This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: nod+hwg084GgSKf7dhZQN3/e64Bto4wt04R0ls/aywU=
Subject key identifier: F4:50:A0:5E:3B:D3:9F:3E:53:FE:BA:4C:8B:39:16:CB:30:70:F6:16
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019C41D86DBB7C6528A0BD84793F634EF4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 0871
Signing time: Mon 09 Feb 2026 10:00:28 +0000
Manifest this update: Mon 09 Feb 2026 10:00:28 +0000
Manifest next update: Tue 10 Feb 2026 10:00:28 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: EVpd2yO4aaBQfHiY8St0+YSGJOLEs7qc/OVyah0+7/w=)
2: Z-5kacRmlsjbypw_dPm2XOvUdzs.roa (hash: T7PFxDunRuitR6QYV9ySXslG8fmxs5dieU0URPzMTpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:6d:bb:7c:65:28:a0:bd:84:79:3f:63:4e:f4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Feb 9 10:00:28 2026 GMT
Not After : Feb 10 10:00:28 2026 GMT
Subject: CN=f450a05e3bd39f3e53feba4c8b3916cb3070f616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:22:6d:17:33:f3:2d:24:24:fd:fc:8f:43:
3f:73:79:3e:a6:38:71:bf:8f:e4:b4:8c:ff:cf:39:
02:fb:e1:fe:16:4d:f3:f8:55:84:c4:d0:8c:b1:0a:
4e:d4:ac:76:95:32:d5:5f:c6:8d:61:81:c7:ec:ab:
0a:93:33:40:db:dc:7e:02:16:93:a5:5c:41:f1:4f:
00:96:32:f8:66:34:ed:bf:be:b4:ef:bf:24:72:98:
53:6f:b7:19:ac:6a:28:59:d1:58:0f:72:bd:a3:e2:
76:da:e4:85:db:6e:f6:e3:06:e3:49:62:36:be:d5:
d3:c3:ad:f9:99:e1:5f:7c:e9:19:7d:71:c4:86:a2:
d8:88:b4:ae:16:18:24:20:6b:02:1e:f4:a3:1e:89:
af:61:20:28:15:b7:99:61:3e:09:c9:29:f0:ff:72:
65:28:e5:a3:ed:0e:f1:85:f1:9b:a8:50:1f:b2:72:
c8:73:1a:5f:9d:8f:8c:b1:a4:d8:6b:fa:54:ba:17:
8f:e9:03:af:3a:86:32:a5:08:ea:66:26:bf:72:80:
34:94:ec:8f:80:4a:2d:91:0e:ad:f3:84:b0:dc:57:
58:6e:00:cb:29:b0:4f:1c:e6:f5:db:77:b7:73:a6:
7a:de:47:30:ca:dc:fc:43:47:11:a3:da:e5:f2:2d:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:50:A0:5E:3B:D3:9F:3E:53:FE:BA:4C:8B:39:16:CB:30:70:F6:16
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:89:a7:a4:bc:85:6f:63:b8:b1:ef:6e:dd:8a:b4:1d:8e:d5:
fd:80:b6:17:e7:67:74:85:94:96:6f:b0:f9:61:0b:42:8f:e8:
1e:05:e5:1b:a5:f2:25:6b:4f:96:9f:e3:e5:f1:2b:b8:80:2c:
a5:3a:13:25:67:57:16:fd:16:aa:1e:f8:f7:37:65:35:a0:07:
5d:2d:52:00:3c:25:d9:6e:2b:54:3b:9e:92:05:3a:7f:4a:e5:
7e:5a:f1:58:2b:1e:35:ed:c2:c5:98:02:af:11:95:3b:64:29:
33:cc:c9:bc:f7:e6:22:d3:05:b4:08:a0:15:c6:62:1c:37:37:
6e:55:c9:8f:bb:e5:8e:08:2b:56:71:5e:42:4b:f1:3b:ab:0b:
ed:14:86:e2:95:31:e8:ec:02:f9:b4:e0:0f:e2:73:6c:97:a6:
f1:ec:5f:2a:10:25:84:dc:b6:a6:81:f0:39:87:36:6a:2a:03:
f9:81:22:63:4a:b9:15:e3:72:76:8f:7d:c7:a9:38:9e:17:a5:
65:b5:35:79:6a:9b:43:6c:5c:2b:7a:82:84:63:c9:df:20:78:
be:ba:97:fa:d1:db:36:6c:b6:dd:78:06:1b:95:de:a1:e9:ed:
63:84:7d:c6:d8:fb:95:de:50:99:f9:8d:61:c1:8b:cd:d4:15:
68:51:d9:ce
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZxB2G27fGUooL2EeT9jTvS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Q5MDFhYmEwZDM2YjY1NmNmOThlMGMwMjkxN2UzYWFh
Mjg5YjQwHhcNMjYwMjA5MTAwMDI4WhcNMjYwMjEwMTAwMDI4WjAzMTEwLwYDVQQD
EyhmNDUwYTA1ZTNiZDM5ZjNlNTNmZWJhNGM4YjM5MTZjYjMwNzBmNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZsibRcz8y0kJP38j0M/c3k+pjhx
v4/ktIz/zzkC++H+Fk3z+FWExNCMsQpO1Kx2lTLVX8aNYYHH7KsKkzNA29x+AhaT
pVxB8U8AljL4ZjTtv760778kcphTb7cZrGooWdFYD3K9o+J22uSF22724wbjSWI2
vtXTw635meFffOkZfXHEhqLYiLSuFhgkIGsCHvSjHomvYSAoFbeZYT4JySnw/3Jl
KOWj7Q7xhfGbqFAfsnLIcxpfnY+MsaTYa/pUuheP6QOvOoYypQjqZia/coA0lOyP
gEotkQ6t84Sw3FdYbgDLKbBPHOb123e3c6Z63kcwytz8Q0cRo9rl8i375QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPRQoF47058+U/66TIs5FsswcPYWMB8GA1UdIwQY
MBaAFPrNkBq6DTa2Vs+Y4MApF+Oqoom0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zMlFHcm9OTnJaV3o1amd3Q2tYNDZxaWliUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1
LTAwZmUwNWMyYmZjNi8xLzEtczJRR3JvTk5yWld6NWpnd0NrWDQ2cWlpYlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IxL2E1MjZjYS0zNzllLTQ5NWQtOGYxNS0wMGZlMDVjMmJm
YzYvMS8xLXMyUUdyb05OclpXejVqZ3dDa1g0NnFpaWJRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4mn
pLyFb2O4se9u3Yq0HY7V/YC2F+dndIWUlm+w+WELQo/oHgXlG6XyJWtPlp/j5fEr
uIAspToTJWdXFv0Wqh749zdlNaAHXS1SADwl2W4rVDuekgU6f0rlflrxWCseNe3C
xZgCrxGVO2QpM8zJvPfmItMFtAigFcZiHDc3blXJj7vljggrVnFeQkvxO6sL7RSG
4pUx6OwC+bTgD+JzbJem8exfKhAlhNy2poHwOYc2aioD+YEiY0q5FeNydo99x6k4
nhelZbU1eWqbQ2xcK3qChGPJ3yB4vrqX+tHbNmy23XgGG5XeoentY4R9xtj7ld5Q
mfmNYcGLzdQVaFHZzg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:13 2026 by rpki-client