This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: MwbS1NEZ9wsg28QDNnfyTh3MwgjtyEOf8FiXtlB9mzo=
Subject key identifier: 87:F4:97:91:68:05:DF:CC:DA:CF:E0:DE:F3:96:54:05:E5:9B:6A:C8
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 019C4358F8D51D42FC6E90E5F1DF7155CC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 0FD1
Signing time: Mon 09 Feb 2026 17:00:30 +0000
Manifest this update: Mon 09 Feb 2026 17:00:30 +0000
Manifest next update: Tue 10 Feb 2026 17:00:30 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: xm1moPE5F4NPZXg8ka3CShareG3TeDcIQ0oNNYFoZ54=)
2: q7302L2OQ1J4JgKpMluxPnKa3L4.roa (hash: CogkGEqQAlbPJasD50LgFH8JZg8Ucl8+7Lw8QmjihaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:f8:d5:1d:42:fc:6e:90:e5:f1:df:71:55:cc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: Feb 9 17:00:30 2026 GMT
Not After : Feb 10 17:00:30 2026 GMT
Subject: CN=87f497916805dfccdacfe0def3965405e59b6ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:c4:49:91:58:4a:7d:9f:75:d0:27:c5:21:
19:fc:42:14:f1:07:de:c2:e7:c9:e6:3c:a1:7c:ee:
ec:b3:67:9d:d2:6c:28:65:60:95:3d:bd:5c:80:2e:
3c:e0:8c:19:62:1b:25:23:3c:07:f3:94:2b:29:f1:
92:7a:d4:3f:cb:a0:e3:8e:00:88:71:e0:5c:09:f0:
d9:63:dd:26:5d:4c:05:24:5f:4b:62:0d:7a:11:4d:
ab:9d:0b:53:31:a6:11:17:e4:8c:1b:3b:f5:b9:ac:
ed:d8:a3:1b:0b:b5:c7:f0:2e:67:23:53:1f:d8:2d:
86:d9:73:e7:c4:60:02:e8:82:c8:c2:bd:77:7d:a3:
c9:a4:2a:31:a7:51:f9:25:96:96:07:78:58:59:da:
00:94:e7:fd:70:61:d7:79:64:8c:f1:e7:49:38:7c:
0a:df:81:1b:dd:16:96:61:78:ac:1d:77:a8:f4:ed:
9d:9f:53:51:ad:1f:e9:f8:1a:a2:9a:54:c9:41:7b:
f1:69:d3:c6:be:36:35:48:fa:fb:ff:c1:17:f2:54:
c6:46:4c:94:98:79:f6:84:0c:75:8c:04:bb:f4:76:
5d:86:5d:77:f6:76:23:c3:68:d6:d6:6e:ec:8e:e1:
06:d1:ac:59:20:ca:e1:df:da:72:93:81:85:9b:0e:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F4:97:91:68:05:DF:CC:DA:CF:E0:DE:F3:96:54:05:E5:9B:6A:C8
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a7:39:ee:a6:69:43:64:34:9f:a1:3d:6d:00:da:2d:4b:bc:
9b:74:d0:2a:c5:d7:0e:7d:67:49:b3:84:de:9e:49:f5:c4:2a:
6f:0d:c2:98:a0:7d:29:dd:38:7a:87:65:3d:e3:3c:58:73:12:
a3:b6:ef:cb:9b:ff:86:1d:83:3d:c0:6d:5e:87:9f:d0:08:61:
70:26:d2:33:59:a1:f4:c2:75:69:df:11:5a:7a:3b:5a:fc:b0:
9a:27:04:5a:9a:a0:39:4e:8d:10:9f:3c:a5:06:0c:32:f5:bc:
b8:43:68:90:e8:17:e7:7e:ca:34:4a:c1:3f:3f:6c:35:0a:25:
06:08:92:66:46:a0:7c:ee:33:b8:cc:f7:36:45:f9:ea:e9:45:
90:a6:f0:d0:25:b1:3b:75:42:38:3c:05:c1:4c:de:9b:04:53:
e3:5a:aa:42:c2:93:fe:24:99:76:5b:c4:33:7f:8a:d4:ab:e9:
6b:d2:03:45:6f:0a:12:c9:d2:03:e0:7e:96:78:72:2a:a5:1d:
e5:fe:8e:33:da:02:1a:85:ef:9d:f2:8c:98:bf:b9:96:a6:8c:
f9:8b:11:60:97:37:7e:84:9d:6a:cc:19:27:7f:6b:e8:e4:ec:
b2:ea:68:15:c0:12:dc:c6:b1:85:f1:a6:f7:7f:ab:b1:3b:11:
d1:d6:83:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWPjVHUL8bpDl8d9xVcwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3Y2VkMDIxZjk5MTRkMTJkNDE4ZDlhYTIzOGM5MzgyNWVh
NWY2MDUwHhcNMjYwMjA5MTcwMDMwWhcNMjYwMjEwMTcwMDMwWjAzMTEwLwYDVQQD
Eyg4N2Y0OTc5MTY4MDVkZmNjZGFjZmUwZGVmMzk2NTQwNWU1OWI2YWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9rESZFYSn2fddAnxSEZ/EIU8Qfe
wufJ5jyhfO7ss2ed0mwoZWCVPb1cgC484IwZYhslIzwH85QrKfGSetQ/y6DjjgCI
ceBcCfDZY90mXUwFJF9LYg16EU2rnQtTMaYRF+SMGzv1uazt2KMbC7XH8C5nI1Mf
2C2G2XPnxGAC6ILIwr13faPJpCoxp1H5JZaWB3hYWdoAlOf9cGHXeWSM8edJOHwK
34Eb3RaWYXisHXeo9O2dn1NRrR/p+BqimlTJQXvxadPGvjY1SPr7/8EX8lTGRkyU
mHn2hAx1jAS79HZdhl139nYjw2jW1m7sjuEG0axZIMrh39pyk4GFmw7eQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf0l5FoBd/M2s/g3vOWVAXlm2rIMB8GA1UdIwQY
MBaAFPfO0CH5kU0S1BjZqiOMk4JepfYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQt
YzM4NjYxZmJmMjJhLzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83Nzg1YzMtNzk0My00YjdiLTkxOTQtYzM4NjYxZmJmMjJh
LzEvOTg3UUlmbVJUUkxVR05tcUk0eVRnbDZsOWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6c57qZp
Q2Q0n6E9bQDaLUu8m3TQKsXXDn1nSbOE3p5J9cQqbw3CmKB9Kd04eodlPeM8WHMS
o7bvy5v/hh2DPcBtXoef0AhhcCbSM1mh9MJ1ad8RWno7WvywmicEWpqgOU6NEJ88
pQYMMvW8uENokOgX537KNErBPz9sNQolBgiSZkagfO4zuMz3NkX56ulFkKbw0CWx
O3VCODwFwUzemwRT41qqQsKT/iSZdlvEM3+K1Kvpa9IDRW8KEsnSA+B+lnhyKqUd
5f6OM9oCGoXvnfKMmL+5lqaM+YsRYJc3foSdaswZJ39r6OTssupoFcAS3MaxhfGm
93+rsTsR0daD0Q==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:42 2026 by rpki-client