This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
File: aescHUkwv7_iXqfwpF19C2Eef2I.mft (raw, json)
Hash identifier: QPEOXHocp/C4807Xd13yvOoMvb4xYrF0hAs00tkWZhk=
Subject key identifier: 3D:9B:B6:C4:00:E5:41:8E:A0:31:E7:05:D3:FE:1D:75:E2:F9:20:EE
Authority key identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
Certificate issuer: /CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Certificate serial: 019C420F3D28AFA2FA19881CBEFD5EECC2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
Manifest number: 03EA
Signing time: Mon 09 Feb 2026 11:00:20 +0000
Manifest this update: Mon 09 Feb 2026 11:00:20 +0000
Manifest next update: Tue 10 Feb 2026 11:00:20 +0000
Files and hashes: 1: aescHUkwv7_iXqfwpF19C2Eef2I.crl (hash: z5b+TeVr0p7JV1qPHN9BVIFdK7hw7XmZYpes22DTBBk=)
2: zm22SYQDssPVyPUHKsbO-cFBVo8.roa (hash: e95IhW6weWHIteUAYq4kEbRjvuNFmWrzWP7IgPh5MEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:3d:28:af:a2:fa:19:88:1c:be:fd:5e:ec:c2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Validity
Not Before: Feb 9 11:00:20 2026 GMT
Not After : Feb 10 11:00:20 2026 GMT
Subject: CN=3d9bb6c400e5418ea031e705d3fe1d75e2f920ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:97:e3:f9:e3:d7:7c:b0:85:21:4e:4c:27:
8f:55:2e:93:84:be:c3:ea:f3:27:3b:f2:02:e7:e3:
7b:78:b9:b1:9c:8a:c4:41:ec:b9:b1:e5:aa:34:23:
7d:b7:81:80:0f:41:81:bd:a3:33:1d:17:b5:07:35:
13:73:81:ba:53:9e:0b:96:87:9e:37:ea:e5:06:5b:
5c:6a:be:72:8c:3c:a6:4a:ca:22:c6:7c:cf:97:fa:
fe:e2:37:6d:7a:ae:d5:dd:45:1b:81:47:d6:4c:75:
26:1f:f5:2c:e8:ad:66:89:51:38:f8:d7:10:11:63:
84:49:46:a9:57:a6:bb:d2:75:d2:d0:44:ca:2d:4f:
b4:9b:36:80:5e:cc:8a:99:76:e2:db:08:e5:79:b6:
2e:e8:fe:76:c0:1a:7f:5b:48:56:ad:2d:de:df:fe:
e4:60:05:8c:10:35:f4:d3:7c:17:a9:b0:fe:00:b9:
18:3b:44:b1:23:33:03:af:4f:79:ec:1b:0a:a7:87:
67:eb:0c:be:74:9a:aa:bf:24:4c:c6:43:3d:7e:a7:
bc:33:78:f2:e0:61:68:88:6e:e6:87:94:ab:f3:9a:
96:22:01:69:2b:9b:72:36:4c:45:42:29:36:af:94:
e8:e9:74:ad:9e:3b:1c:e0:47:dc:ce:66:dd:b3:a2:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9B:B6:C4:00:E5:41:8E:A0:31:E7:05:D3:FE:1D:75:E2:F9:20:EE
X509v3 Authority Key Identifier:
keyid:69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8e:68:f9:4a:94:ac:c5:cf:25:43:a1:e2:db:5d:9c:f0:ad:
66:4a:cf:7f:f5:45:2b:b1:2c:da:4b:10:c7:27:26:81:a8:4c:
20:3a:1c:97:39:b7:4c:16:0b:2b:a5:77:8b:a0:88:50:23:53:
74:bf:5b:82:3b:a6:6f:7b:d9:fe:b3:f5:da:4f:8d:f1:7c:2a:
4d:31:57:2d:55:f6:53:c7:08:47:85:42:24:fd:16:34:eb:bf:
64:cb:b7:1b:d8:60:ae:6f:cb:7f:b3:68:82:16:88:cc:ed:fc:
b4:44:62:85:1f:d0:b8:9d:29:a3:8a:d3:41:a0:9e:56:c0:dd:
e0:c2:6f:3f:41:9e:a9:75:39:c8:f2:d0:63:a9:13:cc:b8:de:
5c:58:e8:b8:b3:7d:09:5c:5c:dd:4b:ff:ca:d3:bc:7b:1c:ed:
4b:1d:62:7a:20:3a:b4:fe:12:a9:18:8c:18:fa:14:9c:fd:96:
86:c3:6f:eb:9a:40:a2:8a:db:d5:89:e9:cb:77:99:e0:cf:1f:
f6:80:14:3c:09:30:d3:3c:31:3f:a7:a1:ef:a0:59:d9:07:9f:
f5:7c:80:0a:88:40:c5:6b:d8:a9:f7:d3:c9:54:0a:59:f9:4c:
6c:39:d7:79:25:c8:28:1f:b0:db:83:20:7c:3a:f0:75:89:75:
bf:f3:22:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCDz0or6L6GYgcvv1e7MLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZWIxYzFkNDkzMGJmYmZlMjVlYTdmMGE0NWQ3ZDBiNjEx
ZTdmNjIwHhcNMjYwMjA5MTEwMDIwWhcNMjYwMjEwMTEwMDIwWjAzMTEwLwYDVQQD
EygzZDliYjZjNDAwZTU0MThlYTAzMWU3MDVkM2ZlMWQ3NWUyZjkyMGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkCX4/nj13ywhSFOTCePVS6ThL7D
6vMnO/IC5+N7eLmxnIrEQey5seWqNCN9t4GAD0GBvaMzHRe1BzUTc4G6U54Lloee
N+rlBltcar5yjDymSsoixnzPl/r+4jdteq7V3UUbgUfWTHUmH/Us6K1miVE4+NcQ
EWOESUapV6a70nXS0ETKLU+0mzaAXsyKmXbi2wjlebYu6P52wBp/W0hWrS3e3/7k
YAWMEDX003wXqbD+ALkYO0SxIzMDr0957BsKp4dn6wy+dJqqvyRMxkM9fqe8M3jy
4GFoiG7mh5Sr85qWIgFpK5tyNkxFQik2r5To6XStnjsc4Efczmbds6J4nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2btsQA5UGOoDHnBdP+HXXi+SDuMB8GA1UdIwQY
MBaAFGnrHB1JML+/4l6n8KRdfQthHn9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80YzBkY2YtNjQzOS00MTFmLWExMDQt
ZTk5YWIyNjA1YTkwLzEvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80YzBkY2YtNjQzOS00MTFmLWExMDQtZTk5YWIyNjA1YTkw
LzEvYWVzY0hVa3d2N19pWHFmd3BGMTlDMkVlZjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlI5o+UqU
rMXPJUOh4ttdnPCtZkrPf/VFK7Es2ksQxycmgahMIDoclzm3TBYLK6V3i6CIUCNT
dL9bgjumb3vZ/rP12k+N8XwqTTFXLVX2U8cIR4VCJP0WNOu/ZMu3G9hgrm/Lf7No
ghaIzO38tERihR/QuJ0po4rTQaCeVsDd4MJvP0GeqXU5yPLQY6kTzLjeXFjouLN9
CVxc3Uv/ytO8exztSx1ieiA6tP4SqRiMGPoUnP2WhsNv65pAoorb1Ynpy3eZ4M8f
9oAUPAkw0zwxP6eh76BZ2Qef9XyACohAxWvYqffTyVQKWflMbDnXeSXIKB+w24Mg
fDrwdYl1v/MiNw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:10 2026 by rpki-client