This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
File: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft (raw, json)
Hash identifier: O9XNQzigI/Ne0FChY+b6VQhfs/LsBFYb28ZIVCvy/Kw=
Subject key identifier: B0:51:36:77:38:4E:D8:EC:04:1C:6B:1B:CD:DD:A6:D7:BC:29:57:44
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 019C420F551D56607933AF6D2AD8EB545A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
Manifest number: 0D4E
Signing time: Mon 09 Feb 2026 11:00:26 +0000
Manifest this update: Mon 09 Feb 2026 11:00:26 +0000
Manifest next update: Tue 10 Feb 2026 11:00:26 +0000
Files and hashes: 1: 2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl (hash: Gy5jH47L6QiU0HlStpZj6pGPttL5P+u4cmXZajyosUQ=)
2: 8mfySGwTbXk-kyUdS_kN8j97UXs.roa (hash: umX00/QtByILeR56I5S6BuyzviCNwqrKZKDQse00Reo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:55:1d:56:60:79:33:af:6d:2a:d8:eb:54:5a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Feb 9 11:00:26 2026 GMT
Not After : Feb 10 11:00:26 2026 GMT
Subject: CN=b0513677384ed8ec041c6b1bcddda6d7bc295744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:88:d6:41:5b:bf:97:ad:d3:7a:65:57:ad:
a8:b9:d3:a1:b2:05:e3:bb:8b:a6:ab:ae:71:35:d0:
1f:0e:99:bf:b7:93:74:3b:2a:be:03:dc:60:81:93:
09:05:d3:3b:93:0d:5a:fe:75:1f:3f:b0:50:0a:c8:
f0:f3:a8:40:31:a6:e1:60:3e:39:fb:05:9f:fd:3d:
54:20:e3:30:93:37:ca:93:0b:82:f8:76:70:d0:83:
af:f3:db:cb:ce:40:ce:5f:50:01:39:70:92:20:ee:
f8:0b:1f:d5:05:fb:3b:a7:96:30:79:a6:f4:2b:4d:
9f:5e:5e:3c:8a:b5:d0:88:33:b2:d2:a4:a1:6e:4a:
c5:59:93:60:24:a9:06:a3:c4:30:fb:d0:97:70:7f:
36:bc:18:31:ef:2b:75:59:8b:8b:5e:2a:bd:d9:52:
69:75:54:17:7e:56:12:74:50:92:38:35:d3:4c:12:
90:30:8d:4b:38:a2:eb:0b:40:c6:d1:51:52:d3:4d:
9a:0c:28:4c:70:12:2f:e3:90:2c:6c:5e:04:de:28:
f6:1e:2d:db:23:d2:67:bd:43:0c:77:eb:ca:af:07:
e9:67:1a:66:9b:f8:40:66:51:7c:12:6d:97:85:fa:
6e:a4:24:0d:8e:20:55:ec:72:e8:c7:d0:df:f2:8d:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:51:36:77:38:4E:D8:EC:04:1C:6B:1B:CD:DD:A6:D7:BC:29:57:44
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9a:a7:ad:e1:e6:11:33:c5:19:79:55:76:78:0b:06:91:34:
f5:b4:22:a1:1b:04:36:4a:36:a5:bd:e3:11:5f:b8:71:23:af:
32:d7:aa:00:6f:2b:38:ea:9b:d4:0d:85:c8:4e:9a:bb:d9:fb:
43:4c:d5:f5:93:ac:24:72:9b:41:cb:83:9b:02:4d:d5:3e:4f:
af:5d:6b:ff:4f:bf:bb:1a:d0:f6:63:6c:4c:d1:cb:c8:6b:42:
08:41:3d:e4:2f:58:52:0d:23:2f:f0:4d:a5:6c:47:23:44:0c:
48:16:7b:fa:32:a7:32:93:d0:7d:43:7e:6d:9e:4d:2e:39:b3:
26:01:6f:43:ec:1b:6f:84:50:2b:c6:b1:bb:03:c7:69:75:51:
08:2a:f2:fe:be:6b:97:8d:54:b4:d4:ad:ba:2b:64:34:ee:83:
f8:c1:50:dc:3f:ff:ae:cd:6e:9a:d5:fc:75:ea:6b:e6:2a:b5:
28:d7:55:5e:af:9d:9a:3d:b6:cf:b0:8a:8e:c9:5c:5a:cb:78:
be:60:47:91:ec:78:b6:c1:b5:8e:e5:e2:53:b6:67:d9:8a:bf:
0c:1a:e7:d2:d1:0f:64:38:d5:b3:fb:86:03:70:57:f9:d5:90:
59:84:26:9c:26:1f:3d:b1:80:fd:7c:10:63:41:b6:31:dd:25:
9a:ec:8f:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD1UdVmB5M69tKtjrVFp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDljYWJhM2Q0MzE1NjA3ZjRhNmQ2MjdlY2UxZWNlYThj
YmMzMTkwHhcNMjYwMjA5MTEwMDI2WhcNMjYwMjEwMTEwMDI2WjAzMTEwLwYDVQQD
EyhiMDUxMzY3NzM4NGVkOGVjMDQxYzZiMWJjZGRkYTZkN2JjMjk1NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/uI1kFbv5et03plV62oudOhsgXj
u4umq65xNdAfDpm/t5N0Oyq+A9xggZMJBdM7kw1a/nUfP7BQCsjw86hAMabhYD45
+wWf/T1UIOMwkzfKkwuC+HZw0IOv89vLzkDOX1ABOXCSIO74Cx/VBfs7p5Yweab0
K02fXl48irXQiDOy0qShbkrFWZNgJKkGo8Qw+9CXcH82vBgx7yt1WYuLXiq92VJp
dVQXflYSdFCSODXTTBKQMI1LOKLrC0DG0VFS002aDChMcBIv45AsbF4E3ij2Hi3b
I9JnvUMMd+vKrwfpZxpmm/hAZlF8Em2XhfpupCQNjiBV7HLox9Df8o3GpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBRNnc4TtjsBBxrG83dpte8KVdEMB8GA1UdIwQY
MBaAFNlJyro9QxVgf0ptYn7OHs6oy8MZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMt
MWE5ZGYzOGY1OTAxLzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mZTY5MDQtZWI1Ni00NDkzLTkyOWMtMWE5ZGYzOGY1OTAx
LzEvMlVuS3VqMURGV0JfU20xaWZzNGV6cWpMd3hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpqnreHm
ETPFGXlVdngLBpE09bQioRsENko2pb3jEV+4cSOvMteqAG8rOOqb1A2FyE6au9n7
Q0zV9ZOsJHKbQcuDmwJN1T5Pr11r/0+/uxrQ9mNsTNHLyGtCCEE95C9YUg0jL/BN
pWxHI0QMSBZ7+jKnMpPQfUN+bZ5NLjmzJgFvQ+wbb4RQK8axuwPHaXVRCCry/r5r
l41UtNStuitkNO6D+MFQ3D//rs1umtX8depr5iq1KNdVXq+dmj22z7CKjslcWst4
vmBHkex4tsG1juXiU7Zn2Yq/DBrn0tEPZDjVs/uGA3BX+dWQWYQmnCYfPbGA/XwQ
Y0G2Md0lmuyP2w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:32 2026 by rpki-client