This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: p1XsBoF/IA8B29x5uvBxTiKD3o+ysXmg4V8r6CYNQyo=
Subject key identifier: 6A:01:1F:DD:4A:34:E4:5F:9F:15:F2:8F:27:75:CC:9F:9A:11:D1:46
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 019C42EB9F45D2D407661E240A8127E045EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0CF2
Signing time: Mon 09 Feb 2026 15:01:03 +0000
Manifest this update: Mon 09 Feb 2026 15:01:03 +0000
Manifest next update: Tue 10 Feb 2026 15:01:03 +0000
Files and hashes: 1: IyFwnbWnoKfZVMOw4siaFLOw0dM.roa (hash: I/fImPBHiDykSEzgNGq+cfAayabaV17LU6Onzjp6x+A=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: rcjzyi7WEeh0AStWjnYC3TC9YVI22jUHhDQdOH9K/7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:9f:45:d2:d4:07:66:1e:24:0a:81:27:e0:45:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Feb 9 15:01:03 2026 GMT
Not After : Feb 10 15:01:03 2026 GMT
Subject: CN=6a011fdd4a34e45f9f15f28f2775cc9f9a11d146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f2:8b:d6:19:5f:19:66:3e:6f:df:81:98:2c:
07:a1:1c:4b:61:d3:28:95:f2:ea:54:6b:56:ed:03:
1f:87:7b:8c:05:f6:d8:6d:e2:2a:e6:3c:6e:41:df:
fb:42:7b:df:c8:9f:1a:69:ea:aa:8b:48:18:30:e2:
83:0c:fb:c4:c3:7b:c7:7e:9a:09:2b:45:9f:3c:b4:
ac:8e:1c:b1:f3:1f:d1:5e:93:3b:13:18:d4:da:b6:
0d:40:58:07:fd:97:8b:f8:66:4b:d4:e5:6d:9f:2e:
0f:b3:17:c5:6c:b3:48:f2:51:e3:2f:a0:37:6b:69:
a1:d7:79:41:63:5b:17:02:2e:a9:c4:d2:c1:bb:e1:
56:e8:da:de:9b:97:68:ee:9e:5e:d1:87:5f:a6:70:
68:ff:18:b4:38:c5:ad:b8:7f:35:88:9e:96:2d:13:
05:86:07:95:26:aa:cf:ec:a3:47:77:b5:b7:c5:4d:
0d:0f:27:e5:34:91:f9:4a:32:18:5f:c5:ef:b3:77:
1a:d8:f1:d2:ef:b9:98:d2:14:ac:4e:80:9b:85:cd:
67:27:c9:79:af:2a:d2:b8:17:c1:44:e5:6e:0c:3b:
b6:44:b1:e8:b9:95:44:f6:d2:17:a2:98:17:94:8b:
6b:c8:a1:69:5e:36:a9:74:ee:73:3b:99:85:e1:5f:
74:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:1F:DD:4A:34:E4:5F:9F:15:F2:8F:27:75:CC:9F:9A:11:D1:46
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:71:9c:3d:8d:43:8e:b2:28:e8:97:a4:55:d0:ee:d6:bc:17:
32:38:ab:8b:6b:97:14:d3:c7:b9:fa:ea:b4:38:2c:37:b3:63:
7f:91:cf:22:57:9b:75:ef:a4:2c:48:56:49:04:33:e0:f7:fd:
2c:c0:05:07:40:d4:ff:4f:f9:c0:28:cb:d3:21:dc:9b:d6:02:
ed:9d:56:1a:8c:b1:bc:dd:5c:65:9b:72:39:90:35:54:5e:2b:
12:ae:f0:89:42:c2:96:e9:d6:80:49:7b:5a:14:e7:b3:44:2a:
54:cf:b7:9a:06:d9:c7:21:52:02:41:b4:e1:da:4b:d7:59:55:
e2:ba:2b:87:d5:6e:c6:f6:53:f8:3f:d0:23:65:12:ea:42:61:
8a:eb:54:99:5d:8f:5a:80:bf:e9:be:1e:f4:94:d5:99:86:bf:
eb:8f:5d:49:77:c9:09:88:8f:1c:b8:db:dc:54:13:75:c0:98:
aa:f3:d1:78:89:29:a2:bc:ad:4f:75:cf:1f:c2:5b:26:22:e0:
59:33:6b:85:78:ce:ed:29:4b:c4:93:0f:94:7c:ae:c9:c6:90:
7f:76:e2:59:77:07:78:45:d2:0c:ea:b7:66:dc:7c:d7:e7:52:
c8:b5:73:44:d7:5d:28:8f:9a:62:1b:c4:63:92:68:68:81:48:
77:55:4d:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC659F0tQHZh4kCoEn4EXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MGYyMWMzZGM5Mzc1N2ZjMDMyODJhODM1NjAwZDY1OWY5
NjFlOGUwHhcNMjYwMjA5MTUwMTAzWhcNMjYwMjEwMTUwMTAzWjAzMTEwLwYDVQQD
Eyg2YTAxMWZkZDRhMzRlNDVmOWYxNWYyOGYyNzc1Y2M5ZjlhMTFkMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifKL1hlfGWY+b9+BmCwHoRxLYdMo
lfLqVGtW7QMfh3uMBfbYbeIq5jxuQd/7QnvfyJ8aaeqqi0gYMOKDDPvEw3vHfpoJ
K0WfPLSsjhyx8x/RXpM7ExjU2rYNQFgH/ZeL+GZL1OVtny4PsxfFbLNI8lHjL6A3
a2mh13lBY1sXAi6pxNLBu+FW6Nrem5do7p5e0YdfpnBo/xi0OMWtuH81iJ6WLRMF
hgeVJqrP7KNHd7W3xU0NDyflNJH5SjIYX8Xvs3ca2PHS77mY0hSsToCbhc1nJ8l5
ryrSuBfBROVuDDu2RLHouZVE9tIXopgXlItryKFpXjapdO5zO5mF4V90YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoBH91KNORfnxXyjyd1zJ+aEdFGMB8GA1UdIwQY
MBaAFKUPIcPck3V/wDKCqDVgDWWflh6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lYTFkZjctODA4YS00N2MzLWFlNTEt
YjA4NDNlYzM4ODIzLzEvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lYTFkZjctODA4YS00N2MzLWFlNTEtYjA4NDNlYzM4ODIz
LzEvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenGcPY1D
jrIo6JekVdDu1rwXMjiri2uXFNPHufrqtDgsN7Njf5HPIlebde+kLEhWSQQz4Pf9
LMAFB0DU/0/5wCjL0yHcm9YC7Z1WGoyxvN1cZZtyOZA1VF4rEq7wiULClunWgEl7
WhTns0QqVM+3mgbZxyFSAkG04dpL11lV4rorh9VuxvZT+D/QI2US6kJhiutUmV2P
WoC/6b4e9JTVmYa/649dSXfJCYiPHLjb3FQTdcCYqvPReIkporytT3XPH8JbJiLg
WTNrhXjO7SlLxJMPlHyuycaQf3biWXcHeEXSDOq3Ztx81+dSyLVzRNddKI+aYhvE
Y5JoaIFId1VNDA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:01 2026 by rpki-client