:b6:91:34:4f:db:1c:2b:8f:f2:01:01:dd:
94:b8:bf:94:1b:f7:cd:97:81:61:2f:4b:53:f3:fa:41:73:55:
9d:20:6d:d6:a2:63:93:5c:60:04:ba:fb:ee:83:bc:9a:08:3e:
78:7c:38:1d:a4:3d:4f:ac:d9:3c:3d:a0:8c:43:e9:e8:b2:73:
41:b8:46:02:12:c9:ee:e3:43:d8:9e:cb:7d:9b:2f:d8:05:2d:
2c:5d:03:42:74:56:73:4d:a9:ce:2f:bc:6f:5e:30:08:e4:1a:
1b:43:91:71:b8:b7:ec:48:0c:df:d7:25:4b:61:02:71:f3:5b:
a0:8b:7d:ad:db:15:dd:ab:67:51:24:7f:56:78:e8:4c:bc:4d:
bf:29:e8:d6:be:b6:b7:de:99:d3:4a:e9:e4:81:bc:2b:c9:d7:
13:70:22:bd:3d:d4:33:f3:39:d9:bf:7f:44:43:81:ef:05:14:
d0:3c:22:e6:82:1b:9c:b1:6b:80:93:b3:1e:34:7a:2e:dd:7c:
13:42:6c:00:cd:cc:28:fe:a6:75:50:51:0c:ef:31:01:2a:06:
50:00:2d:57:75:88:a3:a1:76:f7:03:0a:ad:54:c6:c7:ad:e6:
5e:3a:63:eb:08:b1:07:54:0e:77:d3:f3:45:46:3d:ce:86:dc:
b0:2f:d5:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2MtlPILZ7puDYKObhX5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZWI4NmY4OTM3ODZiYzQ3N2QzZDAwYmEwZmYxZTIzOWVl
NjIyNmQwHhcNMjYwMjA5MTAwMDUyWhcNMjYwMjEwMTAwMDUyWjAzMTEwLwYDVQQD
EygwOWY3OTVjYzU1ODhjZWI5M2RjZTEzYmI4NzgzZmQwOGJiYjE1ZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/F7PrjGAYi+kyQAxVwjToM92LyUv
OaOZh8+GdqMCeDkWYrrn43adY3IvZqDNg/ajaJJaoF7fjL6CeHiG7iWm0SDSmuom
y4DruKG0uP7Mrosxt/thiiEVEOmRhf2fwjVfTO1bAZFXNb8lIujfy0wvYMZGPDfM
0t90LmMXLd+mnNqTDT6pKUjln7Pwfpo+rnfJOfRixMJ89YIKz0IZZqVqwMIu9c/B
eDLQLn7wg5wjYEBiXLuOOaK/5lT8q65rvw77RJgT+WxYqJVQtcfIOwFIXIZeD+Id
axmsCHXYMkTooxv16t683W9zednU+StmUEYplq7knz/IwyqsVbPnsowknwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn3lcxViM65Pc4Tu4eD/Qi7sV7RMB8GA1UdIwQY
MBaAFNHrhviTeGvEd9PQC6D/HiOe5iJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MTFkZDAtNDUzYS00NWM3LTgzMDQt
ZGMxNGU5YzFiNzQ1LzEvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MTFkZDAtNDUzYS00NWM3LTgzMDQtZGMxNGU5YzFiNzQ1
LzEvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDvGq7hv
tpE0T9scK4/yAQHdlLi/lBv3zZeBYS9LU/P6QXNVnSBt1qJjk1xgBLr77oO8mgg+
eHw4HaQ9T6zZPD2gjEPp6LJzQbhGAhLJ7uND2J7LfZsv2AUtLF0DQnRWc02pzi+8
b14wCOQaG0ORcbi37EgM39clS2ECcfNboIt9rdsV3atnUSR/VnjoTLxNvyno1r62
t96Z00rp5IG8K8nXE3AivT3UM/M52b9/REOB7wUU0Dwi5oIbnLFrgJOzHjR6Lt18
E0JsAM3MKP6mdVBRDO8xASoGUAAtV3WIo6F29wMKrVTGx63mXjpj6wixB1QOd9Pz
RUY9zobcsC/VDQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:20 2026 by rpki-client