This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json)
Hash identifier: 200WR4dHGIAuYxjJIgOX3ehSLvvjxo83wM2FrmO0UvE=
Subject key identifier: 2F:E7:D8:E5:4A:39:45:00:B1:9B:60:43:2A:02:AC:D4:70:58:CD:ED
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 019C1B70768F3D0388458FEAC10A3CB7EDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
Manifest number: 180D
Signing time: Sun 01 Feb 2026 23:01:20 +0000
Manifest this update: Sun 01 Feb 2026 23:01:20 +0000
Manifest next update: Mon 02 Feb 2026 23:01:20 +0000
Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=)
2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=)
3: 9vuOuOvj62P021fXQQxf0hIL-7Y.asa (hash: IV14GyGa+T6PyA00vxABTsOZmDpbofMON8dQI+vejQo=)
4: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=)
5: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 4lyewEGwFqxClAm5axhsjG39+JakbleqeA6VR60WItg=)
6: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=)
7: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=)
8: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=)
9: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=)
10: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=)
11: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=)
12: uLk-SOdg3NaZVxDw7uzOJ2cDto0.roa (hash: WMGu6CGGF8Zc3rzf7uT2wsSrHABykv7oyw0K24uqKAU=)
13: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:70:76:8f:3d:03:88:45:8f:ea:c1:0a:3c:b7:ed:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Feb 1 23:01:20 2026 GMT
Not After : Feb 2 23:01:20 2026 GMT
Subject: CN=2fe7d8e54a394500b19b60432a02acd47058cded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:4b:1a:21:6e:10:3f:f6:4c:bd:15:3b:e9:
a3:d1:2b:bb:7f:6c:9d:85:5e:fb:36:2f:7b:54:39:
fb:31:19:08:9b:5e:40:9c:61:cf:fe:ec:7a:47:40:
be:87:cb:f2:34:e3:aa:aa:7d:45:b3:62:c4:92:92:
52:74:23:26:28:43:2b:0d:3e:4c:3e:31:76:f3:c7:
9f:38:ba:d2:42:ba:56:e4:5b:09:99:bc:b9:ce:b7:
b7:c2:ed:2e:14:e4:7c:49:45:fc:58:b3:5d:0f:96:
79:a5:c3:33:57:5d:be:7e:fd:cc:a2:0b:48:3c:9b:
b7:24:e3:12:cc:08:dc:66:45:4a:36:81:f4:68:d8:
5e:ef:27:9c:ef:31:76:f3:cb:e8:01:42:5f:0a:c3:
c5:a0:5c:89:0b:21:f5:45:71:74:81:72:c1:fa:42:
9e:b4:f2:50:c3:70:99:cb:6e:78:3c:aa:03:ae:69:
95:b2:36:8c:10:08:7e:2e:4a:d5:d8:f9:55:46:05:
86:d4:ac:a9:2b:f6:18:45:b5:c4:2e:34:bd:d3:d9:
fd:99:f2:24:a8:33:7e:03:65:d2:40:8d:58:8b:62:
4c:75:ff:af:25:33:14:b8:20:a2:fb:4a:4a:96:6d:
74:1c:4d:38:ef:a9:2c:67:73:f8:88:97:9b:df:fd:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E7:D8:E5:4A:39:45:00:B1:9B:60:43:2A:02:AC:D4:70:58:CD:ED
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7c:68:8e:0a:3a:4e:db:31:1d:b9:bf:73:ba:ff:f9:27:65:
20:1f:79:80:0f:2a:23:55:1e:46:a9:f0:f9:ab:ac:10:bb:80:
4d:a3:d0:fa:87:05:5b:8f:f0:1e:72:dd:4d:e4:a7:49:51:87:
32:d5:0c:07:25:e1:90:ac:db:42:97:90:2d:f9:b3:52:46:ca:
4e:c1:97:72:8e:b5:75:c3:77:2d:ee:09:cb:23:93:ab:e6:be:
8e:c4:00:02:bc:30:d4:d5:78:bb:75:e9:d5:ef:2d:30:5f:c9:
f1:eb:36:08:85:96:28:d5:bb:51:a7:c7:41:d6:45:a5:01:cd:
06:e8:b2:b4:27:20:3a:03:ea:0b:00:1c:5a:39:a6:3c:cd:de:
5c:c6:4f:7d:30:76:a6:4b:ae:29:1b:da:21:d3:6b:2c:a8:ea:
72:81:6b:ec:48:32:bb:a5:7a:7e:0a:e0:70:00:61:20:91:81:
c6:8f:04:aa:dd:76:d2:91:0c:70:2d:86:f5:76:11:3f:a2:c6:
75:8f:6c:2e:53:d5:57:f0:a3:68:5d:5b:95:a5:36:a6:a7:94:
f6:a7:54:54:54:11:bc:d6:fe:c5:b9:8c:9a:ec:f0:7a:1d:7b:
9e:14:17:15:65:4a:e6:97:54:22:28:8f:03:51:b0:32:0d:3a:
51:60:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:16:03 2026 by rpki-client