This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
File: stCgxoogOf8MpRQCQRUnHIoEZgg.mft (raw, json)
Hash identifier: 24f/dWjeXot+Ka8qq4s7PcaUjwKMpVE5Yga30NslqBg=
Subject key identifier: 99:85:7B:69:15:94:E7:B8:5B:0B:9C:74:6A:E8:4B:45:F1:13:40:31
Authority key identifier: B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
Certificate issuer: /CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Certificate serial: 019C427D25F58B8452B289F00E5337D37D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
Manifest number: 179F
Signing time: Mon 09 Feb 2026 13:00:23 +0000
Manifest this update: Mon 09 Feb 2026 13:00:23 +0000
Manifest next update: Tue 10 Feb 2026 13:00:23 +0000
Files and hashes: 1: 4eGQ-UBGNs_4XAP1phxy5eDsOEU.roa (hash: NGm7oj0oNNHffCOXmAY3fJHH7vgq8EjhCAsgIYkz9sk=)
2: stCgxoogOf8MpRQCQRUnHIoEZgg.crl (hash: nuwvPsQRcgHmHJjf+tS4j0XRLpHzI5h5hmRcrKeeYYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:25:f5:8b:84:52:b2:89:f0:0e:53:37:d3:7d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d0a0c68a2039ff0ca514024115271c8a046608
Validity
Not Before: Feb 9 13:00:23 2026 GMT
Not After : Feb 10 13:00:23 2026 GMT
Subject: CN=99857b691594e7b85b0b9c746ae84b45f1134031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:4f:cf:fd:52:39:92:42:93:9c:6f:d5:36:
ea:a2:ec:32:08:aa:51:54:ac:5e:b3:cb:69:c7:01:
11:1b:45:aa:9e:fc:13:3c:34:8b:54:72:b9:04:70:
a2:2e:98:c6:ec:17:4b:ce:9c:bf:63:b7:b9:4e:f6:
b9:ff:81:49:21:e3:96:c7:a7:62:fd:6c:c7:0d:98:
dd:97:38:52:8d:da:56:76:aa:35:d8:7f:01:08:27:
02:34:b4:27:6e:56:4e:c8:9a:13:94:38:b3:8a:18:
8a:c0:f9:b4:73:34:b2:f4:e1:1b:f6:6f:97:f6:01:
34:bc:29:16:ce:1d:2c:f3:d0:85:af:e3:58:6d:f8:
c5:fa:f8:cb:3a:77:4d:9e:73:ff:25:15:88:c8:29:
61:22:bc:e3:ac:de:ae:8d:37:bd:f2:d4:21:57:83:
e3:12:7b:8f:1e:d2:a2:a3:47:e0:aa:8a:b3:28:2d:
38:ec:53:0c:6c:32:96:b4:3c:13:f3:28:c2:ac:ce:
b2:52:d1:a2:42:49:ab:a9:56:17:88:1e:9f:6c:7d:
5b:42:97:8c:4d:0f:e9:94:ed:6e:5a:fd:b9:f1:03:
b4:c5:1a:87:79:cb:f0:df:e2:2c:de:33:43:d1:55:
e5:73:f8:d5:95:24:1e:43:81:b7:7f:e0:fd:41:35:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:7B:69:15:94:E7:B8:5B:0B:9C:74:6A:E8:4B:45:F1:13:40:31
X509v3 Authority Key Identifier:
keyid:B2:D0:A0:C6:8A:20:39:FF:0C:A5:14:02:41:15:27:1C:8A:04:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stCgxoogOf8MpRQCQRUnHIoEZgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b3d0d7-e10a-486f-885d-41ab7c872fea/1/stCgxoogOf8MpRQCQRUnHIoEZgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:71:4b:46:65:87:12:30:33:b2:da:f6:48:f9:db:c9:b1:2d:
50:3d:15:a7:43:2d:b9:ac:f9:42:c4:a8:20:3f:83:9d:96:c7:
dd:70:48:91:5a:65:06:31:29:96:94:c0:20:0d:98:0e:fe:af:
b4:25:28:20:ec:ac:79:35:91:bc:d2:fa:33:19:27:8a:c0:89:
da:ba:d8:94:9c:dc:10:a2:fb:bd:a3:dd:ec:7e:36:9f:6f:b4:
1b:05:ce:36:16:48:d2:bb:be:ee:a8:97:47:85:4d:b1:19:83:
bb:dc:26:26:5c:10:ec:b4:ff:b9:41:28:51:6d:ae:aa:e8:d9:
80:e9:b7:46:58:8e:89:cd:61:f0:79:d8:a7:99:e9:a4:2d:db:
b8:3e:eb:32:a6:4e:15:c9:e4:57:8e:00:9d:85:7b:2c:33:e3:
10:c1:45:b0:ad:9f:31:74:c4:3c:14:9f:5f:a5:5a:28:9d:9f:
5f:7e:95:0f:55:93:18:ce:1c:f4:27:f8:5c:5b:9a:49:95:de:
5b:43:c8:c6:e4:aa:c0:a3:63:be:a5:1a:48:c9:6d:53:28:70:
0c:ff:61:19:eb:ec:a6:cf:65:13:97:29:67:fe:8f:4e:b1:79:
2f:80:14:bd:ca:e0:87:68:6e:30:79:7b:1b:b9:6f:0f:63:e1:
59:c2:a1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:45 2026 by rpki-client