This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: R5ALjdhKejdWZoHLcHKREWcRWrDp6RpPTAm4sLkJzhc=
Subject key identifier: 32:7B:0F:EE:23:E1:15:0A:5A:2D:B7:CB:DC:12:EB:51:65:16:03:B0
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019C41D85C0C183F305D515D8B03564A6BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 10:00:24 +0000
Manifest this update: Mon 09 Feb 2026 10:00:24 +0000
Manifest next update: Tue 10 Feb 2026 10:00:24 +0000
Files and hashes: 1: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (hash: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: hYgRHks8Bc3rUoFUb5NNws+My1lISoZRFLx/3pfcgHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:5c:0c:18:3f:30:5d:51:5d:8b:03:56:4a:6b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Feb 9 10:00:24 2026 GMT
Not After : Feb 10 10:00:24 2026 GMT
Subject: CN=327b0fee23e1150a5a2db7cbdc12eb51651603b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:a6:c6:8e:86:93:c1:07:69:77:21:78:58:
ef:7f:57:35:d5:24:db:07:8a:8d:18:4e:88:de:aa:
b3:ba:b8:87:b9:1f:1d:09:1c:fb:9b:d2:1a:e8:69:
ad:9f:d6:11:0d:87:4e:6e:bf:1a:48:2d:db:4a:5b:
48:cb:67:16:0a:d7:40:10:8f:cb:6c:2d:de:ae:7d:
82:b2:8f:41:e4:0b:c2:2b:ad:29:81:93:77:ba:b4:
0e:c7:2a:e9:5c:6b:44:32:0b:a2:f2:9d:cb:2b:c3:
93:3d:d7:1d:c0:78:83:05:3e:bb:a6:6b:f8:f0:1e:
8c:e8:92:c8:1c:12:65:9e:62:b6:ed:1d:f4:23:3f:
9d:b8:92:19:2a:52:ad:9f:80:a2:77:97:09:37:06:
5e:7d:98:b1:f5:4f:7c:1d:8f:af:6b:f7:03:0d:ea:
b9:0e:86:41:a9:90:33:62:17:6e:e1:03:7c:6a:bc:
c2:d6:26:a7:6e:9f:2c:2f:a8:0f:ec:ea:8a:73:39:
50:a8:b2:e4:41:9c:c3:83:03:ba:b2:d4:89:e9:5a:
28:e1:f4:9c:a3:74:2b:4c:bc:c2:77:ed:c9:a8:0e:
24:a6:c1:8a:5d:8b:63:d8:e7:38:02:bd:69:16:a6:
2b:87:41:ea:6b:99:f9:2e:33:a4:a4:b2:02:83:75:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7B:0F:EE:23:E1:15:0A:5A:2D:B7:CB:DC:12:EB:51:65:16:03:B0
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7e:05:a8:5e:5e:d4:81:f2:95:64:00:40:63:36:51:10:f3:
6e:11:2c:84:f5:a7:ff:7a:e8:aa:20:0c:a9:1d:02:0a:88:f6:
cb:dd:99:de:a0:a0:bb:d4:9d:8e:14:8f:12:a9:c0:00:21:c8:
6a:61:44:98:2e:d0:92:71:17:2d:8d:c2:72:33:d7:59:98:0e:
fb:9a:bf:bb:80:27:64:70:e9:a6:99:dd:fd:91:42:fc:c7:4e:
c2:10:51:b4:7e:49:f8:3b:49:24:c0:61:47:86:60:40:18:6f:
90:6e:a8:fa:6c:1e:d7:e3:52:67:a7:8e:3e:f7:ce:83:7c:01:
0e:20:2f:8a:c9:34:c6:12:98:2c:8b:ca:a7:c9:1b:58:03:22:
bf:3b:5e:ab:bd:95:82:38:48:cb:2c:b6:5d:f9:35:b6:fc:3d:
63:84:e6:2f:d9:0c:17:b4:d0:ac:49:19:6c:10:df:89:fd:51:
7c:58:ba:d9:8c:b0:0c:99:93:6c:34:b6:6e:b3:35:55:18:2b:
16:00:6d:51:55:0d:01:ec:69:74:cd:6f:3c:66:c4:6d:f1:f0:
55:95:2c:89:4a:a3:b2:d8:47:e6:4d:51:d4:43:f3:99:09:5f:
77:19:31:b1:c0:3c:18:60:86:cf:f9:c1:36:21:b7:0a:d8:86:
a3:9e:3f:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2FwMGD8wXVFdiwNWSmu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4Y2QzZWJkNjVlZDNkOWFhZTA3OWEwZTI0ZDcxMzJkOWE3
MWFhYjgwHhcNMjYwMjA5MTAwMDI0WhcNMjYwMjEwMTAwMDI0WjAzMTEwLwYDVQQD
EygzMjdiMGZlZTIzZTExNTBhNWEyZGI3Y2JkYzEyZWI1MTY1MTYwM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UWmxo6Gk8EHaXcheFjvf1c11STb
B4qNGE6I3qqzuriHuR8dCRz7m9Ia6Gmtn9YRDYdObr8aSC3bSltIy2cWCtdAEI/L
bC3ern2Cso9B5AvCK60pgZN3urQOxyrpXGtEMgui8p3LK8OTPdcdwHiDBT67pmv4
8B6M6JLIHBJlnmK27R30Iz+duJIZKlKtn4Cid5cJNwZefZix9U98HY+va/cDDeq5
DoZBqZAzYhdu4QN8arzC1ianbp8sL6gP7OqKczlQqLLkQZzDgwO6stSJ6Voo4fSc
o3QrTLzCd+3JqA4kpsGKXYtj2Oc4Ar1pFqYrh0Hqa5n5LjOkpLICg3XB6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ7D+4j4RUKWi23y9wS61FlFgOwMB8GA1UdIwQY
MBaAFJjNPr1l7T2argeaDiTXEy2acaq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUt
ZjM3NzA1MzYxY2Y4LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUtZjM3NzA1MzYxY2Y4
LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHH4FqF5e
1IHylWQAQGM2URDzbhEshPWn/3roqiAMqR0CCoj2y92Z3qCgu9SdjhSPEqnAACHI
amFEmC7QknEXLY3CcjPXWZgO+5q/u4AnZHDpppnd/ZFC/MdOwhBRtH5J+DtJJMBh
R4ZgQBhvkG6o+mwe1+NSZ6eOPvfOg3wBDiAvisk0xhKYLIvKp8kbWAMivzteq72V
gjhIyyy2Xfk1tvw9Y4TmL9kMF7TQrEkZbBDfif1RfFi62YywDJmTbDS2brM1VRgr
FgBtUVUNAexpdM1vPGbEbfHwVZUsiUqjsthH5k1R1EPzmQlfdxkxscA8GGCGz/nB
NiG3CtiGo54/Gw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:01:25 2026 by rpki-client