This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier: I0GEuqB/aGCuCSvyGDjaJE2NOFbZyqGF36szTn/Uwr4=
Subject key identifier: 7C:60:2C:DA:52:74:C0:78:52:74:E3:07:43:57:48:91:F2:B3:47:8C
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 019C420FCC5E5233C887C50397B98A252C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number: 1145
Signing time: Mon 09 Feb 2026 11:00:57 +0000
Manifest this update: Mon 09 Feb 2026 11:00:57 +0000
Manifest next update: Tue 10 Feb 2026 11:00:57 +0000
Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: Es7rb4KNmLZvE6ZKvC+47uufoc7ZEUsoMSVD3OWuX5M=)
2: AspI11raW1W04hjS-S4dOvg7DJ0.roa (hash: vyR9bLbU9Kq6oSRsp+g4vq54T/skGcryAaf7JnoUv/A=)
3: Kt_KSYrDgcjqIw-tzOf1SsEuolE.roa (hash: iGYT2jk0/nojybC7EhwbZ+9UI5BCjZA3DlRVN4V+qoM=)
4: cLMf5Wd9_XCFE1K-8kc5wZs2Fi4.roa (hash: c7+KWt1SdxMn3TTxEN2hC0zORqA9HzBlfBHlbXmPphA=)
5: ehqv0V2Mxbz4tpd2nZ-H0adSaEo.roa (hash: 02XO0vXOdnlzhqYHTi75uxwmBCYXsERvvoqfOYq0+7M=)
6: uYwmLI9IgXoeBYgIJ67lD4M9yaw.roa (hash: KF+AYbOaxFn3R/9fgqU1GbRgcGguP9S+XNTb3CR98gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:cc:5e:52:33:c8:87:c5:03:97:b9:8a:25:2c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Feb 9 11:00:57 2026 GMT
Not After : Feb 10 11:00:57 2026 GMT
Subject: CN=7c602cda5274c0785274e30743574891f2b3478c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:01:8c:3c:c9:69:bd:a8:bb:17:99:d6:f0:
19:df:e9:29:a6:62:09:df:5b:44:ad:e9:16:48:e7:
57:00:48:3b:37:ca:e2:36:45:0d:a7:ae:cf:50:12:
a8:1e:c0:58:ed:6e:40:15:be:98:62:42:78:57:fc:
4f:b4:ae:2c:0a:32:be:a2:cf:aa:48:0e:cb:67:92:
3c:73:2d:38:4e:66:5f:37:e4:50:67:68:92:28:88:
29:45:ed:47:02:4e:31:d6:46:13:c7:32:be:51:39:
b6:a8:0f:5a:fd:94:54:e9:dc:d6:b4:11:4b:92:c1:
d1:33:b7:0e:50:29:6c:17:11:a4:04:6b:70:10:1a:
aa:09:ce:ad:d5:bc:2c:e6:a3:d7:8a:39:29:4a:2e:
47:15:cf:43:10:5c:12:ba:27:8d:de:7d:bd:b3:4c:
2b:92:ad:8d:c8:76:f6:0d:a6:f1:e8:84:67:ce:23:
25:25:94:89:72:da:24:d0:c6:40:2d:64:0c:25:a0:
38:ff:f9:b7:bc:72:2a:22:c5:11:8f:98:f5:70:5d:
fd:a0:aa:b2:67:3b:52:09:6a:0f:bd:f0:90:ce:eb:
30:7a:c2:2b:5b:11:f7:8e:75:d4:6a:70:c1:63:17:
29:93:74:43:17:48:93:65:5d:ff:d1:85:bd:b7:94:
13:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:60:2C:DA:52:74:C0:78:52:74:E3:07:43:57:48:91:F2:B3:47:8C
