This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: A7dsAZbvC+ph9/ay/T0eFiMd+CrMT+VqL0XruSCK1zw=
Subject key identifier: F4:4F:7A:2C:49:B9:62:48:E8:5B:C4:BD:D0:1B:F7:1F:FE:DE:F6:59
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 019C4390BBE754BC0EBBD9B27DD801DD1737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 07F5
Signing time: Mon 09 Feb 2026 18:01:24 +0000
Manifest this update: Mon 09 Feb 2026 18:01:24 +0000
Manifest next update: Tue 10 Feb 2026 18:01:24 +0000
Files and hashes: 1: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: GCKapG1+RAMktkRrCpf3JUotalJXpSH64aec/TuKCU0=)
2: oog2fr3azEwEvR96dUyVexH-pPI.roa (hash: 5Y/z/o0CKihXpA4MvidWc/Ioyt/faMA9m4DgHjwqJsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:bb:e7:54:bc:0e:bb:d9:b2:7d:d8:01:dd:17:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Feb 9 18:01:24 2026 GMT
Not After : Feb 10 18:01:24 2026 GMT
Subject: CN=f44f7a2c49b96248e85bc4bdd01bf71ffedef659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:3e:37:a2:b5:1d:27:2d:ad:1f:5a:7f:86:
e0:b1:f5:4c:31:20:62:25:9d:56:a4:e5:0a:b2:04:
55:67:30:f7:70:9a:88:01:b3:88:da:a4:11:48:ff:
c1:f1:89:93:95:03:d3:fb:9e:7c:62:df:af:3e:12:
40:b1:0f:b5:d8:6c:89:f1:56:d9:c1:44:06:6d:4a:
69:41:e6:31:bf:45:2d:e9:41:b1:0d:99:50:72:fb:
50:64:82:13:f2:8d:bf:a3:e1:81:03:f6:71:8a:85:
3d:10:3e:36:16:7d:a4:af:80:ed:03:cd:c7:c6:09:
91:89:c7:2e:d7:35:97:56:dc:23:cb:a8:5a:d0:2f:
31:c7:e5:2f:ac:c3:15:d5:fa:11:43:73:69:6d:e8:
10:89:27:93:7b:0b:7f:e0:bb:ff:07:b6:e2:f4:6f:
fe:74:b3:cf:99:6d:4f:9f:16:b8:ef:2a:95:68:88:
4e:93:03:bf:28:93:74:7b:48:95:f5:16:b0:40:fb:
4f:ae:0d:e2:7e:de:e5:6e:be:be:f1:3c:36:68:97:
47:84:69:7b:8e:05:e5:dd:eb:79:86:b7:f4:51:06:
ea:b7:2d:04:1b:b3:70:6e:43:8b:5c:57:5d:06:62:
a3:5f:be:ba:40:f7:4a:2a:f9:87:65:64:27:7c:35:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:7A:2C:49:B9:62:48:E8:5B:C4:BD:D0:1B:F7:1F:FE:DE:F6:59
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9d:88:9e:0c:a0:17:f0:72:74:70:ca:62:10:75:44:9e:9c:
47:e8:c2:95:89:bc:7f:f2:59:51:e0:76:9c:ee:cf:9d:88:0a:
08:1b:e0:04:89:22:9b:c2:77:27:b1:ce:58:84:36:c7:d3:1a:
f9:81:b1:8e:3e:cb:5e:d4:81:01:49:f9:0d:d9:43:36:35:62:
30:8a:91:1e:54:ad:26:16:6e:27:a5:ae:e6:aa:9e:c0:7d:93:
be:f0:d8:c9:7e:4a:3a:96:ee:4c:f9:93:9c:00:1c:9b:01:ca:
33:c4:72:d6:a7:0d:ce:14:d2:f8:d1:15:ec:33:10:24:38:c9:
d8:e1:92:99:a7:bb:b1:21:62:6e:0d:f8:38:74:05:cf:78:c3:
0d:ef:41:0f:e2:cd:71:89:22:05:58:8c:6b:47:c4:11:f3:9d:
72:16:e4:8f:9d:85:45:29:88:28:79:ec:92:9a:36:99:bc:14:
10:54:8e:7b:e1:52:0c:f6:75:71:2d:3d:9b:52:34:17:e8:bb:
e5:9b:26:2b:b7:8b:a4:0d:a9:31:71:0c:7b:9f:db:43:b8:32:
ad:ef:48:e9:80:59:35:b6:48:c2:01:67:2c:8b:ed:17:31:30:
ba:00:28:d6:d7:6c:31:ff:28:67:ad:c6:06:73:18:6d:bc:d7:
14:80:9a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkLvnVLwOu9myfdgB3Rc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjg0MmRjNDM5ODM2NjM1YTVjOWVkNmMwYTQ5NWIzZTYz
NDRhMDMwHhcNMjYwMjA5MTgwMTI0WhcNMjYwMjEwMTgwMTI0WjAzMTEwLwYDVQQD
EyhmNDRmN2EyYzQ5Yjk2MjQ4ZTg1YmM0YmRkMDFiZjcxZmZlZGVmNjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+o+N6K1HSctrR9af4bgsfVMMSBi
JZ1WpOUKsgRVZzD3cJqIAbOI2qQRSP/B8YmTlQPT+558Yt+vPhJAsQ+12GyJ8VbZ
wUQGbUppQeYxv0Ut6UGxDZlQcvtQZIIT8o2/o+GBA/ZxioU9ED42Fn2kr4DtA83H
xgmRiccu1zWXVtwjy6ha0C8xx+UvrMMV1foRQ3NpbegQiSeTewt/4Lv/B7bi9G/+
dLPPmW1Pnxa47yqVaIhOkwO/KJN0e0iV9RawQPtPrg3ift7lbr6+8Tw2aJdHhGl7
jgXl3et5hrf0UQbqty0EG7NwbkOLXFddBmKjX766QPdKKvmHZWQnfDUO4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRPeixJuWJI6FvEvdAb9x/+3vZZMB8GA1UdIwQY
MBaAFHFoQtxDmDZjWlye1sCklbPmNEoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQt
NzA2MDI3NTZjYzhkLzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQtNzA2MDI3NTZjYzhk
LzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOp2Ingyg
F/BydHDKYhB1RJ6cR+jClYm8f/JZUeB2nO7PnYgKCBvgBIkim8J3J7HOWIQ2x9Ma
+YGxjj7LXtSBAUn5DdlDNjViMIqRHlStJhZuJ6Wu5qqewH2TvvDYyX5KOpbuTPmT
nAAcmwHKM8Ry1qcNzhTS+NEV7DMQJDjJ2OGSmae7sSFibg34OHQFz3jDDe9BD+LN
cYkiBViMa0fEEfOdchbkj52FRSmIKHnskpo2mbwUEFSOe+FSDPZ1cS09m1I0F+i7
5ZsmK7eLpA2pMXEMe5/bQ7gyre9I6YBZNbZIwgFnLIvtFzEwugAo1tdsMf8oZ63G
BnMYbbzXFICaEw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:36 2026 by rpki-client