This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
File: IYssahphoXurfAMggKo78kR4tt0.mft (raw, json)
Hash identifier: tPxhk/The+3v1lJkTRxBCHuUXDdTqJZWeQ4mOsHieEM=
Subject key identifier: B6:E8:35:C5:C1:7F:F2:B5:D2:40:83:08:35:4F:6E:3A:72:56:BA:39
Authority key identifier: 21:8B:2C:6A:1A:61:A1:7B:AB:7C:03:20:80:AA:3B:F2:44:78:B6:DD
Certificate issuer: /CN=218b2c6a1a61a17bab7c032080aa3bf24478b6dd
Certificate serial: 019C4322F7FAD61AB995BB7DEB7BBBDCB129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
Manifest number: 0ECB
Signing time: Mon 09 Feb 2026 16:01:30 +0000
Manifest this update: Mon 09 Feb 2026 16:01:30 +0000
Manifest next update: Tue 10 Feb 2026 16:01:30 +0000
Files and hashes: 1: IYssahphoXurfAMggKo78kR4tt0.crl (hash: FsOqJpKnpJRUE+jEdRnAmTyuKTunJbaxZZLOkXDy1wQ=)
2: dCLnn7sgK5v7oJDUJbrjvWO6u5U.roa (hash: BC/yFL0CMfvt5OiaE+u7P/nSsti8Z5g8EroFC8bwyK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:f7:fa:d6:1a:b9:95:bb:7d:eb:7b:bb:dc:b1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218b2c6a1a61a17bab7c032080aa3bf24478b6dd
Validity
Not Before: Feb 9 16:01:30 2026 GMT
Not After : Feb 10 16:01:30 2026 GMT
Subject: CN=b6e835c5c17ff2b5d2408308354f6e3a7256ba39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:16:34:75:7a:9f:61:dd:26:eb:63:38:c1:
73:5b:b1:ce:1a:f5:e5:7e:5e:b7:a3:d8:4a:2b:e0:
0b:b6:1f:11:bb:c9:92:28:1c:8f:4f:2c:62:ac:93:
cb:4f:e1:56:6c:83:c2:e2:28:c8:c0:7e:7c:38:46:
50:15:92:4f:7c:0d:31:cb:b5:54:66:25:2f:7e:5f:
ea:50:54:33:b4:52:16:cf:25:09:96:df:cf:98:24:
cd:30:ef:e9:0b:7d:07:28:82:ad:39:63:dc:b9:63:
ee:b4:a9:8c:fa:63:c4:67:d7:93:a3:51:67:ee:4b:
3a:18:5e:68:59:38:df:f5:30:d9:22:bf:cd:e7:02:
b1:30:f1:f0:3d:98:22:62:c4:ba:c1:c3:30:6a:bc:
00:37:58:70:49:42:a0:04:60:f2:52:a1:92:6f:3f:
ba:2c:3c:16:66:05:3c:ed:70:3e:9b:fb:64:bd:e6:
b0:92:bc:20:29:7a:58:2e:db:4e:a1:d0:af:b8:14:
a6:b2:1f:39:ff:aa:ba:89:65:4f:87:b4:0b:21:25:
a4:12:f2:6f:11:e6:c6:98:91:16:9b:86:78:9d:f8:
7a:1e:c4:04:c4:50:c0:6b:e1:32:15:ae:4a:33:0e:
35:71:46:63:85:7e:b8:31:7f:34:7c:12:1b:65:4f:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E8:35:C5:C1:7F:F2:B5:D2:40:83:08:35:4F:6E:3A:72:56:BA:39
X509v3 Authority Key Identifier:
keyid:21:8B:2C:6A:1A:61:A1:7B:AB:7C:03:20:80:AA:3B:F2:44:78:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f8:6b:44:d2:e5:34:fc:d8:bf:8f:8d:0c:34:2d:7a:5a:d3:
