This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
File: maYtMHOoLahlQqz8Nvb8ueZqBbs.mft (raw, json)
Hash identifier: fVjdKOk9oCtPxnH3gOh/HkZB+1t199oC0q8n7dqSxOI=
Subject key identifier: 95:DA:E3:D6:87:4B:6F:60:4B:A9:4E:62:33:EB:1C:F6:29:46:50:BA
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 019C42EB5B18E26EE294B26E5DF09F24D6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
Manifest number: 0F25
Signing time: Mon 09 Feb 2026 15:00:46 +0000
Manifest this update: Mon 09 Feb 2026 15:00:46 +0000
Manifest next update: Tue 10 Feb 2026 15:00:46 +0000
Files and hashes: 1: 6fDAz4UFcIjJUNJfBauQnIUtFJQ.roa (hash: 32SPWBtR5ifRYzi3R6/09Z2DiSWDuRPZa68/1wX0JGw=)
2: J1QSbtTALXp3LDlVSmUk6MBKTwk.roa (hash: S+0rrf1JmQadx56tQAp4cXgjdXzHGEHs/KEObwAzQdw=)
3: maYtMHOoLahlQqz8Nvb8ueZqBbs.crl (hash: tylRn+kbyjHCOM3Kl/pRi93kEmWDmJ3sPhXT2SDJU4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:5b:18:e2:6e:e2:94:b2:6e:5d:f0:9f:24:d6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Feb 9 15:00:46 2026 GMT
Not After : Feb 10 15:00:46 2026 GMT
Subject: CN=95dae3d6874b6f604ba94e6233eb1cf6294650ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:fd:7b:3e:78:29:7e:1b:dc:b2:48:c0:e5:
df:54:e9:bf:d9:10:cf:a3:73:3c:cd:a1:bd:99:8e:
59:27:bd:61:dd:a9:61:ad:af:ea:26:14:33:de:90:
60:e6:5f:69:6e:ab:08:c1:a8:37:5d:78:d7:c2:31:
f3:57:43:41:0b:a4:b5:f1:53:08:72:91:5e:e5:4b:
05:13:ca:e8:02:9c:3c:04:ea:6b:79:a1:1c:b9:bc:
95:bd:47:a2:ee:66:09:d0:bc:82:26:16:15:d2:f7:
f0:ab:b9:29:e9:cc:18:45:fb:ac:b6:4a:ce:c5:29:
f7:13:2d:2f:56:e3:fb:d4:80:bc:25:c1:6c:93:69:
d9:9d:58:79:7a:58:48:03:d4:af:40:54:53:ab:09:
0d:51:08:ad:74:09:8e:67:e1:f7:dc:f6:03:8d:78:
84:4c:95:8f:4d:59:84:c4:6b:9d:2a:ab:7c:44:16:
ca:a0:bb:c1:28:85:20:ac:3b:fd:a9:16:5a:67:45:
ee:7a:37:27:38:73:85:69:5f:b3:bc:af:ad:ed:2a:
f7:b4:87:4d:83:fe:7d:3b:c0:9a:95:1a:58:53:9a:
e0:cb:aa:3a:53:68:a2:91:81:a5:ce:03:75:b0:98:
91:77:38:63:c2:61:e1:8b:e6:de:4d:38:53:f9:da:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:E3:D6:87:4B:6F:60:4B:A9:4E:62:33:EB:1C:F6:29:46:50:BA
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a0:99:43:98:78:36:7f:50:7b:ae:4a:1a:26:75:9a:a9:83:
b3:be:a4:a1:9f:a7:41:f7:32:44:56:09:b1:1c:b5:a1:8b:1c:
19:d2:b0:e9:88:74:53:9b:ef:73:b5:66:ee:4a:b1:f7:6a:be:
3e:4e:f0:05:8d:9b:eb:fb:57:f5:22:d5:08:b9:56:64:92:2a:
6c:fb:ff:6d:3b:1c:c5:ac:39:76:2d:1c:2c:f1:0c:99:e0:7d:
63:c4:df:67:6c:f4:76:76:73:18:68:8c:ea:f4:df:93:99:c6:
88:fd:7f:53:e9:6d:6d:04:88:e8:ad:d0:06:d2:e5:ce:db:9d:
9e:d4:ea:25:b8:1f:99:18:87:12:07:ec:fe:e6:8e:77:81:01:
46:05:7f:2c:7b:29:00:2a:e6:76:2e:43:aa:1f:63:c0:8d:6d:
8e:02:95:6f:a9:90:dc:4b:a7:fb:80:ab:fb:19:65:ea:80:94:
32:d7:4a:2b:19:24:78:0f:5d:67:b0:42:94:bf:e2:ae:d4:89:
e6:6c:9a:57:4e:83:66:99:35:0e:89:b9:3d:88:d2:78:4f:51:
f8:a3:9d:65:ff:8e:21:32:41:74:69:d9:53:e2:39:c0:1d:b8:
b0:c0:12:91:0e:c8:6b:e5:a1:f6:9a:12:d3:98:44:81:e0:47:
53:9d:4d:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC61sY4m7ilLJuXfCfJNbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTYyZDMwNzNhODJkYTg2NTQyYWNmYzM2ZjZmY2I5ZTY2
YTA1YmIwHhcNMjYwMjA5MTUwMDQ2WhcNMjYwMjEwMTUwMDQ2WjAzMTEwLwYDVQQD
Eyg5NWRhZTNkNjg3NGI2ZjYwNGJhOTRlNjIzM2ViMWNmNjI5NDY1MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hX9ez54KX4b3LJIwOXfVOm/2RDP
o3M8zaG9mY5ZJ71h3alhra/qJhQz3pBg5l9pbqsIwag3XXjXwjHzV0NBC6S18VMI
cpFe5UsFE8roApw8BOpreaEcubyVvUei7mYJ0LyCJhYV0vfwq7kp6cwYRfustkrO
xSn3Ey0vVuP71IC8JcFsk2nZnVh5elhIA9SvQFRTqwkNUQitdAmOZ+H33PYDjXiE
TJWPTVmExGudKqt8RBbKoLvBKIUgrDv9qRZaZ0XuejcnOHOFaV+zvK+t7Sr3tIdN
g/59O8CalRpYU5rgy6o6U2iikYGlzgN1sJiRdzhjwmHhi+beTThT+docMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXa49aHS29gS6lOYjPrHPYpRlC6MB8GA1UdIwQY
MBaAFJmmLTBzqC2oZUKs/Db2/LnmagW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYt
MmQ5NTM2MDBmZjM3LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYtMmQ5NTM2MDBmZjM3
LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaCZQ5h4
Nn9Qe65KGiZ1mqmDs76koZ+nQfcyRFYJsRy1oYscGdKw6Yh0U5vvc7Vm7kqx92q+
Pk7wBY2b6/tX9SLVCLlWZJIqbPv/bTscxaw5di0cLPEMmeB9Y8TfZ2z0dnZzGGiM
6vTfk5nGiP1/U+ltbQSI6K3QBtLlztudntTqJbgfmRiHEgfs/uaOd4EBRgV/LHsp
ACrmdi5Dqh9jwI1tjgKVb6mQ3Eun+4Cr+xll6oCUMtdKKxkkeA9dZ7BClL/irtSJ
5myaV06DZpk1Dom5PYjSeE9R+KOdZf+OITJBdGnZU+I5wB24sMASkQ7Ia+Wh9poS
05hEgeBHU51NSg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:36 2026 by rpki-client