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7f:0f:d7:a1:0d:7d:d5:07:94:9a:a5:18:e7:bc:02:51:1a:
0a:48:b9:55:2e:9d:90:36:1c:7c:e2:aa:b4:e3:47:23:c8:0c:
84:25:99:9c:38:30:08:49:df:f6:9f:92:6c:44:79:4e:7d:8c:
8c:4c:bd:cf:c0:bc:a3:d3:f5:77:ff:9d:9f:48:86:43:dd:d7:
e7:15:fc:76:35:29:10:6d:31:77:8e:45:5c:b8:4a:35:61:31:
47:62:d1:68:c6:7c:11:a7:86:44:67:f4:76:ed:76:06:37:82:
d6:25:ed:aa:0e:e3:4d:4a:38:06:0a:dd:11:8a:77:21:d0:6c:
b3:55:5d:e7:eb:86:6b:5b:29:95:05:0c:4e:68:8c:76:95:ba:
b8:20:3c:7f:78:6e:62:cc:cc:98:69:eb:63:c7:c5:db:a7:da:
fb:72:00:ea:ac:f0:db:35:47:4c:2c:c1:23:fe:c1:ae:11:aa:
44:58:a4:87:b6:27:0b:8d:63:18:6b:bc:0a:d5:40:0e:59:ef:
d5:74:75:91:72:33:c4:cc:28:8d:e4:60:37:4f:5d:54:56:ad:
ce:2d:f8:2c:43:b9:e8:fe:ad:a2:b1:8f:5b:83:67:1b:75:e1:
73:3d:d5:e0:0d:e1:ee:d8:a5:4d:58:e2:34:59:20:14:34:c7:
50:0e:a5:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD8xeUjPIh8UDl7mKJSyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjI4MDVkODc3NmVlZGViN2FhNGNiZTVhZjU2OGNkYjI2
MjlmYzIwHhcNMjYwMjA5MTEwMDU3WhcNMjYwMjEwMTEwMDU3WjAzMTEwLwYDVQQD
Eyg3YzYwMmNkYTUyNzRjMDc4NTI3NGUzMDc0MzU3NDg5MWYyYjM0NzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUsBjDzJab2ouxeZ1vAZ3+kppmIJ
31tErekWSOdXAEg7N8riNkUNp67PUBKoHsBY7W5AFb6YYkJ4V/xPtK4sCjK+os+q
SA7LZ5I8cy04TmZfN+RQZ2iSKIgpRe1HAk4x1kYTxzK+UTm2qA9a/ZRU6dzWtBFL
ksHRM7cOUClsFxGkBGtwEBqqCc6t1bws5qPXijkpSi5HFc9DEFwSuieN3n29s0wr
kq2NyHb2Dabx6IRnziMlJZSJctok0MZALWQMJaA4//m3vHIqIsURj5j1cF39oKqy
ZztSCWoPvfCQzuswesIrWxH3jnXUanDBYxcpk3RDF0iTZV3/0YW9t5QToQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxgLNpSdMB4UnTjB0NXSJHys0eMMB8GA1UdIwQY
MBaAFPOygF2Hdu7et6pMvlr1aM2yYp/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgt
ODNiYzc5NzI3OGUyLzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgtODNiYzc5NzI3OGUy
LzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR38P16EN
fdUHlJqlGOe8AlEaCki5VS6dkDYcfOKqtONHI8gMhCWZnDgwCEnf9p+SbER5Tn2M
jEy9z8C8o9P1d/+dn0iGQ93X5xX8djUpEG0xd45FXLhKNWExR2LRaMZ8EaeGRGf0
du12BjeC1iXtqg7jTUo4BgrdEYp3IdBss1Vd5+uGa1splQUMTmiMdpW6uCA8f3hu
YszMmGnrY8fF26fa+3IA6qzw2zVHTCzBI/7BrhGqRFikh7YnC41jGGu8CtVADlnv
1XR1kXIzxMwojeRgN09dVFatzi34LEO56P6torGPW4NnG3Xhcz3V4A3h7tilTVji
NFkgFDTHUA6lOQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:54 2026 by rpki-client