This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: aUOhB+pflr+UUXmq/8QRbUD8ByIzk30LTx6MnF98gDo=
Subject key identifier: D3:0D:5C:69:CE:07:97:6C:69:82:AA:8E:0A:59:94:87:13:43:41:BC
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019C42EAFA21768FFDDD60EC8406DD068ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0BBD
Signing time: Mon 09 Feb 2026 15:00:21 +0000
Manifest this update: Mon 09 Feb 2026 15:00:21 +0000
Manifest next update: Tue 10 Feb 2026 15:00:21 +0000
Files and hashes: 1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: tkfLP5EumkDC0mGg520tsZs3KjBgiJCO8zvfRn9y4KU=)
6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:fa:21:76:8f:fd:dd:60:ec:84:06:dd:06:8e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Feb 9 15:00:21 2026 GMT
Not After : Feb 10 15:00:21 2026 GMT
Subject: CN=d30d5c69ce07976c6982aa8e0a599487134341bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:90:76:f0:4f:ad:76:3e:7c:4d:91:1e:0a:
7a:9f:19:c4:61:d0:d4:cb:35:b4:29:a9:0a:0f:ad:
11:67:d0:78:de:11:2a:d3:6b:cb:34:7a:8d:f4:ca:
1e:be:21:91:c5:3f:de:27:71:b1:09:66:b8:96:cf:
16:89:a3:bc:d6:9e:05:78:25:9a:d1:df:3c:00:9e:
a1:33:cd:41:56:fa:30:5b:bf:4f:e3:3c:27:17:15:
70:3d:eb:80:0e:b1:48:c3:0b:ae:93:f3:92:f9:c4:
26:c1:2a:2f:d8:fd:11:1d:27:d5:71:a0:9d:af:07:
f1:e8:7b:d0:f8:5a:63:56:93:d9:94:c1:94:dc:17:
2b:2c:8e:73:50:ec:d9:41:2c:26:fd:9b:61:12:18:
a8:63:6a:bc:fe:e1:b1:ca:da:3e:52:16:b0:96:1c:
f2:4d:dd:50:21:ed:ed:07:f8:ba:da:76:22:3b:7e:
0b:f1:d0:67:67:29:a2:a3:b7:5a:a4:d0:8e:fe:e4:
26:96:9e:c4:f1:4e:66:a3:e9:13:0c:f0:11:30:36:
b0:c4:41:26:13:5e:a7:ef:a9:51:cb:2d:14:4e:b0:
18:21:b0:67:3f:06:bb:b2:49:e1:76:a1:51:17:15:
68:23:78:31:37:18:08:05:b0:41:84:98:5b:51:ef:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0D:5C:69:CE:07:97:6C:69:82:AA:8E:0A:59:94:87:13:43:41:BC
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fc:56:ce:84:49:4b:49:99:d5:fa:df:f3:a1:57:3a:29:fa:
01:f3:5e:98:af:1b:0f:46:50:9a:e6:c1:27:98:11:41:29:a0:
be:09:3e:d1:45:f5:f2:dd:c4:88:59:9b:1a:1b:7f:e6:df:40:
68:02:e4:c8:8e:a9:b3:a3:31:f1:ec:ca:a0:26:3b:e9:9c:55:
24:a3:86:16:fc:e5:c3:00:74:63:4a:db:9d:76:19:71:e6:09:
ae:76:d4:96:ce:ed:1a:34:1c:62:b7:9a:56:e8:d7:70:69:c7:
b8:34:c3:c2:63:cd:25:0c:7c:f1:c9:43:79:6b:cb:b0:26:64:
af:0b:93:46:2a:a5:01:b8:28:6c:58:d0:6b:ba:e7:07:2c:10:
74:fb:86:71:0e:a3:bb:e5:0d:c4:1e:a4:ff:28:98:6a:f2:f9:
dd:1c:f5:b3:96:e1:1d:23:2d:5e:16:7c:36:53:04:b7:de:8d:
f4:36:63:55:7b:a3:e3:3c:e3:69:53:56:6a:8b:9b:70:55:54:
e8:9c:d3:2f:fa:0b:0b:76:70:0c:32:f0:bc:d8:08:e7:d2:62:
8a:4d:3d:73:49:30:16:00:9d:0b:b1:03:af:88:07:27:26:38:
8f:ed:9b:a4:31:d2:55:95:7f:f4:b7:91:d4:d9:e5:d7:61:70:
7a:e0:95:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6vohdo/93WDshAbdBo7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmYyMjY5ZDE1NjMzYmRiYzcxZDhjZDNmNDU4Y2JkMDNm
ZTAzMWYwHhcNMjYwMjA5MTUwMDIxWhcNMjYwMjEwMTUwMDIxWjAzMTEwLwYDVQQD
EyhkMzBkNWM2OWNlMDc5NzZjNjk4MmFhOGUwYTU5OTQ4NzEzNDM0MWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSWQdvBPrXY+fE2RHgp6nxnEYdDU
yzW0KakKD60RZ9B43hEq02vLNHqN9MoeviGRxT/eJ3GxCWa4ls8WiaO81p4FeCWa
0d88AJ6hM81BVvowW79P4zwnFxVwPeuADrFIwwuuk/OS+cQmwSov2P0RHSfVcaCd
rwfx6HvQ+FpjVpPZlMGU3BcrLI5zUOzZQSwm/ZthEhioY2q8/uGxyto+Uhawlhzy
Td1QIe3tB/i62nYiO34L8dBnZymio7dapNCO/uQmlp7E8U5mo+kTDPARMDawxEEm
E16n76lRyy0UTrAYIbBnPwa7sknhdqFRFxVoI3gxNxgIBbBBhJhbUe/QQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMNXGnOB5dsaYKqjgpZlIcTQ0G8MB8GA1UdIwQY
MBaAFHEvImnRVjO9vHHYzT9FjL0D/gMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUt
ZDE4YmFiOTUxNWJmLzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUtZDE4YmFiOTUxNWJm
LzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfxWzoRJ
S0mZ1frf86FXOin6AfNemK8bD0ZQmubBJ5gRQSmgvgk+0UX18t3EiFmbGht/5t9A
aALkyI6ps6Mx8ezKoCY76ZxVJKOGFvzlwwB0Y0rbnXYZceYJrnbUls7tGjQcYrea
VujXcGnHuDTDwmPNJQx88clDeWvLsCZkrwuTRiqlAbgobFjQa7rnBywQdPuGcQ6j
u+UNxB6k/yiYavL53Rz1s5bhHSMtXhZ8NlMEt96N9DZjVXuj4zzjaVNWaoubcFVU
6JzTL/oLC3ZwDDLwvNgI59Jiik09c0kwFgCdC7EDr4gHJyY4j+2bpDHSVZV/9LeR
1Nnl12FweuCVcw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:15 2026 by rpki-client