This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json)
Hash identifier: P0kbE7wQ5bkDIALiQlgp0YkisUFpyiwFJCiuQPscLo8=
Subject key identifier: 22:3E:B5:65:CB:AD:9C:42:0A:D5:22:5C:CD:76:E8:DC:2F:FC:61:32
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 019C43FE25299BD8059975CC3D7BF5022631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 20:00:54 +0000
Manifest this update: Mon 09 Feb 2026 20:00:54 +0000
Manifest next update: Tue 10 Feb 2026 20:00:54 +0000
Files and hashes: 1: 55lJ7aRN6GIyWx76DhXMl-EsW9s.roa (hash: G5fDZfDdF/UdXSzqkrIqSIBvAXZx8jiKJDU264Jekto=)
2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: r/59Sb2fku+yeSlt3YxbQlqH6zwmJvnlqTOGSCq/9JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:25:29:9b:d8:05:99:75:cc:3d:7b:f5:02:26:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Feb 9 20:00:54 2026 GMT
Not After : Feb 10 20:00:54 2026 GMT
Subject: CN=223eb565cbad9c420ad5225ccd76e8dc2ffc6132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:a1:01:e3:7e:d1:a0:42:6e:d8:d6:0d:17:
1f:ce:5f:2c:c1:10:a7:df:38:d0:d9:f8:64:38:b9:
ef:8c:87:ec:5f:0f:92:06:03:ea:4e:ce:27:fc:0f:
ed:fb:51:97:45:36:2a:97:35:f0:ad:67:1c:5a:80:
2d:18:9c:b3:ce:6a:ba:cf:0f:bb:53:d9:7a:c0:66:
e3:81:78:16:55:e5:a5:5c:1d:dd:d6:b3:59:6b:0f:
c6:ac:ec:28:72:61:b5:f7:a9:76:c7:7a:bd:f1:18:
9b:ec:d6:39:b4:b4:5f:58:d2:f9:53:10:6b:1f:a2:
42:67:4e:44:b9:fa:f6:a1:58:12:f2:50:26:6c:ef:
4f:89:70:9c:fa:1d:63:5b:fb:ac:0b:23:46:57:21:
df:3f:7d:f8:19:05:a5:28:f3:13:9c:ea:72:10:30:
dc:d1:8d:eb:16:98:74:ef:2c:02:9b:e3:27:da:49:
1c:d2:e4:a9:eb:d0:4b:52:e1:ec:01:a5:b6:61:dc:
fb:56:ec:3a:02:63:eb:bf:92:f1:7c:a4:41:a9:ac:
e6:00:cd:35:17:28:28:af:da:61:39:c2:e1:9f:dc:
88:3a:4a:47:d7:38:d3:45:fe:e5:ec:d8:c4:8f:be:
41:4a:4f:3f:43:eb:ea:32:3a:8b:31:38:fe:90:66:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3E:B5:65:CB:AD:9C:42:0A:D5:22:5C:CD:76:E8:DC:2F:FC:61:32
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f1:43:85:38:2c:93:9c:42:b3:5c:61:4d:e5:fe:40:74:7c:
72:b4:4f:8c:8b:4a:fd:c7:32:a7:9b:e3:70:b1:59:39:37:c9:
6c:09:b9:9e:56:8d:30:19:ed:ab:16:7a:f6:94:c8:a0:e2:5c:
85:35:35:88:2b:db:34:59:9e:c2:ee:1f:53:97:4d:f9:9b:8b:
e0:e2:67:88:fb:e1:a2:da:80:25:92:89:ed:cc:41:17:22:a1:
3c:31:9d:6a:c6:e6:d3:57:f2:e6:62:9d:d9:43:8a:ae:38:c8:
42:7a:39:55:85:26:51:65:ed:41:2f:3e:28:f5:96:0a:f5:ab:
fe:55:95:53:e5:85:99:a9:34:96:3c:11:a4:43:a2:1e:ee:31:
27:2d:32:28:c1:3d:c4:f7:31:64:4c:cf:6a:95:c4:ef:81:5a:
55:01:f6:0f:53:4e:64:0d:a5:62:8f:6f:e9:09:b1:4a:41:7f:
95:9d:8f:62:06:75:a2:65:22:ac:52:2f:07:18:39:f4:be:2e:
30:b4:8f:84:6a:d4:26:d2:d5:d9:5e:8b:e5:c6:4b:e9:0b:d7:
82:37:29:f8:b9:f6:0b:7e:f6:9a:5b:e7:84:d1:e6:98:ec:ee:
a7:0e:36:98:e9:b3:7e:4b:f0:b2:67:c5:3e:26:0c:2c:c4:84:
d4:11:7d:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/iUpm9gFmXXMPXv1AiYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMmM4NjM3NjJjZTlkOTk2ZDJhYmFiNmVkZTE5MjljY2Vk
Y2I2MzIwHhcNMjYwMjA5MjAwMDU0WhcNMjYwMjEwMjAwMDU0WjAzMTEwLwYDVQQD
EygyMjNlYjU2NWNiYWQ5YzQyMGFkNTIyNWNjZDc2ZThkYzJmZmM2MTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUuhAeN+0aBCbtjWDRcfzl8swRCn
3zjQ2fhkOLnvjIfsXw+SBgPqTs4n/A/t+1GXRTYqlzXwrWccWoAtGJyzzmq6zw+7
U9l6wGbjgXgWVeWlXB3d1rNZaw/GrOwocmG196l2x3q98Rib7NY5tLRfWNL5UxBr
H6JCZ05Eufr2oVgS8lAmbO9PiXCc+h1jW/usCyNGVyHfP334GQWlKPMTnOpyEDDc
0Y3rFph07ywCm+Mn2kkc0uSp69BLUuHsAaW2Ydz7Vuw6AmPrv5LxfKRBqazmAM01
Fygor9phOcLhn9yIOkpH1zjTRf7l7NjEj75BSk8/Q+vqMjqLMTj+kGbNFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI+tWXLrZxCCtUiXM126Nwv/GEyMB8GA1UdIwQY
MBaAFEoshjdizp2ZbSq6tu3hkpzO3LYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTIt
YzQ3MTg0ZmRhYzM5LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83YThlM2MtY2MwMi00MjU1LTk4OTItYzQ3MTg0ZmRhYzM5
LzEvU2l5R04yTE9uWmx0S3JxMjdlR1NuTTdjdGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPFDhTgs
k5xCs1xhTeX+QHR8crRPjItK/ccyp5vjcLFZOTfJbAm5nlaNMBntqxZ69pTIoOJc
hTU1iCvbNFmewu4fU5dN+ZuL4OJniPvhotqAJZKJ7cxBFyKhPDGdasbm01fy5mKd
2UOKrjjIQno5VYUmUWXtQS8+KPWWCvWr/lWVU+WFmak0ljwRpEOiHu4xJy0yKME9
xPcxZEzPapXE74FaVQH2D1NOZA2lYo9v6QmxSkF/lZ2PYgZ1omUirFIvBxg59L4u
MLSPhGrUJtLV2V6L5cZL6QvXgjcp+Ln2C372mlvnhNHmmOzupw42mOmzfkvwsmfF
PiYMLMSE1BF9ng==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:35 2026 by rpki-client