This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: MV/IpfI9jIIHbR8KSFqNqBL7iyOQxPSyj01efERFlog=
Subject key identifier: CA:88:97:DD:0F:92:15:ED:62:0F:E7:7F:AD:9E:1A:3A:FA:47:0E:4F
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 019C41A260822E141751F6D18097C5C0FE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 0723
Signing time: Mon 09 Feb 2026 09:01:26 +0000
Manifest this update: Mon 09 Feb 2026 09:01:26 +0000
Manifest next update: Tue 10 Feb 2026 09:01:26 +0000
Files and hashes: 1: 5xxcAEo_4vIQvQTZ11nCDFMgZo4.roa (hash: N8rxJgsy2l36Fd1o/jwhRwE3qaDQpQB4/meaBlVTHWs=)
2: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: kFX7/otQNyGMUaVSsqXm0CaZXcdPvESwKfpvn0HlI3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:60:82:2e:14:17:51:f6:d1:80:97:c5:c0:fe:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Feb 9 09:01:26 2026 GMT
Not After : Feb 10 09:01:26 2026 GMT
Subject: CN=ca8897dd0f9215ed620fe77fad9e1a3afa470e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:8e:1c:96:0f:1c:9a:a2:3a:bc:63:c6:6c:
b0:f3:51:e0:6e:77:7a:34:53:7c:04:56:2c:81:b2:
99:d7:e6:12:f8:ad:40:ee:d9:37:67:f0:31:bd:d8:
e9:f1:20:36:b3:37:17:58:57:a0:09:6e:53:1a:fd:
2b:d8:0c:f7:d1:84:88:78:84:19:20:53:6d:e7:f2:
c5:57:3c:e5:1e:1d:67:bd:0f:6f:94:9d:06:9b:cd:
64:4f:c1:92:01:ad:70:ac:7b:19:7d:9f:fa:93:9f:
c5:58:65:75:4b:cb:64:65:be:ea:48:5c:8e:0b:1a:
c5:21:cc:01:27:6b:6b:4e:63:0c:c9:c8:73:95:7d:
6d:ca:52:70:56:f5:e1:17:c4:bc:ad:ad:52:e1:7f:
80:62:9d:5e:3b:08:7d:13:24:58:4d:ba:0f:cf:65:
a9:b3:3c:9f:b2:93:69:77:57:10:cd:7d:5a:e8:ef:
5d:f0:f1:15:e2:34:2f:7a:8e:b0:6d:d5:be:60:7c:
db:6e:e9:25:95:9a:d8:86:37:07:18:83:c3:81:31:
ce:44:93:8d:f6:24:5b:2d:d9:d3:1f:6f:15:26:07:
65:81:ce:4e:49:f1:81:c1:99:b4:46:33:7f:1a:34:
93:f4:01:86:f2:6f:19:0b:3a:73:94:1c:c4:21:40:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:88:97:DD:0F:92:15:ED:62:0F:E7:7F:AD:9E:1A:3A:FA:47:0E:4F
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:40:c5:cf:66:7b:a2:26:1c:c3:d1:90:38:a5:9f:47:5c:dd:
5c:86:e4:8d:43:ee:f9:5a:ae:29:69:59:c2:92:66:52:f7:99:
9e:c0:71:ba:1f:ef:25:66:5e:8a:d5:ea:a2:2f:7f:e9:84:4f:
ac:c8:18:f1:31:aa:42:71:05:fb:23:05:b8:a7:15:e4:1d:99:
53:a9:fa:1c:61:b6:67:2c:e9:7d:01:fd:1a:21:cb:54:16:61:
68:0f:67:db:aa:ea:95:6b:09:1c:96:36:77:39:46:19:d5:09:
35:85:59:96:0c:64:e3:14:75:0c:53:37:ae:58:a0:e4:9d:06:
e7:ec:29:2f:ce:79:ea:87:2a:f1:c8:59:d1:c3:95:d9:f2:59:
86:81:d5:19:aa:24:e7:9d:ff:b7:94:e2:ea:e9:7e:b2:4f:d6:
73:26:88:10:bc:58:bc:c6:c7:56:39:04:e1:56:4e:6b:4a:af:
85:23:dc:39:80:cb:0d:f9:84:d8:9e:90:f6:f5:70:ad:bc:dd:
21:a6:15:3f:5c:97:c7:9d:41:67:a8:2c:1c:61:cf:69:6a:22:
db:fb:33:04:18:93:62:4f:88:4a:23:99:36:42:93:68:27:4e:
ec:a8:e3:8d:f9:a0:1e:bb:f8:10:b0:31:87:3d:d6:cb:d9:ee:
92:f5:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:53 2026 by rpki-client