This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: lzxE0CckojeIrZGQeRMO2xwT9ayctLYRBIatF7GZmY4=
Subject key identifier: 95:08:9F:94:CB:26:8B:B5:29:BA:29:8C:2A:69:4B:C9:FD:6B:D2:8A
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 019C45476FF4DEA8ECC141185008EFB760CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 0B88
Signing time: Tue 10 Feb 2026 02:00:35 +0000
Manifest this update: Tue 10 Feb 2026 02:00:35 +0000
Manifest next update: Wed 11 Feb 2026 02:00:35 +0000
Files and hashes: 1: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: FRgAbPn2O0lH2ORW0BS3hR/IzXIKdNGnsoTC92pZ3lw=)
2: ZyKblhYof-lvzcG5wAYzbAd36M4.roa (hash: Ov+QQPf43TIV3qdCbGiYFnfp3OquF/Rfa6pgoiI/wlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:47:6f:f4:de:a8:ec:c1:41:18:50:08:ef:b7:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Feb 10 02:00:35 2026 GMT
Not After : Feb 11 02:00:35 2026 GMT
Subject: CN=95089f94cb268bb529ba298c2a694bc9fd6bd28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:ce:b7:63:da:f8:56:1d:d6:64:52:33:91:
2d:16:f5:b4:bd:c7:7d:e6:8b:16:04:fb:24:95:a3:
12:9f:a3:b3:7c:11:ac:8c:9d:b7:a1:d8:bf:12:87:
1a:58:15:75:60:29:19:9d:61:d2:09:c9:2b:39:e0:
6e:1a:4c:b9:30:0a:8f:4b:1e:70:33:c5:7c:f6:11:
75:9f:7f:78:72:87:fd:55:df:4c:91:b6:e0:c9:02:
96:3d:ce:c9:4a:15:ca:cd:fc:f4:1c:10:6b:6c:66:
a7:5d:dc:5e:e5:10:b1:a1:aa:ff:23:29:f2:1a:5e:
ef:58:ce:ec:b3:17:7a:ce:0e:61:33:ef:14:5b:d7:
b0:aa:c5:5b:ee:09:d4:c8:c1:e1:05:a2:e2:0e:47:
8a:b1:4f:f8:05:ef:54:06:0b:37:4a:aa:4f:7a:16:
ea:7e:40:eb:de:70:65:c6:2c:6b:b3:81:c0:bc:17:
ca:7d:13:18:73:13:50:e8:c2:23:b2:6b:35:96:99:
c9:90:7c:66:7e:d0:4e:13:f9:7a:29:39:05:e5:8b:
de:9f:4f:cf:0a:36:a4:c7:43:93:2b:c2:ba:8a:3d:
64:59:b5:54:75:6c:7c:70:bb:82:e6:c0:25:58:f4:
58:6d:02:7c:d3:af:8c:ea:30:1a:f0:10:07:eb:23:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:08:9F:94:CB:26:8B:B5:29:BA:29:8C:2A:69:4B:C9:FD:6B:D2:8A
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:84:39:7f:40:0e:c2:2c:c4:56:60:74:6e:79:92:77:9b:7c:
bf:97:a1:ee:b3:84:18:2b:99:cc:c2:7b:66:ec:b4:f4:70:8b:
bc:fa:98:d9:3c:7c:a2:a5:12:09:02:27:43:a4:36:0b:80:6a:
80:8a:3f:72:d9:cc:fa:c4:f1:62:ad:fb:c4:fe:c9:1e:45:4c:
de:cd:31:eb:ee:fc:72:25:17:74:49:48:d6:bc:9f:c1:f5:c2:
18:c4:9f:6d:69:7e:82:af:2a:8b:55:c9:5d:6f:a9:77:a8:31:
cd:62:74:da:a7:80:e4:ec:63:69:1f:f4:e0:66:80:e0:5b:d1:
ac:e0:2c:21:3c:a3:97:08:bd:20:16:2c:3e:58:e9:bb:d9:07:
18:ae:3d:65:21:fc:25:02:8d:b4:51:40:cf:02:eb:fd:ad:b3:
ec:0c:cf:85:c6:db:8e:45:cf:ff:e0:45:a6:5d:83:ca:92:97:
db:ee:b5:cd:84:e0:f1:27:d0:b3:97:41:12:f5:bc:77:6f:45:
15:b2:a0:ab:77:11:9d:20:0b:94:8b:70:70:11:3c:b7:56:5e:
57:28:a6:8b:66:77:8c:63:c4:50:d1:c8:a6:da:e3:7e:fb:f7:
a0:41:2a:84:73:2e:3d:4b:8e:0d:0c:1a:4e:99:32:fe:4c:b0:
15:13:91:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxFR2/03qjswUEYUAjvt2DNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOWQxNjZjNjQ4NDczODk3MmU5YjMzOTM4MTY1ZjQ0ODlh
NTE2OGMwHhcNMjYwMjEwMDIwMDM1WhcNMjYwMjExMDIwMDM1WjAzMTEwLwYDVQQD
Eyg5NTA4OWY5NGNiMjY4YmI1MjliYTI5OGMyYTY5NGJjOWZkNmJkMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybnOt2Pa+FYd1mRSM5EtFvW0vcd9
5osWBPsklaMSn6OzfBGsjJ23odi/EocaWBV1YCkZnWHSCckrOeBuGky5MAqPSx5w
M8V89hF1n394cof9Vd9MkbbgyQKWPc7JShXKzfz0HBBrbGanXdxe5RCxoar/Iyny
Gl7vWM7ssxd6zg5hM+8UW9ewqsVb7gnUyMHhBaLiDkeKsU/4Be9UBgs3SqpPehbq
fkDr3nBlxixrs4HAvBfKfRMYcxNQ6MIjsms1lpnJkHxmftBOE/l6KTkF5Yven0/P
Cjakx0OTK8K6ij1kWbVUdWx8cLuC5sAlWPRYbQJ806+M6jAa8BAH6yMPtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUIn5TLJou1KbopjCppS8n9a9KKMB8GA1UdIwQY
MBaAFEqdFmxkhHOJcumzOTgWX0SJpRaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMt
YmZhOTYzOTJhYzVkLzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMtYmZhOTYzOTJhYzVk
LzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoQ5f0AO
wizEVmB0bnmSd5t8v5eh7rOEGCuZzMJ7Zuy09HCLvPqY2Tx8oqUSCQInQ6Q2C4Bq
gIo/ctnM+sTxYq37xP7JHkVM3s0x6+78ciUXdElI1ryfwfXCGMSfbWl+gq8qi1XJ
XW+pd6gxzWJ02qeA5OxjaR/04GaA4FvRrOAsITyjlwi9IBYsPljpu9kHGK49ZSH8
JQKNtFFAzwLr/a2z7AzPhcbbjkXP/+BFpl2DypKX2+61zYTg8SfQs5dBEvW8d29F
FbKgq3cRnSALlItwcBE8t1ZeVyimi2Z3jGPEUNHIptrjfvv3oEEqhHMuPUuODQwa
Tpky/kywFRORHQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 08:39:57 2026 by rpki-client