This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: 2ArEz95TG0Q1vuxJZ66FcEzmU0QSplOqUR0y09b8lEQ=
Subject key identifier: 1D:70:7D:FB:49:4B:30:52:26:04:63:81:7F:96:D2:1E:66:D8:30:FE
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 019C42101B85760D943AF5F41B91441EDB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 16DF
Signing time: Mon 09 Feb 2026 11:01:17 +0000
Manifest this update: Mon 09 Feb 2026 11:01:17 +0000
Manifest next update: Tue 10 Feb 2026 11:01:17 +0000
Files and hashes: 1: 5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa (hash: JIN7iifBaNIG0jSwJOMYaoCb6Od3dAZF5qeWgFbXbiY=)
2: meAessKCpmwe8fOAgZe9YU9MTiw.roa (hash: 50h4K5YSYsz32EpIZ2NW1nDqeDeoSpSQ6hoQmydaO20=)
3: nSbiFuonVVedtf1Mjw5hb4zONuc.roa (hash: J6+zjZkHNoFOiT1a2hQNHKdZUcl8pIjHWjIqVGiuISk=)
4: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: 1vj3baj0NuZn1FRRgUFfOVvyULaa0LBtrNw3r2XJHCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:1b:85:76:0d:94:3a:f5:f4:1b:91:44:1e:db:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Feb 9 11:01:17 2026 GMT
Not After : Feb 10 11:01:17 2026 GMT
Subject: CN=1d707dfb494b3052260463817f96d21e66d830fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:2f:cf:53:12:f7:d8:40:31:b1:9b:ad:1d:
21:6b:ec:ae:de:18:31:7d:89:3f:87:7b:5f:6d:40:
1a:d7:b5:c7:41:95:25:22:8c:d8:4d:7b:3a:5c:b9:
8c:e5:04:1f:e4:9e:0f:18:3b:70:ff:ae:51:20:e8:
6e:2d:cd:22:c9:f3:db:f5:47:b5:9f:41:9b:11:2e:
ca:ee:92:cc:c0:07:21:94:29:27:8a:c1:7a:76:37:
02:a0:fa:09:16:af:fa:7b:81:d0:24:27:4f:18:d6:
96:04:b4:ce:a3:73:b3:e9:10:09:36:82:84:df:d7:
23:29:3a:5c:29:ae:e7:7b:7c:25:f9:5f:91:bf:35:
97:ea:29:50:7b:d4:5e:8e:63:3f:b1:c5:13:90:a8:
cc:82:50:44:17:10:2a:64:6e:96:59:3f:3e:e6:ed:
1f:03:e4:e9:03:41:8c:75:49:6e:18:e8:c4:83:52:
b0:02:6c:3d:7a:b8:8a:e4:ef:f7:b5:0a:d2:0c:28:
e2:be:04:1b:09:05:9b:5f:76:80:59:45:10:64:92:
b0:91:ff:2e:4f:2d:b9:ac:6d:96:eb:fe:f6:8a:a1:
99:71:6a:92:ff:14:f6:df:43:c0:f0:cc:c3:1e:d0:
c1:e1:5c:6a:b9:7c:bd:c5:7a:4e:fa:10:b3:b3:00:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:70:7D:FB:49:4B:30:52:26:04:63:81:7F:96:D2:1E:66:D8:30:FE
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ee:d1:2e:a8:80:8e:39:53:e0:ca:5d:fe:d1:42:02:3a:da:
e7:e9:f2:44:05:1d:8c:47:45:5d:79:f5:5e:28:fe:a6:00:8d:
4a:5e:e8:96:f0:06:cc:0b:66:9f:4a:47:8b:e0:6e:58:88:80:
62:96:78:2e:e5:87:46:7a:e5:f6:25:54:24:7c:c0:55:33:cb:
5b:a8:87:6f:e2:a5:23:93:3f:21:8b:46:56:dc:d7:39:e2:6c:
40:7d:24:be:18:a8:4c:45:3c:8b:67:18:15:e6:88:9e:0a:cd:
b0:95:56:ca:20:0a:1e:a1:6b:22:da:7b:01:d0:34:73:b9:31:
d2:49:f4:1b:97:f5:79:45:13:2c:b7:7a:10:85:76:df:fe:cd:
95:a2:df:ea:bf:1d:65:b5:dd:cf:5a:9d:45:29:e2:28:82:1f:
e9:c0:8d:30:19:01:89:b6:ad:e1:0f:78:04:01:d1:49:d0:2e:
af:b9:1e:10:6b:0e:c3:eb:4c:9a:f7:db:ff:25:b2:cc:f2:55:
62:9f:b2:11:79:e1:43:87:e7:e9:98:c1:97:00:69:84:7e:49:
f1:ef:e4:8f:33:90:6e:bb:ca:16:74:3d:51:8f:ec:e6:ec:3e:
fa:a1:3b:51:f2:c7:6c:a4:90:77:45:35:14:03:d1:7f:db:d6:
58:e6:64:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCEBuFdg2UOvX0G5FEHttXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YWVlNjc2MjBkOWMwYWU2M2QyOTU3ODVjOWQ5NTZmMDYz
YzIxYzMwHhcNMjYwMjA5MTEwMTE3WhcNMjYwMjEwMTEwMTE3WjAzMTEwLwYDVQQD
EygxZDcwN2RmYjQ5NGIzMDUyMjYwNDYzODE3Zjk2ZDIxZTY2ZDgzMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtIvz1MS99hAMbGbrR0ha+yu3hgx
fYk/h3tfbUAa17XHQZUlIozYTXs6XLmM5QQf5J4PGDtw/65RIOhuLc0iyfPb9Ue1
n0GbES7K7pLMwAchlCknisF6djcCoPoJFq/6e4HQJCdPGNaWBLTOo3Oz6RAJNoKE
39cjKTpcKa7ne3wl+V+RvzWX6ilQe9RejmM/scUTkKjMglBEFxAqZG6WWT8+5u0f
A+TpA0GMdUluGOjEg1KwAmw9eriK5O/3tQrSDCjivgQbCQWbX3aAWUUQZJKwkf8u
Ty25rG2W6/72iqGZcWqS/xT230PA8MzDHtDB4VxquXy9xXpO+hCzswBJ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1wfftJSzBSJgRjgX+W0h5m2DD+MB8GA1UdIwQY
MBaAFKeu5nYg2cCuY9KVeFydlW8GPCHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQt
MGI3ZjE1YjUwOWNiLzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQtMGI3ZjE1YjUwOWNi
LzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO7RLqiA
jjlT4Mpd/tFCAjra5+nyRAUdjEdFXXn1Xij+pgCNSl7olvAGzAtmn0pHi+BuWIiA
YpZ4LuWHRnrl9iVUJHzAVTPLW6iHb+KlI5M/IYtGVtzXOeJsQH0kvhioTEU8i2cY
FeaIngrNsJVWyiAKHqFrItp7AdA0c7kx0kn0G5f1eUUTLLd6EIV23/7NlaLf6r8d
ZbXdz1qdRSniKIIf6cCNMBkBibat4Q94BAHRSdAur7keEGsOw+tMmvfb/yWyzPJV
Yp+yEXnhQ4fn6ZjBlwBphH5J8e/kjzOQbrvKFnQ9UY/s5uw++qE7UfLHbKSQd0U1
FAPRf9vWWOZktw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:02 2026 by rpki-client