This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
File: R2Bl1x8emPmnynjmFOz19G1aZDw.mft (raw, json)
Hash identifier: 1PCK5lOQii+ERXVMLfVk3mzdj+Ke4zhE1N/Fpqdm30c=
Subject key identifier: 92:5C:C0:F6:5C:2C:99:D4:49:CC:ED:52:A9:61:79:C3:71:C5:84:1B
Authority key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
Certificate issuer: /CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Certificate serial: 019C420F5A470338A3F12F86AB390DBD211F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
Manifest number: 02AE
Signing time: Mon 09 Feb 2026 11:00:28 +0000
Manifest this update: Mon 09 Feb 2026 11:00:28 +0000
Manifest next update: Tue 10 Feb 2026 11:00:28 +0000
Files and hashes: 1: 3faqLvWKyRbHeIrogN3_fV0BvCI.roa (hash: UQfJ7cK1wnMDVZHxIQBIYMz3jz7zOHrQbZVbdTLcoWw=)
2: R2Bl1x8emPmnynjmFOz19G1aZDw.crl (hash: nwyeTsyKQptzxxWnwjFttdhE1s/LiSNnOW/cSqDU5ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:5a:47:03:38:a3:f1:2f:86:ab:39:0d:bd:21:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Validity
Not Before: Feb 9 11:00:28 2026 GMT
Not After : Feb 10 11:00:28 2026 GMT
Subject: CN=925cc0f65c2c99d449cced52a96179c371c5841b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:48:22:0c:29:02:f6:19:25:dd:45:af:66:
28:c3:54:47:d4:2a:5b:d5:af:08:78:b8:e8:08:b9:
64:83:ed:8d:25:bc:61:57:b5:0f:16:dd:0e:5a:16:
2d:b6:a3:1d:a7:98:5c:66:34:15:8e:01:5f:88:a9:
c6:7e:65:ce:26:1e:73:60:5a:1a:cb:10:8c:f6:7d:
c1:ef:14:44:2d:76:5e:f3:92:e3:2c:cd:c6:df:51:
29:e2:bb:96:ed:bc:1a:e5:c1:ad:a9:0b:b0:a3:7f:
3f:bd:d8:88:67:4b:ab:7f:94:63:28:ca:c5:3a:a3:
23:76:02:fa:dd:ea:73:99:4e:6f:57:f2:3c:d6:a1:
06:3a:54:61:b6:82:d8:d8:10:23:b1:16:a5:56:26:
57:fe:14:6e:48:20:a4:21:f8:26:c2:43:49:a0:c1:
eb:40:4c:1c:7c:02:e3:19:1e:09:f3:f2:9b:1f:44:
c9:e1:95:3d:09:b4:20:18:b0:3c:18:93:54:37:74:
e9:ab:36:7f:b6:31:49:c1:b8:c7:e7:d8:b8:da:36:
e5:bd:53:3c:05:52:7c:46:ff:68:42:6d:ab:02:9a:
e5:d7:56:f5:db:25:80:94:4c:91:3d:6e:e4:ed:27:
fc:22:16:fb:fa:ff:e0:0d:08:9d:d8:ec:61:b9:b5:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5C:C0:F6:5C:2C:99:D4:49:CC:ED:52:A9:61:79:C3:71:C5:84:1B
X509v3 Authority Key Identifier:
keyid:47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b0:f0:5b:91:36:10:84:3f:50:45:5e:6d:85:7f:3f:51:29:
be:89:82:27:39:ca:9d:cc:97:92:f8:62:32:f1:19:f9:0b:41:
