This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: oEAF33uQaZTSZRROY1vbxdPOEn6PM/2UTCaJLnD3QRg=
Subject key identifier: 30:1F:79:13:4B:45:7C:96:4A:AA:0A:E7:AF:D1:82:DC:28:8C:BD:F9
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 019C420F7344F95D90804FB744091644F9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 11:00:34 +0000
Manifest this update: Mon 09 Feb 2026 11:00:34 +0000
Manifest next update: Tue 10 Feb 2026 11:00:34 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: n5irzZISJHCC/XcZgtCCT9B3Qk6kD4nESSQkAO/GdvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:73:44:f9:5d:90:80:4f:b7:44:09:16:44:f9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Feb 9 11:00:34 2026 GMT
Not After : Feb 10 11:00:34 2026 GMT
Subject: CN=301f79134b457c964aaa0ae7afd182dc288cbdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:15:76:3b:4a:67:10:1c:12:07:41:9e:ba:d4:
ee:55:15:4e:63:7a:b0:55:08:4b:80:c1:ac:50:ab:
b7:4a:34:2b:ea:ee:45:10:7c:c0:06:24:d1:12:50:
95:2c:61:4c:1f:af:84:f6:c9:c5:18:ee:9c:6c:b3:
f0:8e:17:1c:1a:fc:fb:15:de:51:b3:99:a4:e2:3c:
fd:f5:bb:da:d2:c8:bb:79:06:80:ad:be:57:1d:44:
0d:bf:46:86:76:fa:02:06:f5:e1:b2:09:e8:d2:c4:
44:fe:09:86:d9:4a:f1:0e:d1:4a:5d:a3:60:55:7f:
09:28:e3:62:af:4b:b2:39:0e:b9:64:86:b7:34:8e:
3e:a4:c9:03:e7:2e:28:dd:29:06:0d:d0:05:7c:12:
f7:ed:3e:5c:f3:3b:ea:bf:aa:8b:c0:cd:97:b8:67:
c9:fb:ff:60:cb:c4:1d:75:d9:8d:9e:74:24:f4:6c:
7f:ed:7e:8d:92:65:53:e2:1e:94:90:58:bb:12:11:
f8:b6:cd:b5:d2:91:85:45:b2:63:bd:ef:73:cf:9d:
53:04:8d:fc:92:52:03:2d:07:4f:ba:2c:06:82:53:
a4:44:dd:4a:27:4a:d7:fd:8e:75:ca:73:e7:3d:49:
22:9b:fa:d2:41:d0:30:52:80:5c:b6:bb:a4:6a:1c:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1F:79:13:4B:45:7C:96:4A:AA:0A:E7:AF:D1:82:DC:28:8C:BD:F9
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:fc:b9:4e:4f:f9:76:d7:69:52:05:96:0f:47:5d:39:f8:
60:95:82:0c:50:88:14:60:b8:99:20:b3:2d:8d:dc:6c:ce:c5:
dd:0f:c9:9c:2a:22:4d:51:b6:67:db:1f:98:8c:1e:72:5c:59:
77:90:27:81:ab:71:43:39:5a:6c:5d:76:14:3a:dd:e4:1c:bb:
75:5a:77:6d:0d:bd:60:e2:fd:60:43:3a:ec:a6:dc:7e:d3:f8:
77:64:a8:e5:58:07:ff:f4:18:c1:77:7b:f0:dc:d6:f7:0b:c1:
ac:7d:83:82:99:fd:d5:4f:1d:7e:a3:10:ce:cc:1e:bb:49:36:
ff:f7:bb:76:bd:73:31:17:4b:d1:5f:52:64:1a:7c:24:c8:bd:
e2:c0:62:82:91:90:9d:c3:58:e3:ba:41:be:18:26:8f:99:19:
a7:b2:92:b1:9a:c3:7a:63:ac:ed:0a:8a:a9:d9:4f:d6:17:58:
2f:1f:6b:8f:79:0c:ad:13:a1:96:cb:75:53:61:27:9f:c2:40:
91:8c:35:05:f7:5f:3f:9b:b0:6e:84:0e:a0:51:52:f3:e6:59:
ca:85:5d:2a:3a:c2:6e:cd:63:c3:3f:6b:d9:cf:75:96:b0:fd:
4f:01:6f:8f:f6:3d:20:01:6d:0b:b6:93:4e:1b:08:cb:15:cb:
ab:97:07:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD3NE+V2QgE+3RAkWRPnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGJkMjk3ZTgyOGRhNWVhMTJjMGRmNmNkNzQyNmI3ODMw
NzQ2OGIwHhcNMjYwMjA5MTEwMDM0WhcNMjYwMjEwMTEwMDM0WjAzMTEwLwYDVQQD
EygzMDFmNzkxMzRiNDU3Yzk2NGFhYTBhZTdhZmQxODJkYzI4OGNiZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xV2O0pnEBwSB0GeutTuVRVOY3qw
VQhLgMGsUKu3SjQr6u5FEHzABiTRElCVLGFMH6+E9snFGO6cbLPwjhccGvz7Fd5R
s5mk4jz99bva0si7eQaArb5XHUQNv0aGdvoCBvXhsgno0sRE/gmG2UrxDtFKXaNg
VX8JKONir0uyOQ65ZIa3NI4+pMkD5y4o3SkGDdAFfBL37T5c8zvqv6qLwM2XuGfJ
+/9gy8QdddmNnnQk9Gx/7X6NkmVT4h6UkFi7EhH4ts210pGFRbJjve9zz51TBI38
klIDLQdPuiwGglOkRN1KJ0rX/Y51ynPnPUkim/rSQdAwUoBctrukahxgEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAfeRNLRXyWSqoK56/RgtwojL35MB8GA1UdIwQY
MBaAFEaL0pfoKNpeoSwN9s10JreDB0aLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85NzkyYjAtYzljNC00ODQ4LWI3MTMt
ODNkMDljZWZiZTg4LzEvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85NzkyYjAtYzljNC00ODQ4LWI3MTMtODNkMDljZWZiZTg4
LzEvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVID8uU5P
+XbXaVIFlg9HXTn4YJWCDFCIFGC4mSCzLY3cbM7F3Q/JnCoiTVG2Z9sfmIweclxZ
d5AngatxQzlabF12FDrd5By7dVp3bQ29YOL9YEM67KbcftP4d2So5VgH//QYwXd7
8NzW9wvBrH2Dgpn91U8dfqMQzsweu0k2//e7dr1zMRdL0V9SZBp8JMi94sBigpGQ
ncNY47pBvhgmj5kZp7KSsZrDemOs7QqKqdlP1hdYLx9rj3kMrROhlst1U2Enn8JA
kYw1BfdfP5uwboQOoFFS8+ZZyoVdKjrCbs1jwz9r2c91lrD9TwFvj/Y9IAFtC7aT
ThsIyxXLq5cH9g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:29 2026 by rpki-client