This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier: xxZiz6OmKGO2soxJjZYDNLoeK1eF0Cvfdv15zu+b9UY=
Subject key identifier: 8E:94:A7:5F:3E:09:4B:1D:98:00:90:EA:B4:99:D7:B0:F0:37:2F:A6
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 019C43FDDCF703804F964A7D5F9CD34A4777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number: 0C33
Signing time: Mon 09 Feb 2026 20:00:36 +0000
Manifest this update: Mon 09 Feb 2026 20:00:36 +0000
Manifest next update: Tue 10 Feb 2026 20:00:36 +0000
Files and hashes: 1: 4x1TKBz_BI-V4dj9yOWPflsgBy0.roa (hash: AEyQ4d3oKadVqU+q8qpPHgCbs4RI3Y80TBihfli8Oxo=)
2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: yfTztdJb31psq8fek4ep/Q1Tuyg55cWlqIKwIix1HVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:dc:f7:03:80:4f:96:4a:7d:5f:9c:d3:4a:47:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Feb 9 20:00:36 2026 GMT
Not After : Feb 10 20:00:36 2026 GMT
Subject: CN=8e94a75f3e094b1d980090eab499d7b0f0372fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:ac:a4:5d:40:b7:ce:f0:6f:c2:e9:c0:29:
48:56:fb:bb:20:1c:c5:e4:6f:2d:71:2e:6b:e2:bf:
4a:9a:09:10:0a:79:32:a3:94:d9:28:c3:d3:7f:02:
01:53:10:2a:ed:58:c7:ee:2e:66:40:95:62:04:98:
a2:1b:7b:36:0c:c4:ba:8f:06:e1:ea:90:b3:f8:5d:
e3:b3:77:f1:30:08:40:50:a7:f6:50:72:b5:ff:b0:
67:2c:4c:a5:08:f9:04:1e:c6:5e:f0:a5:58:6f:f7:
ce:49:1d:fd:c7:10:51:b4:33:9a:b9:04:ca:5c:16:
30:45:1a:75:8b:a5:dd:99:df:9f:74:53:16:19:a4:
c4:43:34:06:fb:cf:f5:a5:9d:e8:90:a5:4d:b9:97:
b7:03:42:5c:43:d5:32:24:a2:26:54:bc:e2:d7:40:
13:fc:00:39:52:9b:6b:0a:c5:2c:c9:81:b5:39:74:
27:69:65:9e:bb:7f:67:b0:cb:8e:9f:36:00:ac:b1:
26:ec:3d:03:77:b9:4d:24:13:18:84:df:0b:f9:c8:
c8:c2:d4:74:7b:58:8d:f4:68:5f:e3:8d:46:ef:42:
c5:c6:c7:12:1d:5a:e0:3d:f1:9e:e1:26:9b:fe:7e:
1e:13:4d:e8:21:76:33:c7:f5:c7:ae:3d:7a:d3:48:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:94:A7:5F:3E:09:4B:1D:98:00:90:EA:B4:99:D7:B0:F0:37:2F:A6
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a4:41:25:9c:b3:25:ad:3a:0c:c3:b2:5b:fc:f1:5c:f5:d2:
19:ea:de:53:eb:54:bf:de:4e:f2:c8:30:0d:e7:1f:ef:95:3c:
9f:06:01:e6:3d:26:64:82:e1:34:0b:e6:4b:3b:79:b3:a5:42:
c4:09:06:70:8b:f0:24:a8:ec:d3:0e:ed:d6:93:2c:c9:83:db:
ce:ea:6a:45:73:8d:0e:29:4b:5a:a2:97:94:ec:d1:5e:6b:bf:
f8:49:da:b1:4c:af:1b:e0:17:a4:84:ca:1f:89:8a:5f:b5:37:
cb:cc:22:f8:9d:f9:0c:d5:e0:73:5a:fd:50:44:44:29:fd:d4:
2c:10:17:33:d3:35:67:ac:b1:a7:8a:f0:f9:14:7c:d7:f4:0d:
27:75:5e:4e:c6:ff:dc:51:07:81:ea:01:5c:e1:e0:28:fb:3d:
a5:56:12:33:33:e1:6e:38:15:59:c8:2a:c1:27:a1:bf:52:2b:
49:bd:1f:18:e9:ae:5d:04:34:28:c2:6a:77:44:21:a4:ed:27:
68:6d:dd:5b:c7:c9:fa:63:d8:8f:dd:45:11:a2:c8:c1:b4:f8:
49:31:39:e8:01:5a:07:a9:d3:de:f0:84:0d:79:3f:8f:6f:e5:
01:a3:4b:57:aa:08:c2:36:db:2d:45:ef:80:2a:c1:27:5b:94:
b9:83:35:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/dz3A4BPlkp9X5zTSkd3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTI1MzRkZjUwOWM5NmVjYjgxMWJjODVkNzZkNjJiYWFk
ZjNkMjkwHhcNMjYwMjA5MjAwMDM2WhcNMjYwMjEwMjAwMDM2WjAzMTEwLwYDVQQD
Eyg4ZTk0YTc1ZjNlMDk0YjFkOTgwMDkwZWFiNDk5ZDdiMGYwMzcyZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk+spF1At87wb8LpwClIVvu7IBzF
5G8tcS5r4r9KmgkQCnkyo5TZKMPTfwIBUxAq7VjH7i5mQJViBJiiG3s2DMS6jwbh
6pCz+F3js3fxMAhAUKf2UHK1/7BnLEylCPkEHsZe8KVYb/fOSR39xxBRtDOauQTK
XBYwRRp1i6Xdmd+fdFMWGaTEQzQG+8/1pZ3okKVNuZe3A0JcQ9UyJKImVLzi10AT
/AA5UptrCsUsyYG1OXQnaWWeu39nsMuOnzYArLEm7D0Dd7lNJBMYhN8L+cjIwtR0
e1iN9Ghf441G70LFxscSHVrgPfGe4Sab/n4eE03oIXYzx/XHrj1600iKqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6Up18+CUsdmACQ6rSZ17DwNy+mMB8GA1UdIwQY
MBaAFJriU031Ccluy4EbyF121iuq3z0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjIt
ODIyNjUyNGU0YWNmLzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjItODIyNjUyNGU0YWNm
LzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaRBJZyz
Ja06DMOyW/zxXPXSGereU+tUv95O8sgwDecf75U8nwYB5j0mZILhNAvmSzt5s6VC
xAkGcIvwJKjs0w7t1pMsyYPbzupqRXONDilLWqKXlOzRXmu/+EnasUyvG+AXpITK
H4mKX7U3y8wi+J35DNXgc1r9UEREKf3ULBAXM9M1Z6yxp4rw+RR81/QNJ3VeTsb/
3FEHgeoBXOHgKPs9pVYSMzPhbjgVWcgqwSehv1IrSb0fGOmuXQQ0KMJqd0QhpO0n
aG3dW8fJ+mPYj91FEaLIwbT4STE56AFaB6nT3vCEDXk/j2/lAaNLV6oIwjbbLUXv
gCrBJ1uUuYM18Q==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:00:04 2026 by rpki-client