This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: 7FCdCfwSAHCq1BcN4OcxMEexAJMk1w/y0iXZ3UDN0G4=
Subject key identifier: 2B:22:5D:80:E4:C7:5C:33:05:2A:98:49:DA:14:DC:BC:5C:BC:6D:DB
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 019C2C9A5B485A6E4C65F68A485E468F0C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 1808
Signing time: Thu 05 Feb 2026 07:00:39 +0000
Manifest this update: Thu 05 Feb 2026 07:00:39 +0000
Manifest next update: Fri 06 Feb 2026 07:00:39 +0000
Files and hashes: 1: bpSsw3u17paxn3-AVlEf6jIUUto.roa (hash: T2untNFj40KYleuC+qNxJNMzybkWShTxVqPmDZMj7zk=)
2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: Ty3Q/4SDqm232ok+fMBSCCasa4aXNWnn/tDXpY7Mw7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2c:9a:5b:48:5a:6e:4c:65:f6:8a:48:5e:46:8f:0c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Feb 5 07:00:39 2026 GMT
Not After : Feb 6 07:00:39 2026 GMT
Subject: CN=2b225d80e4c75c33052a9849da14dcbc5cbc6ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ce:f6:eb:22:84:a4:ee:4a:51:1a:43:06:75:
ef:77:b1:e5:a1:bc:65:92:69:bd:c5:ae:be:50:74:
fd:ed:d6:ec:10:ef:63:32:b0:fc:25:ca:5b:01:3d:
b7:11:dc:45:0e:e0:33:0c:1d:45:06:e8:30:53:f9:
6e:c2:b1:7d:bd:6c:4d:9e:f8:53:38:7a:29:98:30:
25:16:9e:33:e6:91:61:04:3c:02:1b:77:00:3b:a0:
78:5f:0b:59:29:52:5b:b1:76:fc:1d:f2:0e:f9:db:
d8:4f:88:01:00:03:28:8b:6f:24:85:a3:4b:3b:45:
25:1c:18:81:2f:37:fe:69:a9:db:11:2b:f0:07:87:
0c:45:a4:21:f9:14:42:f8:a0:2f:60:5e:d3:2c:95:
bc:5c:1f:6b:b7:67:fa:c7:73:1c:2d:fc:f7:54:22:
14:23:96:52:4b:b1:84:70:87:5b:4c:f3:b3:54:c0:
e5:b5:dc:a3:0f:fb:02:81:6c:b5:e6:f8:5c:44:ea:
9b:5c:62:fa:0e:03:2c:59:d4:2f:9d:fe:60:a7:92:
be:04:bb:b9:be:1f:8f:0f:14:0d:c6:ee:da:ac:d1:
ea:88:93:5f:e9:a6:33:b7:05:cf:4c:f0:ff:c8:74:
69:cb:4e:af:ce:9d:97:2e:83:1c:ac:15:de:4b:ef:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:22:5D:80:E4:C7:5C:33:05:2A:98:49:DA:14:DC:BC:5C:BC:6D:DB
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:11:e3:92:cb:2f:0d:1a:87:1a:35:c9:9f:20:61:2f:27:8c:
83:92:35:7e:8f:bd:a4:19:4e:cc:ff:05:60:53:79:4d:29:4e:
6f:1b:f2:12:17:16:8b:18:20:40:80:24:2d:8c:81:a7:d4:0b:
83:e7:2c:8b:7b:91:d7:85:f8:a8:15:3c:45:89:34:9d:07:a2:
86:e3:d8:35:e9:da:3e:9c:da:91:c0:aa:6e:8a:d6:f4:49:17:
1d:7a:1c:68:50:ab:2e:5e:0d:51:30:21:6a:e3:08:a1:15:a8:
e5:7e:4c:74:58:7b:0d:fc:ba:fa:95:c2:ae:65:bb:68:10:3f:
13:c3:48:b2:45:40:63:a4:c3:26:57:09:2b:d3:33:95:bb:69:
04:c7:53:3a:99:00:6e:81:08:62:72:10:84:aa:68:d9:90:f5:
a0:2a:36:dc:da:ee:58:2b:d0:4c:c6:9c:3d:b4:7b:c8:ed:48:
3d:4c:8d:fe:75:03:0b:c4:ef:8f:17:b9:c7:bd:b9:be:cd:5b:
4c:e1:83:df:7e:6a:f7:9b:c4:e0:9e:33:78:49:b0:7a:50:7c:
10:bc:54:7a:ed:66:e9:e8:af:af:5d:90:53:3f:b8:d1:cd:ca:
ae:44:2b:00:2a:94:59:6b:c3:ca:23:75:2a:c7:1e:71:5b:80:
fe:01:84:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwsmltIWm5MZfaKSF5GjwxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NjU2NGZjMjA2YzRiYzVkYjU4ZjdlZmJiYjFlOGY4ODQ5
OWUyMzMwHhcNMjYwMjA1MDcwMDM5WhcNMjYwMjA2MDcwMDM5WjAzMTEwLwYDVQQD
EygyYjIyNWQ4MGU0Yzc1YzMzMDUyYTk4NDlkYTE0ZGNiYzVjYmM2ZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c726yKEpO5KURpDBnXvd7Hlobxl
kmm9xa6+UHT97dbsEO9jMrD8JcpbAT23EdxFDuAzDB1FBugwU/luwrF9vWxNnvhT
OHopmDAlFp4z5pFhBDwCG3cAO6B4XwtZKVJbsXb8HfIO+dvYT4gBAAMoi28khaNL
O0UlHBiBLzf+aanbESvwB4cMRaQh+RRC+KAvYF7TLJW8XB9rt2f6x3McLfz3VCIU
I5ZSS7GEcIdbTPOzVMDltdyjD/sCgWy15vhcROqbXGL6DgMsWdQvnf5gp5K+BLu5
vh+PDxQNxu7arNHqiJNf6aYztwXPTPD/yHRpy06vzp2XLoMcrBXeS+8CPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsiXYDkx1wzBSqYSdoU3LxcvG3bMB8GA1UdIwQY
MBaAFHdlZPwgbEvF21j377ux6PiEmeIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjIt
ZGQ5MDdiNzc0ZjIyLzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjItZGQ5MDdiNzc0ZjIy
LzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhHjkssv
DRqHGjXJnyBhLyeMg5I1fo+9pBlOzP8FYFN5TSlObxvyEhcWixggQIAkLYyBp9QL
g+csi3uR14X4qBU8RYk0nQeihuPYNenaPpzakcCqborW9EkXHXocaFCrLl4NUTAh
auMIoRWo5X5MdFh7Dfy6+pXCrmW7aBA/E8NIskVAY6TDJlcJK9MzlbtpBMdTOpkA
boEIYnIQhKpo2ZD1oCo23NruWCvQTMacPbR7yO1IPUyN/nUDC8Tvjxe5x725vs1b
TOGD335q95vE4J4zeEmwelB8ELxUeu1m6eivr12QUz+40c3KrkQrACqUWWvDyiN1
KscecVuA/gGE8w==
-----END CERTIFICATE-----
Generated at Thu Feb 5 15:05:51 2026 by rpki-client