50:ce:9c:3a:9a:f2:da:f8:9e:5d:12:2b:86:a9:72:05:ee:fd:
9e:2c:3a:00:fb:cc:0a:e7:ab:b8:e1:ca:20:7c:6d:eb:e4:02:
cb:11:9e:3b:a2:cb:90:1c:01:94:c4:a5:92:7f:ec:f1:95:ec:
1d:dd:27:3d:db:fa:cd:38:eb:3a:94:41:7b:26:75:8d:64:e2:
41:0f:9d:48:8d:ac:2b:5a:4c:24:7f:66:d3:90:85:4d:fc:10:
3d:19:28:df:54:1f:71:b6:3b:b7:7a:62:c4:12:bd:a6:66:f0:
90:c8:9f:51:39:04:76:d5:36:73:ee:88:54:43:73:f0:00:c9:
e0:8d:9e:36:4d:84:11:da:71:7b:cf:72:d5:65:dc:e2:0b:aa:
ad:74:1e:41:43:e2:a2:8e:13:1d:61:18:08:d0:1d:ea:bf:7e:
df:1a:c1:54:b9:88:71:a4:5d:16:43:bf:dc:cc:55:58:e2:8b:
5e:56:98:cc:ec:52:40:70:22:61:8b:6e:a0:b3:8d:fa:82:d9:
c1:b7:2f:49:81:b2:99:d7:27:ac:23:4c:38:b2:9d:dd:b6:ac:
bc:05:ee:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD1pHAzij8S+GqzkNvSEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjA2NWQ3MWYxZTk4ZjlhN2NhNzhlNjE0ZWNmNWY0NmQ1
YTY0M2MwHhcNMjYwMjA5MTEwMDI4WhcNMjYwMjEwMTEwMDI4WjAzMTEwLwYDVQQD
Eyg5MjVjYzBmNjVjMmM5OWQ0NDljY2VkNTJhOTYxNzljMzcxYzU4NDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1hIIgwpAvYZJd1Fr2Yow1RH1Cpb
1a8IeLjoCLlkg+2NJbxhV7UPFt0OWhYttqMdp5hcZjQVjgFfiKnGfmXOJh5zYFoa
yxCM9n3B7xRELXZe85LjLM3G31Ep4ruW7bwa5cGtqQuwo38/vdiIZ0urf5RjKMrF
OqMjdgL63epzmU5vV/I81qEGOlRhtoLY2BAjsRalViZX/hRuSCCkIfgmwkNJoMHr
QEwcfALjGR4J8/KbH0TJ4ZU9CbQgGLA8GJNUN3TpqzZ/tjFJwbjH59i42jblvVM8
BVJ8Rv9oQm2rAprl11b12yWAlEyRPW7k7Sf8Ihb7+v/gDQid2OxhubWbAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJcwPZcLJnUScztUqlhecNxxYQbMB8GA1UdIwQY
MBaAFEdgZdcfHpj5p8p45hTs9fRtWmQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJCbDF4OGVtUG1ueW5qbUZPejE5RzFhWkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81MjZmM2UtODkyNC00OGJkLWE3NzIt
YjUxOTUzMDM3OTkzLzEvUjJCbDF4OGVtUG1ueW5qbUZPejE5RzFhWkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81MjZmM2UtODkyNC00OGJkLWE3NzItYjUxOTUzMDM3OTkz
LzEvUjJCbDF4OGVtUG1ueW5qbUZPejE5RzFhWkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLDwW5E2
EIQ/UEVebYV/P1EpvomCJznKncyXkvhiMvEZ+QtBUM6cOpry2vieXRIrhqlyBe79
niw6APvMCueruOHKIHxt6+QCyxGeO6LLkBwBlMSlkn/s8ZXsHd0nPdv6zTjrOpRB
eyZ1jWTiQQ+dSI2sK1pMJH9m05CFTfwQPRko31QfcbY7t3pixBK9pmbwkMifUTkE
dtU2c+6IVENz8ADJ4I2eNk2EEdpxe89y1WXc4guqrXQeQUPioo4THWEYCNAd6r9+
3xrBVLmIcaRdFkO/3MxVWOKLXlaYzOxSQHAiYYtuoLON+oLZwbcvSYGymdcnrCNM
OLKd3basvAXu6A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:46 2026 by rpki-client