This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
File: M27g-MBTE_4RyEitRrz9homk0zg.mft (raw, json)
Hash identifier: 2uuWz3edgIA90JMZOCayQOQAcF2BjDJVCVr6LHnMypk=
Subject key identifier: 04:59:9A:31:48:0C:BA:E3:D2:9B:70:6C:F5:CF:06:19:D2:89:BE:99
Authority key identifier: 33:6E:E0:F8:C0:53:13:FE:11:C8:48:AD:46:BC:FD:86:89:A4:D3:38
Certificate issuer: /CN=336ee0f8c05313fe11c848ad46bcfd8689a4d338
Certificate serial: 019C42461FA375DA8D2AF5D5FF85C2585A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
Manifest number: 4E
Signing time: Mon 09 Feb 2026 12:00:17 +0000
Manifest this update: Mon 09 Feb 2026 12:00:17 +0000
Manifest next update: Tue 10 Feb 2026 12:00:17 +0000
Files and hashes: 1: M27g-MBTE_4RyEitRrz9homk0zg.crl (hash: c62v2Wp1Y6TdH+j32v8nwSB3kVqE4ObEzdLuaPtOWhY=)
2: UdbPrpWZnVUI8xYJ93EGzy3y3Fo.roa (hash: YUbFLz2txfa5ZpLLO9VEEJXfhsSpca/Bp2yKiziVyTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:1f:a3:75:da:8d:2a:f5:d5:ff:85:c2:58:5a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336ee0f8c05313fe11c848ad46bcfd8689a4d338
Validity
Not Before: Feb 9 12:00:17 2026 GMT
Not After : Feb 10 12:00:17 2026 GMT
Subject: CN=04599a31480cbae3d29b706cf5cf0619d289be99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:3d:ab:62:92:5f:f5:79:86:1b:7c:00:04:
b8:f9:64:6e:a6:c8:02:83:65:20:9e:97:56:d0:4f:
2d:97:c4:d2:fc:38:3a:04:d9:53:f0:93:6e:da:72:
0b:5f:b0:24:31:b1:fe:c1:0e:b1:e9:59:57:45:c5:
81:d4:63:c2:5e:d9:f3:2f:f3:89:55:a9:97:0c:37:
8b:d7:51:65:51:fc:86:07:dc:d0:20:41:cf:51:a2:
d3:5f:9e:c9:29:23:9e:b2:55:f3:c0:a1:39:c0:3f:
5d:f0:69:ff:01:2a:9f:66:19:a3:17:b4:96:88:e4:
e4:76:5a:9a:4b:25:b5:2b:46:e6:64:75:de:cb:5b:
aa:2b:ae:de:6d:d7:a0:26:79:0f:ab:3a:3e:41:2c:
a0:3f:c7:73:75:6d:6a:b1:0e:73:54:a9:5d:40:bc:
d5:11:d2:2e:ff:33:a3:d2:2c:39:e8:bb:59:95:51:
bd:9b:4e:6c:07:99:9c:03:df:87:dd:b6:d0:80:af:
18:23:64:85:be:88:0e:87:2b:6b:36:7e:94:06:e9:
95:9d:b4:80:d7:11:af:b0:f5:41:c9:54:54:88:86:
05:ae:02:d1:dd:35:e0:f6:c1:6d:27:0b:17:51:1c:
ee:22:5b:72:54:94:7c:5a:81:2d:29:bc:1e:2b:ac:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:9A:31:48:0C:BA:E3:D2:9B:70:6C:F5:CF:06:19:D2:89:BE:99
X509v3 Authority Key Identifier:
keyid:33:6E:E0:F8:C0:53:13:FE:11:C8:48:AD:46:BC:FD:86:89:A4:D3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M27g-MBTE_4RyEitRrz9homk0zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee96f8-723f-4e85-ac1e-7f1982d257f2/1/M27g-MBTE_4RyEitRrz9homk0zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:df:c8:7f:0e:1f:7a:09:98:04:a5:0e:bd:cf:de:23:b7:b6:
