This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier: HlB+cjq383SHQCJRXD8FJqvV8VHaFA0CORvfgFvjcVg=
Subject key identifier: 17:23:EC:53:3C:74:77:4A:7A:01:C6:96:F9:36:AE:18:DE:C8:A8:21
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 019C438FBB7BBC8DD7B25A05B83D29267908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number: 0F2D
Signing time: Mon 09 Feb 2026 18:00:18 +0000
Manifest this update: Mon 09 Feb 2026 18:00:18 +0000
Manifest next update: Tue 10 Feb 2026 18:00:18 +0000
Files and hashes: 1: 6PNq7FkmkwoGvQ7nEoMTJLXDiKM.roa (hash: 3mSQiaXvNc3clXTT3+J9NGR/sfgLmFoq36+zVVtNRUY=)
2: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: C7fru+5syRpoOIwYnt4UrWbvK1so8O7sEL0WkWShc+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:bb:7b:bc:8d:d7:b2:5a:05:b8:3d:29:26:79:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Feb 9 18:00:18 2026 GMT
Not After : Feb 10 18:00:18 2026 GMT
Subject: CN=1723ec533c74774a7a01c696f936ae18dec8a821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:1e:01:ff:17:d3:b9:de:4c:67:50:93:23:
68:71:e8:83:7e:07:67:27:03:9d:b2:02:1b:1d:a2:
ec:4c:f1:ee:1f:f8:65:1b:56:f4:7c:10:e8:97:b1:
65:dc:6d:6b:77:bc:24:0e:2a:b2:b1:c6:0f:29:6a:
6d:3e:16:b5:2c:2e:37:04:c0:f9:52:db:fb:64:71:
8a:b5:32:a1:06:9c:e9:d7:e3:76:d8:da:6a:5e:ab:
05:1f:03:3c:53:43:fa:3c:32:db:aa:8e:70:3b:31:
2e:e1:49:75:df:72:cf:a1:27:cc:57:ca:a2:b4:37:
d7:db:f4:56:e3:c5:b7:a1:1e:89:af:b6:1a:55:d6:
c7:16:0d:bd:d6:dd:b5:92:95:ec:b1:12:46:8e:67:
47:73:af:49:a4:f9:93:3c:d2:af:21:94:55:92:fc:
5d:10:39:b8:0d:fe:41:32:b2:61:cf:74:5d:e9:3a:
bf:52:21:7b:31:03:13:7c:ad:27:98:33:73:78:3a:
54:43:37:36:b5:86:71:93:3f:60:b9:24:33:52:f1:
da:d1:a4:48:81:e1:fa:f8:4d:fc:b4:d2:62:63:8a:
29:de:5e:da:c9:62:ea:70:ea:39:6d:3e:38:fb:ef:
59:ae:d0:1a:40:9a:45:49:96:fe:23:25:74:66:57:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:23:EC:53:3C:74:77:4A:7A:01:C6:96:F9:36:AE:18:DE:C8:A8:21
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:de:4c:7d:c6:66:25:ac:50:78:d6:61:75:4d:93:c2:3b:
d0:cc:a7:c6:bf:a1:7b:59:cb:a7:2d:04:e5:cb:8b:26:07:09:
75:0d:3a:f3:4a:7a:c8:89:e6:d9:da:4a:08:eb:7e:5f:15:63:
08:05:fe:47:1e:68:bc:e4:57:79:38:a2:f8:0c:4a:69:6f:fa:
dd:f3:8a:7d:20:0e:78:89:6c:17:8b:92:48:07:d3:78:f4:25:
69:6e:a5:35:7d:0a:98:73:9c:b8:29:20:e4:68:28:f9:47:1c:
71:0f:3b:03:71:7e:c0:c1:ae:aa:f2:39:4e:3b:5a:56:68:e2:
76:39:03:dc:b4:3c:01:30:35:82:df:b8:d0:af:c5:8b:16:51:
90:86:f7:7a:50:02:1b:cb:55:19:00:9a:b2:e3:00:ca:34:fa:
f4:a7:a5:b6:a9:d7:a4:2a:29:e1:76:46:85:b0:34:34:66:f2:
0e:bd:71:3b:a2:a0:01:c4:e7:a7:22:57:7d:ef:2e:67:a9:de:
31:a7:86:03:6c:48:58:94:b3:cd:e6:49:81:2b:3c:2e:1d:f5:
80:a3:b2:25:f1:da:ce:fa:68:3d:e7:3f:a4:f5:1a:51:38:9e:
5e:95:48:c0:e8:39:3c:02:b3:f9:ca:77:76:4c:26:f2:af:fd:
7a:82:ce:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj7t7vI3XsloFuD0pJnkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZGU0NjM4Yzk3MmM4Y2UxOWM0NjY5YWI1N2RiMjY2YWY3
Mjg1YjcwHhcNMjYwMjA5MTgwMDE4WhcNMjYwMjEwMTgwMDE4WjAzMTEwLwYDVQQD
EygxNzIzZWM1MzNjNzQ3NzRhN2EwMWM2OTZmOTM2YWUxOGRlYzhhODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBgeAf8X07neTGdQkyNoceiDfgdn
JwOdsgIbHaLsTPHuH/hlG1b0fBDol7Fl3G1rd7wkDiqyscYPKWptPha1LC43BMD5
Utv7ZHGKtTKhBpzp1+N22NpqXqsFHwM8U0P6PDLbqo5wOzEu4Ul133LPoSfMV8qi
tDfX2/RW48W3oR6Jr7YaVdbHFg291t21kpXssRJGjmdHc69JpPmTPNKvIZRVkvxd
EDm4Df5BMrJhz3Rd6Tq/UiF7MQMTfK0nmDNzeDpUQzc2tYZxkz9guSQzUvHa0aRI
geH6+E38tNJiY4op3l7ayWLqcOo5bT44++9ZrtAaQJpFSZb+IyV0Zlc4VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcj7FM8dHdKegHGlvk2rhjeyKghMB8GA1UdIwQY
MBaAFEjeRjjJcsjOGcRmmrV9smavcoW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYt
ZmNjNjYxNGRlMDM1LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYtZmNjNjYxNGRlMDM1
LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMzeTH3G
ZiWsUHjWYXVNk8I70Mynxr+he1nLpy0E5cuLJgcJdQ0680p6yInm2dpKCOt+XxVj
CAX+Rx5ovORXeTii+AxKaW/63fOKfSAOeIlsF4uSSAfTePQlaW6lNX0KmHOcuCkg
5Ggo+UcccQ87A3F+wMGuqvI5TjtaVmjidjkD3LQ8ATA1gt+40K/FixZRkIb3elAC
G8tVGQCasuMAyjT69KeltqnXpCop4XZGhbA0NGbyDr1xO6KgAcTnpyJXfe8uZ6ne
MaeGA2xIWJSzzeZJgSs8Lh31gKOyJfHazvpoPec/pPUaUTieXpVIwOg5PAKz+cp3
dkwm8q/9eoLOcQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:35 2026 by rpki-client