This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: Du8Ffn8XTcMA767CQ/YQQ+9tMCxr37G8IIOnY0zk0rY=
Subject key identifier: E7:03:3C:4D:1B:C8:3C:88:27:3A:79:CF:39:EF:A3:22:27:49:A2:24
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 019C427D1A0B7CABEE934D9273ACA9CEF92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 17A4
Signing time: Mon 09 Feb 2026 13:00:20 +0000
Manifest this update: Mon 09 Feb 2026 13:00:20 +0000
Manifest next update: Tue 10 Feb 2026 13:00:20 +0000
Files and hashes: 1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: QRz7dzMsSjoMWE5iPmDyNXn5DO89S3FmIi/tkYnYJhY=)
4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:1a:0b:7c:ab:ee:93:4d:92:73:ac:a9:ce:f9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Feb 9 13:00:20 2026 GMT
Not After : Feb 10 13:00:20 2026 GMT
Subject: CN=e7033c4d1bc83c88273a79cf39efa3222749a224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:5f:11:75:2a:24:4d:75:3b:a7:e3:da:08:
0a:a7:bc:1b:56:18:bb:fc:4b:05:f6:c6:70:cc:95:
aa:bb:e1:b1:a2:34:dd:94:00:e5:98:89:d1:b0:74:
2b:ca:87:77:fe:66:5f:1c:e6:83:3e:f1:6e:6c:74:
ff:88:9b:5a:9f:38:43:c2:26:52:29:35:df:a1:67:
a4:b5:84:85:49:0b:c5:f1:40:50:4f:f5:6e:36:01:
30:ed:a3:49:15:07:fe:67:57:15:f6:7e:20:38:61:
b7:2a:e2:31:b0:41:65:f5:6c:83:e7:97:2c:e5:23:
33:27:e1:20:51:bd:d2:fa:5b:51:5d:e4:73:11:88:
05:01:70:a7:fe:2e:a4:f1:6b:61:a6:86:b3:5e:b9:
52:34:02:13:27:79:4a:3e:a7:1d:69:68:d0:8c:31:
49:2a:c0:fb:7d:a6:7f:eb:e5:ea:55:02:98:47:5f:
ab:ab:ab:87:8f:7e:e8:c0:5f:16:3b:c4:e1:af:70:
f3:d9:82:f2:9d:01:59:80:f2:3f:28:56:ec:8c:7d:
e5:69:f8:0b:e1:e7:15:71:14:69:3a:35:17:44:c6:
88:a3:18:ed:cd:6b:9b:af:9d:9d:05:fc:e1:77:83:
26:0e:e1:44:c1:94:bb:87:1f:ec:48:dc:81:2b:ee:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:3C:4D:1B:C8:3C:88:27:3A:79:CF:39:EF:A3:22:27:49:A2:24
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5b:c9:a3:b4:dc:8c:99:17:84:9a:bb:68:bd:e6:95:0a:d0:
a4:84:d1:14:11:25:45:9c:3a:be:48:ac:00:e1:f9:cc:ec:48:
44:b6:a8:ff:33:51:96:64:53:7c:63:ed:33:1a:12:8d:00:f7:
d7:94:c4:d8:5e:9a:03:91:da:bf:94:6a:6f:be:c8:fe:c6:98:
87:ad:91:ed:12:18:69:9d:8d:d9:07:27:17:e2:ad:79:89:4e:
2f:c0:ac:b7:06:e1:40:39:83:64:d6:e2:cb:2f:5f:e4:13:c9:
c1:9e:a3:34:ff:00:91:01:4a:fb:e2:39:9c:b6:9a:e1:18:2e:
7a:ea:72:21:73:d1:70:fd:21:d1:e0:7e:25:5a:fc:c0:5d:e9:
70:76:43:3a:48:8a:0a:35:d3:9c:3b:e3:3a:cc:5a:6d:2d:a8:
61:44:d3:9d:31:9c:eb:4d:40:d6:a9:23:46:52:94:c3:2f:d8:
71:ec:60:d3:ee:40:c7:55:0e:dc:fc:3d:b8:e4:8c:16:35:da:
c2:48:db:06:f3:14:ba:ad:34:f0:ff:35:f4:80:4f:ab:64:66:
bf:18:7a:ad:2c:83:32:6f:66:9d:42:3a:ad:16:69:10:e6:47:
75:f5:e5:fa:52:3c:6a:81:c0:1b:6c:ba:04:e3:e6:3b:70:a4:
6a:17:b8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:55:03 2026 by rpki-client