This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier: QCmLeIhFSDqnGYyBT/KSQVWeuLBeUzoRMNnuw0QzMnU=
Subject key identifier: 05:C8:5B:94:03:49:0B:FC:5F:88:5F:AD:B4:8F:F6:8C:EC:A0:90:DC
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer: /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial: 019C420F38A705CA636D2CEA1D52F3F421A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number: 0DE9
Signing time: Mon 09 Feb 2026 11:00:19 +0000
Manifest this update: Mon 09 Feb 2026 11:00:19 +0000
Manifest next update: Tue 10 Feb 2026 11:00:19 +0000
Files and hashes: 1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: dMgnj5IocPo9JBHqIbvPg5oEIFJ5tdyFWLvQQ5cs1E8=)
2: i88AXjkXzlj40akB1G-HmIFf15s.roa (hash: 3yK2qP5LSrsi2hlIg5t/JF6Pz2bjj3/z4KWWbRJV2Jw=)
3: jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa (hash: VoytDp/AhhYORR1aUTZNF199Gd9kVzSoMBMevGAIxsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:38:a7:05:ca:63:6d:2c:ea:1d:52:f3:f4:21:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Validity
Not Before: Feb 9 11:00:19 2026 GMT
Not After : Feb 10 11:00:19 2026 GMT
Subject: CN=05c85b9403490bfc5f885fadb48ff68ceca090dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:04:96:0e:bd:30:f7:0c:4a:aa:39:33:64:
78:53:bc:8a:c8:a6:92:f9:8e:e7:c7:60:5b:ef:e7:
ad:40:6b:b1:ef:b8:fd:e7:47:b8:2e:8d:75:6b:b9:
38:ff:52:e8:4c:9a:72:0e:a8:56:c3:7b:26:fd:82:
d0:a4:14:fc:ce:28:ef:0d:30:80:89:f4:f5:7d:24:
0c:6f:5a:84:1e:0e:66:45:06:17:f1:fd:9c:09:0c:
80:5a:2c:44:29:03:17:14:b5:f0:8e:5d:a7:ab:6a:
b4:80:04:7a:02:3b:36:0e:1d:74:da:ee:3f:22:10:
85:5d:45:d5:e9:42:36:3b:55:4e:f9:7d:64:ff:7b:
da:18:2e:fc:07:be:92:b9:29:38:32:61:e1:46:01:
06:b7:95:76:71:12:ff:26:9c:a2:73:00:73:e8:a6:
f0:13:f2:f3:2c:0c:3d:a9:d1:ec:c8:a5:9a:af:78:
57:8b:aa:70:e3:25:bf:b0:4f:93:ac:e1:29:c2:26:
c5:29:0b:25:4d:ac:66:ed:6f:dc:75:6e:04:60:b2:
90:aa:c6:59:d9:ae:f2:92:0b:c0:3f:1e:19:99:d4:
c5:8e:54:34:8c:10:2a:cf:3e:1c:fd:e0:be:8f:98:
df:00:c4:10:64:a6:0c:a0:ec:52:56:b1:20:34:3d:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C8:5B:94:03:49:0B:FC:5F:88:5F:AD:B4:8F:F6:8C:EC:A0:90:DC
X509v3 Authority Key Identifier:
keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:66:9d:34:ac:81:a4:7c:ca:f4:cc:9b:9e:d6:69:63:18:d1:
f3:1c:72:44:58:d0:45:d2:77:7d:d2:09:c9:57:9e:9a:fa:b4:
0d:1a:05:1b:50:9b:22:9b:2f:28:89:4c:a8:fd:95:85:52:02:
a6:a1:5e:af:09:36:f8:a1:8c:ff:46:f5:30:38:33:da:45:f6:
d7:d7:be:fa:ac:18:ef:01:6e:36:3e:92:1c:25:5e:59:01:0a:
bf:27:75:81:31:5b:2f:12:2b:5b:b5:af:f1:8c:6a:62:64:c5:
da:8c:d3:a1:4b:9a:3a:6b:23:81:78:11:61:6b:05:a2:0f:a0:
ca:e2:75:55:04:09:31:e4:f8:89:6e:ff:f6:64:31:79:b4:89:
22:e3:c9:1a:aa:e5:47:79:20:a7:a6:7a:9a:a4:6d:ad:ab:d4:
00:59:91:ea:2d:eb:3b:98:25:ba:93:30:61:9f:60:3e:0b:36:
ae:bc:23:34:d9:72:56:e8:0e:63:67:e5:23:bb:84:c4:a8:8e:
f5:70:d2:6d:f6:a9:f2:04:96:c9:d5:70:1a:8f:8d:4c:72:76:
ba:d0:78:6a:bd:ab:a9:5f:44:b9:a3:43:5d:3c:f7:bc:fc:87:
83:b9:10:80:fd:85:ef:29:84:a7:c5:f7:83:71:10:83:09:79:
5e:f1:f4:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCDzinBcpjbSzqHVLz9CGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzYzM2ExNGNhYzdjN2EwOTIyZmZkOTgwZGU1ZjI3OGEz
YmUyNjcwHhcNMjYwMjA5MTEwMDE5WhcNMjYwMjEwMTEwMDE5WjAzMTEwLwYDVQQD
EygwNWM4NWI5NDAzNDkwYmZjNWY4ODVmYWRiNDhmZjY4Y2VjYTA5MGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGIElg69MPcMSqo5M2R4U7yKyKaS
+Y7nx2Bb7+etQGux77j950e4Lo11a7k4/1LoTJpyDqhWw3sm/YLQpBT8zijvDTCA
ifT1fSQMb1qEHg5mRQYX8f2cCQyAWixEKQMXFLXwjl2nq2q0gAR6Ajs2Dh102u4/
IhCFXUXV6UI2O1VO+X1k/3vaGC78B76SuSk4MmHhRgEGt5V2cRL/JpyicwBz6Kbw
E/LzLAw9qdHsyKWar3hXi6pw4yW/sE+TrOEpwibFKQslTaxm7W/cdW4EYLKQqsZZ
2a7ykgvAPx4ZmdTFjlQ0jBAqzz4c/eC+j5jfAMQQZKYMoOxSVrEgND0U6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXIW5QDSQv8X4hfrbSP9ozsoJDcMB8GA1UdIwQY
MBaAFNrGM6FMrHx6CSL/2YDeXyeKO+JnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWIt
MjQ1MTVhMTRjNDU2LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jODUyYjUtYWNjNC00ZDcwLWFlZWItMjQ1MTVhMTRjNDU2
LzEvMnNZem9VeXNmSG9KSXZfWmdONWZKNG83NG1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWadNKyB
pHzK9MybntZpYxjR8xxyRFjQRdJ3fdIJyVeemvq0DRoFG1CbIpsvKIlMqP2VhVIC
pqFerwk2+KGM/0b1MDgz2kX219e++qwY7wFuNj6SHCVeWQEKvyd1gTFbLxIrW7Wv
8YxqYmTF2ozToUuaOmsjgXgRYWsFog+gyuJ1VQQJMeT4iW7/9mQxebSJIuPJGqrl
R3kgp6Z6mqRtravUAFmR6i3rO5glupMwYZ9gPgs2rrwjNNlyVugOY2flI7uExKiO
9XDSbfap8gSWydVwGo+NTHJ2utB4ar2rqV9EuaNDXTz3vPyHg7kQgP2F7ymEp8X3
g3EQgwl5XvH0GQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:01 2026 by rpki-client