e3:92:2e:84:25:2d:76:04:5b:be:07:eb:23:a9:0f:59:7d:d0:
f6:6d:57:3b:34:bc:f2:d7:d1:81:c5:bf:c1:9d:50:59:2b:17:
a6:2b:cf:b3:39:62:93:40:0a:08:21:c0:d8:8b:0a:99:77:d0:
2b:c3:4a:df:98:5c:41:6f:ae:53:94:55:dc:4f:b9:ca:07:ae:
d4:ed:92:06:f9:65:0e:37:93:98:cc:2c:52:6a:57:1c:02:fc:
23:ac:34:d4:d4:c6:d6:e9:6d:e3:db:58:1f:0b:55:a0:16:6d:
b9:fe:8d:b6:56:53:9d:10:80:b1:fe:c3:b6:b1:55:86:a8:60:
08:17:93:fc:09:07:31:52:c4:ef:09:1a:1b:0f:f7:43:bd:0a:
08:55:f8:be:9b:5f:e8:c6:96:4f:56:b6:94:ec:35:82:05:74:
67:df:c2:82:5b:24:18:14:90:2b:4a:21:42:46:9e:54:23:23:
29:b9:bb:e0:ae:88:df:15:b4:0d:c1:28:a6:1a:25:d7:25:22:
5c:48:29:5b:03:cb:eb:d8:90:33:f3:dd:fd:a3:42:94:a2:52:
37:68:bd:cc:5c:ac:6b:3b:38:2c:11:cb:6e:18:95:ff:70:6d:
30:65:af:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRh+jddqNKvXV/4XCWFpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNmVlMGY4YzA1MzEzZmUxMWM4NDhhZDQ2YmNmZDg2ODlh
NGQzMzgwHhcNMjYwMjA5MTIwMDE3WhcNMjYwMjEwMTIwMDE3WjAzMTEwLwYDVQQD
EygwNDU5OWEzMTQ4MGNiYWUzZDI5YjcwNmNmNWNmMDYxOWQyODliZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCk9q2KSX/V5hht8AAS4+WRupsgC
g2UgnpdW0E8tl8TS/Dg6BNlT8JNu2nILX7AkMbH+wQ6x6VlXRcWB1GPCXtnzL/OJ
VamXDDeL11FlUfyGB9zQIEHPUaLTX57JKSOeslXzwKE5wD9d8Gn/ASqfZhmjF7SW
iOTkdlqaSyW1K0bmZHXey1uqK67ebdegJnkPqzo+QSygP8dzdW1qsQ5zVKldQLzV
EdIu/zOj0iw56LtZlVG9m05sB5mcA9+H3bbQgK8YI2SFvogOhytrNn6UBumVnbSA
1xGvsPVByVRUiIYFrgLR3TXg9sFtJwsXURzuIltyVJR8WoEtKbweK6zxgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARZmjFIDLrj0ptwbPXPBhnSib6ZMB8GA1UdIwQY
MBaAFDNu4PjAUxP+EchIrUa8/YaJpNM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTI3Zy1NQlRFXzRSeUVpdFJyejlob21rMHpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lZTk2ZjgtNzIzZi00ZTg1LWFjMWUt
N2YxOTgyZDI1N2YyLzEvTTI3Zy1NQlRFXzRSeUVpdFJyejlob21rMHpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lZTk2ZjgtNzIzZi00ZTg1LWFjMWUtN2YxOTgyZDI1N2Yy
LzEvTTI3Zy1NQlRFXzRSeUVpdFJyejlob21rMHpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmt/Ifw4f
egmYBKUOvc/eI7e245IuhCUtdgRbvgfrI6kPWX3Q9m1XOzS88tfRgcW/wZ1QWSsX
pivPszlik0AKCCHA2IsKmXfQK8NK35hcQW+uU5RV3E+5ygeu1O2SBvllDjeTmMws
UmpXHAL8I6w01NTG1ult49tYHwtVoBZtuf6NtlZTnRCAsf7DtrFVhqhgCBeT/AkH
MVLE7wkaGw/3Q70KCFX4vptf6MaWT1a2lOw1ggV0Z9/CglskGBSQK0ohQkaeVCMj
Kbm74K6I3xW0DcEophol1yUiXEgpWwPL69iQM/Pd/aNClKJSN2i9zFysazs4LBHL
bhiV/3BtMGWvww==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:12 2026 by rpki-client