This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json)
Hash identifier: +RrvOvq17t/lWvgzCYW60EKG/Ivm29V/9LmSB7TwdSA=
Subject key identifier: 24:DD:37:16:E6:73:5A:F0:2A:92:E3:23:1E:B0:88:A3:A5:DB:E5:42
Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Certificate serial: 019C427D8A8B7AB629688FD796CBD8A977C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
Manifest number: 17F6
Signing time: Mon 09 Feb 2026 13:00:49 +0000
Manifest this update: Mon 09 Feb 2026 13:00:49 +0000
Manifest next update: Tue 10 Feb 2026 13:00:49 +0000
Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: L/yqzlq27Efss5Ce07EkFNh9SQa5rE9tO01OG2ZQWPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:8a:8b:7a:b6:29:68:8f:d7:96:cb:d8:a9:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Validity
Not Before: Feb 9 13:00:49 2026 GMT
Not After : Feb 10 13:00:49 2026 GMT
Subject: CN=24dd3716e6735af02a92e3231eb088a3a5dbe542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2c:00:03:67:4d:e6:94:cb:19:5d:d6:0e:66:
f8:8d:6d:40:1d:c0:80:b2:08:65:9d:2c:a3:4f:af:
2b:eb:bd:f5:b5:dc:43:38:0a:3b:6e:aa:60:7c:e3:
1c:3a:3e:5f:45:49:f9:20:84:fd:ee:c2:7e:f7:48:
92:1a:bc:0d:7f:e5:9b:dd:1c:36:83:4b:72:10:83:
34:31:c5:f6:52:a0:92:8b:05:01:f3:0d:24:f2:3a:
d5:47:75:da:1e:80:e9:23:48:2a:ea:f4:d6:3f:d6:
6a:6b:55:69:cf:94:92:a5:34:66:e9:ee:83:ff:2b:
3c:34:71:a8:fc:c3:f4:72:6e:30:1f:dd:2e:54:dd:
dd:08:20:6d:41:68:18:3d:0c:21:8d:0e:af:0d:a1:
e5:96:ed:6d:fa:2b:27:66:3e:5e:83:ca:6d:24:9a:
c2:73:d2:1d:55:4e:c6:01:83:93:93:ed:72:40:06:
8f:11:fc:c0:bd:cc:a7:64:72:f4:45:48:4a:04:63:
c6:38:2f:f4:be:3a:19:ca:78:91:18:73:c7:8f:be:
53:33:df:0c:b1:f4:12:9a:48:b7:47:26:1a:60:41:
46:00:6f:f9:97:0f:09:c4:8e:68:79:4b:83:48:e5:
67:05:e6:c0:b3:00:57:48:a2:b2:6d:dd:c7:b6:48:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:37:16:E6:73:5A:F0:2A:92:E3:23:1E:B0:88:A3:A5:DB:E5:42
X509v3 Authority Key Identifier:
keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:52:9e:ef:ef:0c:b0:8c:fc:c3:7d:f2:82:0b:aa:10:bf:c5:
9b:28:d0:26:82:f6:d4:3c:9d:a0:5f:be:f6:3b:6b:e7:d9:d4:
90:7c:9d:31:79:0d:17:e7:93:f2:2f:2d:07:a9:88:36:d6:4f:
1d:46:51:89:e5:82:bd:4f:01:94:1b:7b:7e:a6:d5:83:7c:c2:
77:9d:33:42:07:4b:39:10:ee:64:42:c7:a6:8e:8d:3f:90:51:
19:a3:b5:c1:4c:a8:c2:86:ea:78:f0:4a:7e:f8:98:ba:43:c3:
42:10:a0:40:c8:27:ef:6c:82:1d:9f:5b:c5:03:52:d6:73:2d:
44:ab:3a:df:35:b3:dc:36:67:42:23:2b:c8:69:66:cd:93:59:
e3:5e:03:60:ad:e5:1e:70:ed:78:2e:94:2c:61:3a:26:9c:76:
18:53:2d:5b:92:f5:c2:2c:ff:28:15:69:de:b5:94:7a:f2:db:
3a:7b:ec:f8:52:cf:cb:80:9a:e1:19:62:e6:c4:2b:85:83:61:
fb:2c:99:33:b9:8c:01:0e:ea:ec:eb:03:50:2d:21:4c:35:a5:
ba:52:6d:d9:ad:42:7c:5a:f4:15:2e:fa:43:b2:ba:32:4a:44:
92:bb:ab:fd:f8:3c:b9:8c:ef:5b:89:b9:d9:ba:e2:60:33:e7:
cc:7a:df:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfYqLerYpaI/XlsvYqXfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTg5NGYxZDc3MzFlOTk2MTcxOWJlMWVkOTk4NDY4ZmNi
YWJlYTkwHhcNMjYwMjA5MTMwMDQ5WhcNMjYwMjEwMTMwMDQ5WjAzMTEwLwYDVQQD
EygyNGRkMzcxNmU2NzM1YWYwMmE5MmUzMjMxZWIwODhhM2E1ZGJlNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SwAA2dN5pTLGV3WDmb4jW1AHcCA
sghlnSyjT68r6731tdxDOAo7bqpgfOMcOj5fRUn5IIT97sJ+90iSGrwNf+Wb3Rw2
g0tyEIM0McX2UqCSiwUB8w0k8jrVR3XaHoDpI0gq6vTWP9Zqa1Vpz5SSpTRm6e6D
/ys8NHGo/MP0cm4wH90uVN3dCCBtQWgYPQwhjQ6vDaHllu1t+isnZj5eg8ptJJrC
c9IdVU7GAYOTk+1yQAaPEfzAvcynZHL0RUhKBGPGOC/0vjoZyniRGHPHj75TM98M
sfQSmki3RyYaYEFGAG/5lw8JxI5oeUuDSOVnBebAswBXSKKybd3HtkjjIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTdNxbmc1rwKpLjIx6wiKOl2+VCMB8GA1UdIwQY
MBaAFJzolPHXcx6ZYXGb4e2ZhGj8ur6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9pVThkZHpIcGxoY1p2aDdabUVhUHk2dnFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xZjk2OWMtZTM4Ny00NmZkLTg2MjQt
ZGM3ZjBjMDk0YjM5LzEvbk9pVThkZHpIcGxoY1p2aDdabUVhUHk2dnFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8xZjk2OWMtZTM4Ny00NmZkLTg2MjQtZGM3ZjBjMDk0YjM5
LzEvbk9pVThkZHpIcGxoY1p2aDdabUVhUHk2dnFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFKe7+8M
sIz8w33ygguqEL/FmyjQJoL21DydoF++9jtr59nUkHydMXkNF+eT8i8tB6mINtZP
HUZRieWCvU8BlBt7fqbVg3zCd50zQgdLORDuZELHpo6NP5BRGaO1wUyowobqePBK
fviYukPDQhCgQMgn72yCHZ9bxQNS1nMtRKs63zWz3DZnQiMryGlmzZNZ414DYK3l
HnDteC6ULGE6Jpx2GFMtW5L1wiz/KBVp3rWUevLbOnvs+FLPy4Ca4Rli5sQrhYNh
+yyZM7mMAQ7q7OsDUC0hTDWlulJt2a1CfFr0FS76Q7K6MkpEkrur/fg8uYzvW4m5
2briYDPnzHrfvA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:08 2026 by rpki-client