d1:f7:5f:8b:ba:0d:ee:98:88:68:35:f9:fe:f0:90:99:6c:28:
1f:ce:b3:a3:5d:01:55:73:d1:66:94:e1:5c:95:05:ab:95:1c:
cf:0e:88:2d:05:de:80:ea:4a:8a:ea:e5:6d:96:e2:09:e9:b6:
8a:f6:ff:1c:8b:da:2b:b5:53:00:d4:f4:c5:25:9c:d4:30:ea:
67:36:7c:c5:eb:e4:bd:00:8a:90:d4:b6:16:56:3c:8b:6d:56:
37:e8:c0:40:f0:1b:b9:21:3b:52:f3:b7:4c:0d:4b:13:3b:cb:
6d:a8:df:21:6a:49:81:a9:30:8f:f3:ec:23:01:4e:fd:a4:2a:
05:66:7b:f4:6f:6d:9b:f7:3a:d4:db:3b:ca:1b:9f:3d:cc:54:
8c:2a:70:4c:7f:3d:ce:0c:70:e8:90:fa:b6:77:49:a4:f4:04:
64:46:06:4c:f3:65:9c:bc:78:a1:0f:de:24:fb:3b:5a:e1:4b:
74:a3:10:92:b5:5a:7d:72:d8:8f:74:7a:2d:f5:44:bd:22:de:
0e:e3:7f:df:e3:7e:5e:fb:20:78:85:91:8f:e8:7c:08:92:ba:
16:93:91:31:9b:3f:68:8a:fb:86:be:34:39:a3:2c:05:f8:6d:
e0:99:7a:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIvf61hq5lbt963u73LEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGIyYzZhMWE2MWExN2JhYjdjMDMyMDgwYWEzYmYyNDQ3
OGI2ZGQwHhcNMjYwMjA5MTYwMTMwWhcNMjYwMjEwMTYwMTMwWjAzMTEwLwYDVQQD
EyhiNmU4MzVjNWMxN2ZmMmI1ZDI0MDgzMDgzNTRmNmUzYTcyNTZiYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWAWNHV6n2HdJutjOMFzW7HOGvXl
fl63o9hKK+ALth8Ru8mSKByPTyxirJPLT+FWbIPC4ijIwH58OEZQFZJPfA0xy7VU
ZiUvfl/qUFQztFIWzyUJlt/PmCTNMO/pC30HKIKtOWPcuWPutKmM+mPEZ9eTo1Fn
7ks6GF5oWTjf9TDZIr/N5wKxMPHwPZgiYsS6wcMwarwAN1hwSUKgBGDyUqGSbz+6
LDwWZgU87XA+m/tkveawkrwgKXpYLttOodCvuBSmsh85/6q6iWVPh7QLISWkEvJv
EebGmJEWm4Z4nfh6HsQExFDAa+EyFa5KMw41cUZjhX64MX80fBIbZU8kJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLboNcXBf/K10kCDCDVPbjpyVro5MB8GA1UdIwQY
MBaAFCGLLGoaYaF7q3wDIICqO/JEeLbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlzc2FocGhvWHVyZkFNZ2dLbzc4a1I0dHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS84NDkxNDAtYzg1My00OGNkLTlhODQt
Yjk5MzE2OGJjNTkzLzEvSVlzc2FocGhvWHVyZkFNZ2dLbzc4a1I0dHQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS84NDkxNDAtYzg1My00OGNkLTlhODQtYjk5MzE2OGJjNTkz
LzEvSVlzc2FocGhvWHVyZkFNZ2dLbzc4a1I0dHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPhrRNLl
NPzYv4+NDDQtelrT0fdfi7oN7piIaDX5/vCQmWwoH86zo10BVXPRZpThXJUFq5Uc
zw6ILQXegOpKiurlbZbiCem2ivb/HIvaK7VTANT0xSWc1DDqZzZ8xevkvQCKkNS2
FlY8i21WN+jAQPAbuSE7UvO3TA1LEzvLbajfIWpJgakwj/PsIwFO/aQqBWZ79G9t
m/c61Ns7yhufPcxUjCpwTH89zgxw6JD6tndJpPQEZEYGTPNlnLx4oQ/eJPs7WuFL
dKMQkrVafXLYj3R6LfVEvSLeDuN/3+N+XvsgeIWRj+h8CJK6FpORMZs/aIr7hr40
OaMsBfht4Jl6ng==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:51 2026 by rpki-client