This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File: srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier: cjGA7ZbTx94QPEEzFJIBP/UBwBST6L8Ip32f/E5kbuQ=
Subject key identifier: 1E:B1:90:D7:F1:30:C8:3E:67:F9:2B:B9:5A:8F:21:BB:FF:73:91:2A
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial: 019C42EB5618A05DE3BBA5BC28AA55DEC978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number: 0805
Signing time: Mon 09 Feb 2026 15:00:45 +0000
Manifest this update: Mon 09 Feb 2026 15:00:45 +0000
Manifest next update: Tue 10 Feb 2026 15:00:45 +0000
Files and hashes: 1: Spy7lYm24U3zdnyHMnurxfa2T6k.roa (hash: JcDra+5Gb+YXgz7R5LBtufPmpQV8nA+XRnuojSfqw4U=)
2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: DnTvTLk4xBb970uBCXrK3qnP2/aiMkNqzRRZrZAKzp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:56:18:a0:5d:e3:bb:a5:bc:28:aa:55:de:c9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Validity
Not Before: Feb 9 15:00:45 2026 GMT
Not After : Feb 10 15:00:45 2026 GMT
Subject: CN=1eb190d7f130c83e67f92bb95a8f21bbff73912a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:ba:8b:f1:30:db:20:62:f0:20:13:b0:9c:
22:bd:b5:e9:ce:a5:9b:3a:e5:96:55:27:b8:b5:1e:
70:9b:b8:49:3d:00:a1:3f:83:60:a7:68:d9:a1:e9:
7b:e0:cb:6c:da:29:55:89:42:58:a5:55:52:40:c8:
c7:90:01:5a:7a:42:7f:a1:61:cd:7b:e4:71:aa:f2:
e8:57:8d:81:36:ff:fb:9a:5a:fd:c8:23:81:7f:fb:
8c:d8:d6:8f:ea:eb:b3:d2:7c:ed:a2:f8:9f:25:a7:
4c:7d:fd:d9:a3:ba:35:94:2a:35:aa:5c:cd:e5:c2:
a8:4e:50:c9:dc:b5:6b:29:14:8f:13:cc:f3:f9:35:
65:db:cd:12:79:f1:ff:17:52:45:39:fa:a1:ac:46:
ff:2a:1b:73:ff:d2:75:07:a8:11:5e:9b:d6:62:33:
82:c7:65:d8:b9:52:b9:0c:3d:fb:66:7e:80:63:61:
d3:06:a4:29:c4:3c:2b:b7:b6:d0:51:76:d6:8d:94:
5c:c9:a4:8c:61:ef:18:60:ac:36:19:0e:67:ab:64:
08:c7:60:8c:e7:d9:b7:d9:c1:4d:b1:90:0b:b4:17:
78:fb:96:49:13:7b:85:34:62:3a:7f:5c:7e:fb:68:
c3:52:63:5e:66:25:5f:ba:08:45:83:e3:d0:94:dc:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:90:D7:F1:30:C8:3E:67:F9:2B:B9:5A:8F:21:BB:FF:73:91:2A
X509v3 Authority Key Identifier:
keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d9:66:68:1a:69:1f:80:dc:3c:0f:07:a2:96:60:f2:8d:44:
78:1a:d9:f3:d1:b1:5b:0a:49:7b:ed:32:14:0c:2a:01:b5:45:
cd:be:db:fd:05:62:3a:af:a5:3a:00:ba:2a:90:1e:8f:a7:a5:
df:72:ea:99:75:45:94:01:a5:45:45:74:44:c7:e1:f8:2e:23:
db:95:34:79:d8:87:00:77:7a:bb:b8:d3:7e:18:e3:ef:fb:c4:
b0:c5:d2:63:cc:50:dc:64:d6:88:af:4c:0f:3b:72:9f:bf:fc:
10:4b:88:0e:86:eb:26:f4:08:67:be:c0:4d:d2:6c:50:44:2a:
59:ee:8e:be:0b:11:04:58:88:ce:6b:b0:1f:76:02:e7:df:a1:
78:e6:22:99:1b:10:45:11:de:f2:92:c7:ec:f1:c4:02:85:26:
be:67:f4:9d:36:bb:bb:f2:16:d4:48:53:0b:53:4f:5c:a1:17:
5f:4e:35:1a:62:aa:73:90:53:77:32:10:1a:6c:06:46:47:fb:
2e:cf:35:f1:41:c7:cc:7a:b1:57:3b:2d:3e:e2:27:f8:45:c4:
87:9f:96:66:5a:43:c4:ce:81:08:4b:39:e0:65:61:41:b1:b5:
5c:7f:a2:1c:7a:97:c5:52:6b:e8:ae:ac:b5:db:48:fb:7f:66:
2b:68:2c:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC61YYoF3ju6W8KKpV3sl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYjQxZDJmN2Q3ZDM4NTdlMDc1ZjJhNGYyZjlkM2UwNDRm
MmU1MzYwHhcNMjYwMjA5MTUwMDQ1WhcNMjYwMjEwMTUwMDQ1WjAzMTEwLwYDVQQD
EygxZWIxOTBkN2YxMzBjODNlNjdmOTJiYjk1YThmMjFiYmZmNzM5MTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX+6i/Ew2yBi8CATsJwivbXpzqWb
OuWWVSe4tR5wm7hJPQChP4Ngp2jZoel74Mts2ilViUJYpVVSQMjHkAFaekJ/oWHN
e+RxqvLoV42BNv/7mlr9yCOBf/uM2NaP6uuz0nztovifJadMff3Zo7o1lCo1qlzN
5cKoTlDJ3LVrKRSPE8zz+TVl280SefH/F1JFOfqhrEb/Khtz/9J1B6gRXpvWYjOC
x2XYuVK5DD37Zn6AY2HTBqQpxDwrt7bQUXbWjZRcyaSMYe8YYKw2GQ5nq2QIx2CM
59m32cFNsZALtBd4+5ZJE3uFNGI6f1x++2jDUmNeZiVfughFg+PQlNykCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6xkNfxMMg+Z/kruVqPIbv/c5EqMB8GA1UdIwQY
MBaAFLK0HS99fThX4HXypPL50+BE8uU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMt
YzllMjBjY2Q0NzZmLzEvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMtYzllMjBjY2Q0NzZm
LzEvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtlmaBpp
H4DcPA8HopZg8o1EeBrZ89GxWwpJe+0yFAwqAbVFzb7b/QViOq+lOgC6KpAej6el
33LqmXVFlAGlRUV0RMfh+C4j25U0ediHAHd6u7jTfhjj7/vEsMXSY8xQ3GTWiK9M
Dztyn7/8EEuIDobrJvQIZ77ATdJsUEQqWe6OvgsRBFiIzmuwH3YC59+heOYimRsQ
RRHe8pLH7PHEAoUmvmf0nTa7u/IW1EhTC1NPXKEXX041GmKqc5BTdzIQGmwGRkf7
Ls818UHHzHqxVzstPuIn+EXEh5+WZlpDxM6BCEs54GVhQbG1XH+iHHqXxVJr6K6s
tdtI+39mK2gsAA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:11 2026 by rpki-client