This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: sXOshwuwfaAPWguk4c7DaCZ++OnZSAyI3IFA+m9+wXM=
Subject key identifier: 9A:9C:6B:71:48:1E:26:A6:CB:33:C4:BA:DF:02:23:87:2D:25:07:02
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019C42468B820C8E8E89E1B023BCBCEDD717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1815
Signing time: Mon 09 Feb 2026 12:00:45 +0000
Manifest this update: Mon 09 Feb 2026 12:00:45 +0000
Manifest next update: Tue 10 Feb 2026 12:00:45 +0000
Files and hashes: 1: 8py-_jOGtG165vRai_Wtlc6EJtw.roa (hash: MiTWtTuzmfpvf7lJFRzmz7SzBmsWeVuI/L+U0mXLD/c=)
2: AcIyLDeXWbTkmiCjU90tuYBNwV8.roa (hash: WZFHJYFia3ok9XrXir4X8cKoJxtnDslcZlNbnBmoUQM=)
3: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: 3necx+FhMG2apywe01ONQEnnLEkalLUsGcO2cdXAfI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:8b:82:0c:8e:8e:89:e1:b0:23:bc:bc:ed:d7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Feb 9 12:00:45 2026 GMT
Not After : Feb 10 12:00:45 2026 GMT
Subject: CN=9a9c6b71481e26a6cb33c4badf0223872d250702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:a1:c4:58:96:a9:8f:85:52:59:29:40:34:
15:87:8e:37:d6:3e:6c:7a:b5:e9:59:f8:d3:43:2f:
ff:b4:1c:b0:04:5e:9a:05:d2:0f:20:a2:4c:71:22:
ba:99:64:84:46:ed:e0:1e:48:7a:a5:3b:da:14:84:
7c:7c:91:01:b9:0e:cc:f5:01:03:4c:88:7b:e2:36:
b6:eb:d2:52:a8:30:6d:4c:22:27:d5:e7:a5:31:29:
66:e9:ae:f1:66:0d:8b:42:d2:59:91:cf:4a:13:aa:
df:d4:8a:e2:ea:da:01:83:82:83:2c:73:fe:60:17:
64:a4:0c:9d:68:27:e4:0f:5d:9b:8b:61:c4:9b:eb:
64:5a:5f:61:76:28:e6:f4:72:40:c5:a8:d2:02:6d:
ef:e0:8e:a4:4f:04:bb:dc:d8:70:e7:e7:49:c5:83:
13:79:a1:d0:72:ad:34:93:6f:a8:29:29:5b:51:3c:
94:fe:28:de:82:4b:1b:11:8a:e7:b8:00:de:58:f1:
c1:db:ed:f9:bc:7d:d3:24:1c:6c:f2:f5:2e:65:cc:
a1:88:fe:06:7b:1d:46:b0:be:10:ab:57:6b:23:d5:
b3:f0:4a:0d:6c:d9:18:af:f4:ee:b4:a4:d9:a4:c1:
63:35:0d:6a:89:1b:58:89:52:c7:f0:7a:1e:df:24:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9C:6B:71:48:1E:26:A6:CB:33:C4:BA:DF:02:23:87:2D:25:07:02
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b9:74:04:96:e4:48:12:d0:bc:21:35:72:76:99:55:74:af:
ee:aa:f3:62:32:f3:81:73:c4:bc:5f:c5:ae:b1:7a:f7:57:fe:
5e:1b:bb:bc:43:87:37:bd:c7:a6:ff:19:94:ec:1e:bd:3d:c4:
5c:be:e3:f7:7b:40:1a:b2:f4:50:08:31:15:35:e6:44:8a:bf:
f6:4c:d8:40:58:91:a4:93:d8:bd:7a:9a:8e:3b:43:b6:10:12:
84:78:ce:3b:7c:85:ab:bb:02:57:98:28:bf:06:e2:50:78:e9:
c3:ca:de:52:b1:f5:04:a8:e9:2b:e9:09:7a:73:ea:41:c8:51:
fa:05:06:ce:40:ec:5e:1e:84:98:18:50:97:d9:61:22:3d:d5:
71:23:ac:08:0a:5b:4e:3c:9f:6d:18:35:2c:13:b3:14:d9:51:
d1:ec:26:9f:c5:bd:99:4d:f0:50:4d:8e:75:b0:07:c4:45:ed:
da:92:ab:a3:28:94:0d:13:2f:6d:0e:fd:bd:48:c2:81:68:0d:
2b:19:2a:f9:eb:74:11:8f:4c:e6:6d:de:8f:df:81:ff:19:c5:
ca:f9:81:95:bb:cd:35:f9:d5:4e:f0:aa:88:5e:14:5b:a0:b0:
d2:8f:ba:9a:07:c1:a9:05:b1:35:e3:46:ee:3a:b5:4b:97:b6:
da:52:dc:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRouCDI6OieGwI7y87dcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTZiMTBkMGFjMjE4MDE3Yzc0OTM5NGU0ZjI1MTljZjJj
MDUxNGUwHhcNMjYwMjA5MTIwMDQ1WhcNMjYwMjEwMTIwMDQ1WjAzMTEwLwYDVQQD
Eyg5YTljNmI3MTQ4MWUyNmE2Y2IzM2M0YmFkZjAyMjM4NzJkMjUwNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAGhxFiWqY+FUlkpQDQVh4431j5s
erXpWfjTQy//tBywBF6aBdIPIKJMcSK6mWSERu3gHkh6pTvaFIR8fJEBuQ7M9QED
TIh74ja269JSqDBtTCIn1eelMSlm6a7xZg2LQtJZkc9KE6rf1Iri6toBg4KDLHP+
YBdkpAydaCfkD12bi2HEm+tkWl9hdijm9HJAxajSAm3v4I6kTwS73Nhw5+dJxYMT
eaHQcq00k2+oKSlbUTyU/ijegksbEYrnuADeWPHB2+35vH3TJBxs8vUuZcyhiP4G
ex1GsL4Qq1drI9Wz8EoNbNkYr/TutKTZpMFjNQ1qiRtYiVLH8Hoe3yQanwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqca3FIHiamyzPEut8CI4ctJQcCMB8GA1UdIwQY
MBaAFDAWsQ0KwhgBfHSTlOTyUZzywFFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMt
NjkzNjc2MmQyZmNlLzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMtNjkzNjc2MmQyZmNl
LzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErl0BJbk
SBLQvCE1cnaZVXSv7qrzYjLzgXPEvF/FrrF691f+Xhu7vEOHN73Hpv8ZlOwevT3E
XL7j93tAGrL0UAgxFTXmRIq/9kzYQFiRpJPYvXqajjtDthAShHjOO3yFq7sCV5go
vwbiUHjpw8reUrH1BKjpK+kJenPqQchR+gUGzkDsXh6EmBhQl9lhIj3VcSOsCApb
TjyfbRg1LBOzFNlR0ewmn8W9mU3wUE2OdbAHxEXt2pKroyiUDRMvbQ79vUjCgWgN
Kxkq+et0EY9M5m3ej9+B/xnFyvmBlbvNNfnVTvCqiF4UW6Cw0o+6mgfBqQWxNeNG
7jq1S5e22lLcCA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:47:37 2026 by rpki-client