This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: RgoN1XgU7vmg2RVYXh2WZ5LYzP9bjLA8+hko2rXGJCE=
Subject key identifier: 65:43:08:ED:9C:C3:93:3D:BD:2C:85:E0:A7:CE:CA:6F:21:4C:5B:E4
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 019C44DA394AB772BC65E9F4E60C749311F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0D58
Signing time: Tue 10 Feb 2026 00:01:18 +0000
Manifest this update: Tue 10 Feb 2026 00:01:18 +0000
Manifest next update: Wed 11 Feb 2026 00:01:18 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: I2pGclPYhysIVn2sZnLId3EY1f+gOHEpxOSFBLAXfnM=)
2: QFN1Pmp0QiKx5d3w_NYc2ZWKHEw.roa (hash: Xxu/WKTNsoIWst3QbQSPutJklBpFRyV1E6yTl52XKwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:da:39:4a:b7:72:bc:65:e9:f4:e6:0c:74:93:11:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Feb 10 00:01:18 2026 GMT
Not After : Feb 11 00:01:18 2026 GMT
Subject: CN=654308ed9cc3933dbd2c85e0a7ceca6f214c5be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:32:c5:f9:0f:7d:94:c8:fd:ed:8a:41:85:
29:b4:c4:90:6b:e4:ba:c1:81:56:1a:46:bd:cf:7a:
84:7b:28:f0:c7:04:7e:4b:77:04:cd:26:cf:b4:9f:
36:6e:c7:ca:47:ec:c3:ea:21:fe:07:e5:b4:9f:92:
b2:53:4a:63:24:29:8e:f0:20:81:64:a1:f4:71:82:
b9:ce:57:d7:f6:c4:ed:49:5d:b9:8e:55:df:a3:e7:
aa:d1:05:a1:84:b2:90:56:f2:52:d6:3a:1c:a7:bb:
4c:38:59:0d:17:0f:eb:de:7f:72:bb:cb:e3:7f:e8:
80:91:58:f5:b1:51:3b:5e:f4:63:55:e8:3d:a9:b3:
3c:7c:1b:63:5d:71:d6:de:29:ec:56:32:59:fe:96:
bc:c4:54:fb:f6:a7:fa:0b:0a:cb:88:eb:89:fe:99:
00:6d:62:9b:8a:08:03:fb:e4:2d:17:d1:ac:b7:d9:
1a:a6:c7:d0:be:dd:f8:68:a4:77:7b:1e:45:bc:92:
26:7a:ba:55:dc:e9:a8:31:d7:2c:ce:00:9c:f2:7c:
d2:af:8d:5f:2c:62:3b:29:5a:5f:49:10:77:89:6a:
4d:05:9a:c5:eb:11:17:bd:9f:5b:64:83:cb:c7:f6:
2e:06:c1:99:6b:a6:3d:b7:ce:5a:0d:ef:a5:c5:23:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:43:08:ED:9C:C3:93:3D:BD:2C:85:E0:A7:CE:CA:6F:21:4C:5B:E4
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a7:54:b5:de:68:15:d0:2d:6c:b7:3a:b2:ab:13:4e:4f:3e:
b7:cd:26:16:b4:94:a6:3a:ce:bc:81:2a:40:fc:ba:19:79:83:
9b:b5:54:c9:55:85:14:3d:bf:1f:92:79:c7:e8:b0:52:a9:41:
65:74:4a:79:aa:c4:22:0c:c0:5a:c0:30:c9:67:c8:3a:09:ba:
06:6a:92:ec:1c:9e:60:9d:fc:d3:d5:86:6f:dd:b2:76:d4:ae:
e8:37:fd:74:05:af:de:50:36:e4:62:c0:84:a8:90:f3:d5:60:
62:05:5a:37:4a:d4:20:0a:c6:16:8c:69:62:d9:36:8b:38:3c:
01:a3:84:6b:4d:48:2f:96:ac:5e:3e:b6:cc:ae:38:92:1f:a7:
5d:f8:fa:9e:a0:6b:63:84:fb:94:e4:61:77:5b:ee:80:2f:02:
da:c3:b8:26:c9:12:77:26:2e:40:aa:d6:bc:bb:ed:1a:d2:75:
cf:e8:77:d4:57:aa:7f:54:2a:db:9d:3b:42:e2:b1:d6:42:8e:
3f:42:7b:2b:da:db:ca:a2:d9:95:a1:3b:2d:5f:70:9a:5d:b1:
8d:8b:6b:ac:74:93:03:4f:21:c4:f3:49:19:25:34:15:e0:4a:
d6:22:a7:7f:f4:cd:ef:f2:c6:dd:3e:91:da:1c:c1:68:1d:69:
be:32:46:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2jlKt3K8Zen05gx0kxH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDViODQ4M2IxNzEyYjcwMjM1NDEwNTZlNzMwODUzNjZk
MjkzNDYwHhcNMjYwMjEwMDAwMTE4WhcNMjYwMjExMDAwMTE4WjAzMTEwLwYDVQQD
Eyg2NTQzMDhlZDljYzM5MzNkYmQyYzg1ZTBhN2NlY2E2ZjIxNGM1YmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRoyxfkPfZTI/e2KQYUptMSQa+S6
wYFWGka9z3qEeyjwxwR+S3cEzSbPtJ82bsfKR+zD6iH+B+W0n5KyU0pjJCmO8CCB
ZKH0cYK5zlfX9sTtSV25jlXfo+eq0QWhhLKQVvJS1jocp7tMOFkNFw/r3n9yu8vj
f+iAkVj1sVE7XvRjVeg9qbM8fBtjXXHW3insVjJZ/pa8xFT79qf6CwrLiOuJ/pkA
bWKbiggD++QtF9Gst9kapsfQvt34aKR3ex5FvJImerpV3OmoMdcszgCc8nzSr41f
LGI7KVpfSRB3iWpNBZrF6xEXvZ9bZIPLx/YuBsGZa6Y9t85aDe+lxSO0LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVDCO2cw5M9vSyF4KfOym8hTFvkMB8GA1UdIwQY
MBaAFCDVuEg7FxK3AjVBBW5zCFNm0pNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEt
MGMyZmY3OTM3ZTZmLzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEtMGMyZmY3OTM3ZTZm
LzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoadUtd5o
FdAtbLc6sqsTTk8+t80mFrSUpjrOvIEqQPy6GXmDm7VUyVWFFD2/H5J5x+iwUqlB
ZXRKearEIgzAWsAwyWfIOgm6BmqS7ByeYJ3809WGb92ydtSu6Df9dAWv3lA25GLA
hKiQ89VgYgVaN0rUIArGFoxpYtk2izg8AaOEa01IL5asXj62zK44kh+nXfj6nqBr
Y4T7lORhd1vugC8C2sO4JskSdyYuQKrWvLvtGtJ1z+h31Feqf1Qq2507QuKx1kKO
P0J7K9rbyqLZlaE7LV9wml2xjYtrrHSTA08hxPNJGSU0FeBK1iKnf/TN7/LG3T6R
2hzBaB1pvjJGNw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:52 2026 by rpki-client