This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier: UVwPvL7I0Hse1ueXDsK5o8lqUq6wnp7RUOPa2HWHIr8=
Subject key identifier: 94:B0:4C:74:AD:42:13:E5:B9:B5:AE:A2:3F:55:4C:8A:03:12:02:A3
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial: 019C4246862B4FEBCD8BDFDC8CC738B53CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number: 16FF
Signing time: Mon 09 Feb 2026 12:00:43 +0000
Manifest this update: Mon 09 Feb 2026 12:00:43 +0000
Manifest next update: Tue 10 Feb 2026 12:00:43 +0000
Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: D+UGuCvYpo1/8f1sP8LqT2PRKRvQAXudeiMA8X/6WLA=)
2: aitD5UH29rGUG8_oXWsc-YfKHvk.roa (hash: fXAcocJ6AW36LCgsDsOqq0Ar/nfeKZ+crNQ7BTk4Lec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:86:2b:4f:eb:cd:8b:df:dc:8c:c7:38:b5:3c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
Validity
Not Before: Feb 9 12:00:43 2026 GMT
Not After : Feb 10 12:00:43 2026 GMT
Subject: CN=94b04c74ad4213e5b9b5aea23f554c8a031202a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:df:37:c1:db:b1:9d:be:15:60:80:30:f4:
ea:79:9f:8d:fd:9f:e7:be:95:87:06:37:6b:9a:93:
38:2f:0a:31:67:e1:44:0d:74:20:3f:1e:c7:66:62:
b6:fd:7e:a5:f0:b9:ee:cf:24:cd:de:33:7f:00:b5:
b5:55:d0:4c:00:bc:2a:fd:1a:5e:65:07:31:f8:99:
8e:6c:86:40:f4:bb:ef:a6:aa:f3:85:b3:a1:67:4b:
01:ca:96:7c:b3:8f:26:4d:1b:58:ea:d7:8b:7f:21:
b7:25:8b:c1:a0:60:f5:e5:3a:aa:f9:92:e7:6b:ec:
a8:d1:32:37:5e:05:e8:57:74:80:0b:62:1a:0f:08:
20:a7:6e:d1:0d:4b:62:4b:64:a8:9b:8c:26:7d:eb:
a1:26:bb:a9:fd:91:79:75:78:ac:1b:fb:db:39:07:
d8:0f:4c:af:55:07:40:3b:7c:ca:8e:49:00:a6:42:
6e:4e:dd:17:44:74:f6:54:4b:14:be:f4:d8:86:98:
65:72:d3:d3:9f:78:8c:37:6c:d6:ea:cb:4a:f7:61:
2a:50:4f:1c:f7:34:42:98:e2:19:15:db:5e:c8:8a:
f2:4c:fe:d8:75:6a:3f:d4:4b:30:5d:61:0f:11:a3:
b5:d6:49:d5:34:f7:1b:7a:15:74:bd:c0:5e:f4:2d:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B0:4C:74:AD:42:13:E5:B9:B5:AE:A2:3F:55:4C:8A:03:12:02:A3
X509v3 Authority Key Identifier:
keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c0:6a:d6:53:03:19:26:95:bc:96:6d:9b:cb:d1:6e:19:11:
7c:23:fd:60:f9:68:f8:80:48:4d:ff:43:e8:0d:16:15:5c:4f:
28:7b:8f:3a:30:92:96:43:7e:5f:8a:55:37:d0:d3:a0:41:74:
8f:09:2b:b1:13:e7:da:62:d6:a8:e7:93:79:81:0c:39:a6:ee:
fd:e7:aa:38:df:a2:19:c3:e5:34:d9:0d:18:86:0b:fd:56:b8:
2e:87:6e:74:88:4b:b6:72:24:22:ca:b7:96:eb:c4:e3:88:d9:
d6:6f:2d:34:a8:d8:13:58:7a:ed:c3:24:24:c6:89:61:7a:1e:
9f:f8:45:56:e8:b1:2b:34:af:f9:49:fb:5d:2b:d8:cb:c9:46:
78:ab:37:a9:24:64:a7:f6:62:3a:95:ce:40:d0:82:e0:bb:ef:
eb:e4:d6:01:dc:94:b3:07:11:f3:4d:0b:cb:3b:1a:56:cb:33:
d5:67:10:3a:c2:20:09:ff:f6:8b:7c:eb:1e:02:a4:65:6f:99:
bb:02:e8:83:d0:c9:02:14:67:3f:93:66:9b:b0:f6:b4:57:03:
60:ac:d8:5d:11:f2:a8:9b:dd:42:92:b8:20:fa:6a:85:03:ce:
67:a8:c2:aa:12:a1:40:ac:97:b3:27:a8:ca:c1:1e:5d:3f:97:
0e:be:d1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRoYrT+vNi9/cjMc4tTzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTU0YWZlNjcyNzQ0NzQyYjRlMzUwMjdiNDAyZTg2MTNj
MjAzNzcwHhcNMjYwMjA5MTIwMDQzWhcNMjYwMjEwMTIwMDQzWjAzMTEwLwYDVQQD
Eyg5NGIwNGM3NGFkNDIxM2U1YjliNWFlYTIzZjU1NGM4YTAzMTIwMmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRrfN8HbsZ2+FWCAMPTqeZ+N/Z/n
vpWHBjdrmpM4LwoxZ+FEDXQgPx7HZmK2/X6l8LnuzyTN3jN/ALW1VdBMALwq/Rpe
ZQcx+JmObIZA9LvvpqrzhbOhZ0sBypZ8s48mTRtY6teLfyG3JYvBoGD15Tqq+ZLn
a+yo0TI3XgXoV3SAC2IaDwggp27RDUtiS2Som4wmfeuhJrup/ZF5dXisG/vbOQfY
D0yvVQdAO3zKjkkApkJuTt0XRHT2VEsUvvTYhphlctPTn3iMN2zW6stK92EqUE8c
9zRCmOIZFdteyIryTP7YdWo/1EswXWEPEaO11knVNPcbehV0vcBe9C2b6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSwTHStQhPlubWuoj9VTIoDEgKjMB8GA1UdIwQY
MBaAFA9VSv5nJ0R0K041AntALoYTwgN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUt
YzBhZTgwYjc0MmIwLzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUtYzBhZTgwYjc0MmIw
LzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMBq1lMD
GSaVvJZtm8vRbhkRfCP9YPlo+IBITf9D6A0WFVxPKHuPOjCSlkN+X4pVN9DToEF0
jwkrsRPn2mLWqOeTeYEMOabu/eeqON+iGcPlNNkNGIYL/Va4LodudIhLtnIkIsq3
luvE44jZ1m8tNKjYE1h67cMkJMaJYXoen/hFVuixKzSv+Un7XSvYy8lGeKs3qSRk
p/ZiOpXOQNCC4Lvv6+TWAdyUswcR800LyzsaVssz1WcQOsIgCf/2i3zrHgKkZW+Z
uwLog9DJAhRnP5Nmm7D2tFcDYKzYXRHyqJvdQpK4IPpqhQPOZ6jCqhKhQKyXsyeo
ysEeXT+XDr7RPQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:15 2026 by rpki-client