This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: bkqE/raF8BivUu4PdHMRyILntp08yp3eyoV+2qFiWBs=
Subject key identifier: 2D:E3:18:7B:12:92:9C:8B:43:05:D7:C8:DF:E8:69:D1:2E:D9:04:C6
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 019C427D325BEAE207FEABBCC825E9A8A6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 13:00:26 +0000
Manifest this update: Mon 09 Feb 2026 13:00:26 +0000
Manifest next update: Tue 10 Feb 2026 13:00:26 +0000
Files and hashes: 1: 4OtylCmVUOQ1YUFtglhWgqf0IYA.roa (hash: WWTOLHqEiZ6EYrBZLenBHdV2VidIQmH+ASGlD1/87NA=)
2: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: m5PRHSaZxJAC2hZQ30cwTqrGxJ+aUy9o9rEArSyJrrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:32:5b:ea:e2:07:fe:ab:bc:c8:25:e9:a8:a6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Feb 9 13:00:26 2026 GMT
Not After : Feb 10 13:00:26 2026 GMT
Subject: CN=2de3187b12929c8b4305d7c8dfe869d12ed904c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:17:f5:de:7e:0a:17:96:81:26:a9:6c:1f:
9b:c5:f0:bb:fd:5d:71:63:d6:a3:17:3f:62:d3:5e:
19:4a:b0:08:25:cf:6c:fc:af:11:aa:ad:cc:21:8b:
e8:fb:04:7a:9f:3f:b0:e6:6d:1d:7a:ad:41:e2:ae:
d6:19:f4:0f:81:15:0c:27:11:84:2f:8f:4b:14:a6:
0f:58:fa:dc:ad:24:95:f3:9d:7b:2a:48:8f:bb:ff:
a1:ab:05:a1:90:85:2e:89:12:ba:62:ca:ec:48:f8:
a2:c5:d2:23:dc:93:96:f2:1f:c2:df:a9:30:bc:2a:
bf:32:a0:20:f8:6e:dd:87:5d:e4:d0:7a:aa:38:d0:
b4:6d:62:4a:bb:b1:3a:e1:28:7a:78:54:d7:59:03:
39:a1:0c:69:1a:c2:51:37:f4:92:ef:eb:ed:e4:57:
18:d5:ef:dd:1b:21:cb:0f:19:e0:4d:21:67:2c:c6:
69:53:e2:f9:c3:4b:62:94:40:b2:92:65:1a:9e:30:
00:39:41:d0:2e:01:96:a0:3c:e3:06:fc:10:73:e4:
06:a3:bc:55:9d:99:16:e7:94:87:48:c7:7c:cc:c8:
0c:fc:53:82:c3:da:3e:d9:1d:23:8f:45:5f:2c:a9:
52:d5:8b:a7:3a:79:39:4d:4a:14:e9:0d:9b:68:ec:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:18:7B:12:92:9C:8B:43:05:D7:C8:DF:E8:69:D1:2E:D9:04:C6
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e0:c9:01:19:ff:cd:a1:de:95:af:a5:b9:13:27:6d:02:1b:
dd:22:7c:31:08:91:10:d6:9c:50:37:08:09:56:1f:41:2d:74:
f4:4d:00:b1:27:9f:99:e2:8b:4b:87:1b:66:97:84:ee:51:94:
5c:e1:e7:48:81:3d:93:27:35:45:f2:df:35:db:7f:bd:8d:c1:
f4:d6:ee:d4:2f:1d:29:55:45:5b:76:cc:8e:c7:82:0c:ce:85:
15:b1:57:43:02:a1:13:2d:a4:0a:35:88:e0:65:3f:88:a8:09:
bd:ea:41:b5:45:59:ae:29:a0:d5:d0:60:49:fa:9e:73:b9:e2:
1f:81:27:4b:7a:3b:ba:78:5d:dd:5e:5c:9a:66:f5:a1:65:7e:
49:58:58:c3:e1:2d:bb:17:c7:4f:7c:85:51:83:bd:a0:f8:cd:
bf:53:c2:28:15:21:04:8c:b9:fb:bd:ed:e6:7c:62:c4:2c:30:
1f:b4:3c:9b:8e:5e:27:6d:c6:ab:94:e0:03:ac:20:ce:81:27:
f4:a5:88:5f:ca:b7:47:50:a6:41:bd:b7:c5:7c:84:80:57:67:
d9:1c:ee:ce:8a:ae:ba:26:67:6b:e4:6a:18:3c:72:4e:ef:e6:
08:27:a8:f8:a1:51:df:93:b0:45:b5:2e:ce:7c:eb:d3:ab:36:
3b:ed:e1:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfTJb6uIH/qu8yCXpqKa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYWM0ODY4MDczOThhYzFjZWVjMDkyMWQwNGQ0MDlhNGY3
ZjQ3OWIwHhcNMjYwMjA5MTMwMDI2WhcNMjYwMjEwMTMwMDI2WjAzMTEwLwYDVQQD
EygyZGUzMTg3YjEyOTI5YzhiNDMwNWQ3YzhkZmU4NjlkMTJlZDkwNGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NkX9d5+CheWgSapbB+bxfC7/V1x
Y9ajFz9i014ZSrAIJc9s/K8Rqq3MIYvo+wR6nz+w5m0deq1B4q7WGfQPgRUMJxGE
L49LFKYPWPrcrSSV8517KkiPu/+hqwWhkIUuiRK6YsrsSPiixdIj3JOW8h/C36kw
vCq/MqAg+G7dh13k0HqqONC0bWJKu7E64Sh6eFTXWQM5oQxpGsJRN/SS7+vt5FcY
1e/dGyHLDxngTSFnLMZpU+L5w0tilECykmUanjAAOUHQLgGWoDzjBvwQc+QGo7xV
nZkW55SHSMd8zMgM/FOCw9o+2R0jj0VfLKlS1YunOnk5TUoU6Q2baOxc/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3jGHsSkpyLQwXXyN/oadEu2QTGMB8GA1UdIwQY
MBaAFCOsSGgHOYrBzuwJIdBNQJpPf0ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2Qt
NjE2MDViMjZmODJkLzEvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hMzFiODItZDdlYS00ZjBiLTg2M2QtNjE2MDViMjZmODJk
LzEvSTZ4SWFBYzVpc0hPN0FraDBFMUFtazlfUjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAquDJARn/
zaHela+luRMnbQIb3SJ8MQiRENacUDcICVYfQS109E0AsSefmeKLS4cbZpeE7lGU
XOHnSIE9kyc1RfLfNdt/vY3B9Nbu1C8dKVVFW3bMjseCDM6FFbFXQwKhEy2kCjWI
4GU/iKgJvepBtUVZrimg1dBgSfqec7niH4EnS3o7unhd3V5cmmb1oWV+SVhYw+Et
uxfHT3yFUYO9oPjNv1PCKBUhBIy5+73t5nxixCwwH7Q8m45eJ23Gq5TgA6wgzoEn
9KWIX8q3R1CmQb23xXyEgFdn2RzuzoquuiZna+RqGDxyTu/mCCeo+KFR35OwRbUu
znzr06s2O+3hIA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:41 2026 by rpki-client