This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
File: Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json)
Hash identifier: IyFhTeTK8zjPj2j2FPxHS+rDoDN5D4gNUXSAtyWjl0M=
Subject key identifier: 07:45:AB:77:0B:82:88:2C:4E:49:6B:4F:D0:FD:5F:20:BA:4F:BB:8B
Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
Certificate issuer: /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Certificate serial: 019C40FD75D02A9DE363CAB85D0C3297824C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
Manifest number: 0288
Signing time: Mon 09 Feb 2026 06:01:18 +0000
Manifest this update: Mon 09 Feb 2026 06:01:18 +0000
Manifest next update: Tue 10 Feb 2026 06:01:18 +0000
Files and hashes: 1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: I/3TnPILI+UPSwnucmhsVOP2ngaUP8HztrFJaFZzXro=)
2: r87aSMlTcvbfUcNgDrz01QCPAQA.roa (hash: 4IqazvlvJ1xS+3jpTJGpmr9Z+5iN7AeI5Qg7WLedfSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:75:d0:2a:9d:e3:63:ca:b8:5d:0c:32:97:82:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e
Validity
Not Before: Feb 9 06:01:18 2026 GMT
Not After : Feb 10 06:01:18 2026 GMT
Subject: CN=0745ab770b82882c4e496b4fd0fd5f20ba4fbb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:3b:c6:79:b5:81:5c:75:98:66:c6:33:a0:
db:be:1f:4a:91:e0:57:44:12:97:0d:cc:f9:15:85:
7c:bb:83:cf:e8:9d:92:42:52:3b:69:a7:c3:52:b5:
78:d7:02:2e:00:74:f9:9e:f3:fc:b8:69:d4:1c:0b:
98:2d:60:52:09:15:a1:3d:89:41:67:88:f9:32:59:
eb:e5:a3:74:d6:98:01:4f:69:c6:a8:0e:18:e7:c8:
91:69:4f:be:84:c4:a9:fd:14:1a:d2:ad:2e:49:a4:
e2:10:17:6c:ce:6e:63:60:c1:ae:4c:ff:8c:26:6b:
b0:81:04:73:3d:44:ac:67:e7:e5:78:9c:49:64:71:
f7:07:90:7b:44:d2:e2:fd:5d:b2:3a:fa:90:2f:52:
f6:58:e1:ac:37:28:30:cb:a0:52:1b:98:07:18:b2:
f7:d2:3d:fe:c4:64:e1:47:ba:41:e8:06:2a:5c:5c:
8a:a2:73:44:7c:7f:e0:a4:f4:9e:b5:87:10:55:af:
66:dd:1f:74:71:92:3a:5d:25:a0:a8:05:e9:55:90:
ec:37:c8:55:1d:35:5e:7e:ac:b2:52:f9:06:e9:ad:
83:34:41:a6:49:45:c1:66:d0:7e:f9:e6:8a:5d:a4:
dc:5d:3d:b4:d6:44:a6:70:93:c6:e6:76:ac:1c:12:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:AB:77:0B:82:88:2C:4E:49:6B:4F:D0:FD:5F:20:BA:4F:BB:8B
X509v3 Authority Key Identifier:
keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c9:ab:d6:06:44:19:96:df:ca:91:3f:a4:fc:24:d9:bb:56:
e2:a3:b7:ad:30:4b:1b:8b:22:98:63:46:5e:b1:f4:3d:2f:47:
d0:ea:92:c7:ee:6f:f6:1b:f4:96:75:59:ce:9c:7a:8a:ad:cd:
53:58:1d:83:98:3b:25:11:79:c1:81:4b:f8:a3:4c:f4:7b:62:
d2:3c:56:53:84:c1:27:89:b6:1a:df:7d:71:27:ba:c6:50:9e:
e1:e4:e5:62:05:4f:d8:7c:45:19:25:f3:1d:ef:51:6a:8d:30:
fe:01:28:b8:07:0d:76:e3:23:52:a1:2e:cb:2a:49:4e:97:42:
3c:0f:53:3b:77:da:86:50:7d:d0:1b:f5:be:8e:06:1f:b6:51:
89:4c:ef:ab:31:53:ca:b2:16:1c:da:a4:9e:ad:d4:de:cd:a3:
71:b5:81:e8:22:4b:0c:51:e2:9d:34:77:1a:d6:cb:0c:47:91:
52:bd:59:19:e9:e4:10:63:1c:db:5b:bf:bf:c1:98:b8:87:4e:
43:70:36:2e:6a:db:58:47:4d:69:40:5f:7a:1d:f0:c4:fa:ca:
78:16:0f:eb:2b:52:87:ab:e1:a3:ae:ca:1f:6e:f4:b2:d8:75:
72:8d:d7:4b:ce:2e:b4:2f:f1:f6:e8:64:c1:f2:68:79:be:51:
7d:76:32:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxA/XXQKp3jY8q4XQwyl4JMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNWUzMmZmMjA3YzMyZjVhNjk4OTRiYWVhYjU2YmY2MzNk
YmFhMWUwHhcNMjYwMjA5MDYwMTE4WhcNMjYwMjEwMDYwMTE4WjAzMTEwLwYDVQQD
EygwNzQ1YWI3NzBiODI4ODJjNGU0OTZiNGZkMGZkNWYyMGJhNGZiYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq247xnm1gVx1mGbGM6Dbvh9KkeBX
RBKXDcz5FYV8u4PP6J2SQlI7aafDUrV41wIuAHT5nvP8uGnUHAuYLWBSCRWhPYlB
Z4j5Mlnr5aN01pgBT2nGqA4Y58iRaU++hMSp/RQa0q0uSaTiEBdszm5jYMGuTP+M
JmuwgQRzPUSsZ+fleJxJZHH3B5B7RNLi/V2yOvqQL1L2WOGsNygwy6BSG5gHGLL3
0j3+xGThR7pB6AYqXFyKonNEfH/gpPSetYcQVa9m3R90cZI6XSWgqAXpVZDsN8hV
HTVefqyyUvkG6a2DNEGmSUXBZtB++eaKXaTcXT201kSmcJPG5nasHBLWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdFq3cLgogsTklrT9D9XyC6T7uLMB8GA1UdIwQY
MBaAFA5eMv8gfDL1ppiUuuq1a/Yz26oeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iZTlmMjktMDAwNi00NjVlLTk0Mzct
NGJhOGNiMTUwMWZkLzEvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iZTlmMjktMDAwNi00NjVlLTk0MzctNGJhOGNiMTUwMWZk
LzEvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsmr1gZE
GZbfypE/pPwk2btW4qO3rTBLG4simGNGXrH0PS9H0OqSx+5v9hv0lnVZzpx6iq3N
U1gdg5g7JRF5wYFL+KNM9Hti0jxWU4TBJ4m2Gt99cSe6xlCe4eTlYgVP2HxFGSXz
He9Rao0w/gEouAcNduMjUqEuyypJTpdCPA9TO3fahlB90Bv1vo4GH7ZRiUzvqzFT
yrIWHNqknq3U3s2jcbWB6CJLDFHinTR3GtbLDEeRUr1ZGenkEGMc21u/v8GYuIdO
Q3A2LmrbWEdNaUBfeh3wxPrKeBYP6ytSh6vho67KH270sth1co3XS84utC/x9uhk
wfJoeb5RfXYyAQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:29 2026 by rpki-client