This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier: HC52Z4xOWIu4pfD6smcDVRhYGT1Gg0EVlFfRZMeA0y4=
Subject key identifier: FE:B0:39:47:AE:77:30:0C:FB:6C:63:4E:33:EA:81:A4:E7:A4:0C:0E
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial: 019C416AE19B9A8F367268B966A8BAE79952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 08:00:49 +0000
Manifest this update: Mon 09 Feb 2026 08:00:49 +0000
Manifest next update: Tue 10 Feb 2026 08:00:49 +0000
Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: o5Stxy3KqQMT2HNcdw8Rnvc+vyZta3rqFZCW27WL8Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:e1:9b:9a:8f:36:72:68:b9:66:a8:ba:e7:99:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Validity
Not Before: Feb 9 08:00:49 2026 GMT
Not After : Feb 10 08:00:49 2026 GMT
Subject: CN=feb03947ae77300cfb6c634e33ea81a4e7a40c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:a4:00:95:f6:8a:9d:eb:29:69:aa:cb:9c:
cd:3b:ea:05:d8:c1:a8:50:89:05:03:a6:1d:d5:45:
81:17:ee:8d:69:9b:d1:70:c5:c5:e0:4e:d4:42:35:
ce:10:7f:f4:6d:b3:0f:31:b3:02:68:ba:ad:5c:9b:
83:7c:39:bd:86:36:63:8c:0c:10:3a:30:35:4f:0e:
d0:42:01:f1:e4:58:37:bb:be:43:9f:bb:8a:03:5b:
87:df:e7:11:fc:e7:c4:59:86:a6:53:44:e5:9e:2a:
21:d2:2d:64:ff:3b:40:ca:95:a5:96:93:3f:fd:90:
fa:17:86:d1:d7:3a:4f:df:33:5d:e0:59:7c:9c:7c:
ee:99:6c:b6:05:82:81:dc:5f:9b:63:46:a4:8f:6e:
95:a7:e7:a6:bb:51:69:8b:2e:93:4e:ee:e7:a8:3b:
c4:2d:12:cb:8a:64:ef:60:5f:0a:1d:6d:9f:62:aa:
1a:3c:aa:af:73:ee:3f:c1:6d:c7:b9:3f:43:50:33:
7b:77:78:02:a8:88:db:cb:6d:98:81:b2:60:3e:ac:
e0:9b:9b:6d:67:27:19:70:eb:7b:1f:94:da:f0:c8:
36:13:80:70:31:bd:ce:87:41:68:c2:fa:16:4a:73:
39:2e:ed:1c:8b:6a:e6:31:c1:4d:bd:92:2b:4b:01:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B0:39:47:AE:77:30:0C:FB:6C:63:4E:33:EA:81:A4:E7:A4:0C:0E
X509v3 Authority Key Identifier:
keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c9:f1:1a:70:9b:6a:96:a7:1b:69:85:d0:5c:e4:1f:7c:8e:
0f:ca:0e:2f:61:c8:cb:9f:c2:28:97:64:d8:04:91:80:b7:b8:
2a:97:cd:1a:04:1d:01:dc:95:18:11:d7:4c:44:3f:6a:9c:69:
98:14:25:aa:f2:5f:8e:94:32:82:24:37:41:97:a9:39:09:e4:
94:ed:84:e4:d1:24:1d:ca:56:01:ea:bb:25:84:ed:04:69:f5:
98:73:61:94:2c:d8:7d:5c:34:11:0a:c1:d3:8b:f7:ae:85:fa:
09:aa:47:f3:fa:75:38:2b:a2:66:48:95:c7:42:b0:43:96:b6:
15:3b:5a:96:3f:03:0e:fa:da:9c:cd:ce:cf:ca:aa:c0:67:82:
55:f5:22:09:2b:b6:02:d0:9d:c8:2c:26:d1:7d:da:fd:cf:82:
3e:c1:5b:86:1b:6d:8a:e6:db:ab:94:b1:49:09:49:ea:d3:1f:
9e:41:6f:1a:c5:e0:1a:01:ef:15:f5:93:16:07:12:3f:4d:3b:
b3:34:05:ee:a1:f7:13:09:e9:11:f5:24:ed:3f:54:3e:ca:f1:
fd:20:20:35:41:d7:2c:4a:63:37:8e:b0:9f:50:92:9b:64:07:
c0:da:cb:da:c0:14:1b:60:46:f9:0d:4f:45:a1:f0:f0:c1:a3:
04:af:f2:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBauGbmo82cmi5Zqi655lSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTI0Yzc4YWE3ODAzYzNhMjNkY2Q3MmQwZGMxYWVhZTVk
ZWQ3Y2MwHhcNMjYwMjA5MDgwMDQ5WhcNMjYwMjEwMDgwMDQ5WjAzMTEwLwYDVQQD
EyhmZWIwMzk0N2FlNzczMDBjZmI2YzYzNGUzM2VhODFhNGU3YTQwYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttCkAJX2ip3rKWmqy5zNO+oF2MGo
UIkFA6Yd1UWBF+6NaZvRcMXF4E7UQjXOEH/0bbMPMbMCaLqtXJuDfDm9hjZjjAwQ
OjA1Tw7QQgHx5Fg3u75Dn7uKA1uH3+cR/OfEWYamU0Tlnioh0i1k/ztAypWllpM/
/ZD6F4bR1zpP3zNd4Fl8nHzumWy2BYKB3F+bY0akj26Vp+emu1Fpiy6TTu7nqDvE
LRLLimTvYF8KHW2fYqoaPKqvc+4/wW3HuT9DUDN7d3gCqIjby22YgbJgPqzgm5tt
ZycZcOt7H5Ta8Mg2E4BwMb3Oh0FowvoWSnM5Lu0ci2rmMcFNvZIrSwHrkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6wOUeudzAM+2xjTjPqgaTnpAwOMB8GA1UdIwQY
MBaAFGsSTHiqeAPDoj3NctDcGurl3tfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQt
OTQzNTNmYzliMmFmLzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQtOTQzNTNmYzliMmFm
LzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMnxGnCb
apanG2mF0FzkH3yOD8oOL2HIy5/CKJdk2ASRgLe4KpfNGgQdAdyVGBHXTEQ/apxp
mBQlqvJfjpQygiQ3QZepOQnklO2E5NEkHcpWAeq7JYTtBGn1mHNhlCzYfVw0EQrB
04v3roX6CapH8/p1OCuiZkiVx0KwQ5a2FTtalj8DDvranM3Oz8qqwGeCVfUiCSu2
AtCdyCwm0X3a/c+CPsFbhhttiubbq5SxSQlJ6tMfnkFvGsXgGgHvFfWTFgcSP007
szQF7qH3EwnpEfUk7T9UPsrx/SAgNUHXLEpjN46wn1CSm2QHwNrL2sAUG2BG+Q1P
RaHw8MGjBK/yjg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:41 2026 by rpki-client