This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
File: ELZc9vpeH8roz4TJcB44vftjqrM.mft (raw, json)
Hash identifier: xfV67mx5WfJcv/zYOlozU8RGhfZSbkGFalCCLpn1inM=
Subject key identifier: A0:6A:AD:31:B3:DA:4E:0C:0B:F4:98:32:A5:A6:44:58:0A:2B:A6:1A
Authority key identifier: 10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
Certificate issuer: /CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Certificate serial: 019C427D894D806889D044A43A5B6FD92FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
Manifest number: 10BC
Signing time: Mon 09 Feb 2026 13:00:49 +0000
Manifest this update: Mon 09 Feb 2026 13:00:49 +0000
Manifest next update: Tue 10 Feb 2026 13:00:49 +0000
Files and hashes: 1: ELZc9vpeH8roz4TJcB44vftjqrM.crl (hash: cjn7NNFd3JWvH4ur8THZH7ttPTVU+uetseaifrV6H6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:89:4d:80:68:89:d0:44:a4:3a:5b:6f:d9:2f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Validity
Not Before: Feb 9 13:00:49 2026 GMT
Not After : Feb 10 13:00:49 2026 GMT
Subject: CN=a06aad31b3da4e0c0bf49832a5a644580a2ba61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:8c:d6:27:e2:9d:8f:78:64:34:e8:94:52:
35:73:95:77:3e:c9:98:8f:88:2a:72:bb:db:32:d8:
e6:c2:47:ea:4e:59:e9:7f:0a:d7:1c:ac:f7:f6:f5:
b2:9f:02:f0:45:47:8e:7a:0d:06:2d:d7:24:89:b7:
31:3d:a1:f8:75:67:f7:e9:65:13:44:42:4b:4a:9c:
9d:3c:0f:0c:4b:25:28:42:7d:a3:69:a3:6a:24:3d:
9f:ff:d5:a1:a5:ea:22:f5:68:eb:cf:06:53:e9:20:
6b:3b:e4:4c:57:5b:83:48:44:ba:1c:e6:dc:c5:c0:
56:71:83:db:59:7b:8f:10:21:90:23:05:85:d0:2a:
2e:23:4c:74:75:83:f4:a8:6e:15:82:4d:1a:5b:68:
a8:ce:a0:b6:33:5c:90:76:28:5a:7f:3b:d8:82:3b:
d6:12:31:5e:b3:80:eb:7c:c8:3d:b1:c0:f7:69:9e:
ed:a7:bb:da:7d:e4:f3:1b:eb:94:43:47:a5:d0:e1:
ce:8a:44:4b:fc:c1:15:36:e2:b0:6d:cc:f7:ce:e0:
b2:2d:e3:7a:90:11:cf:54:ec:57:8d:c6:84:52:72:
07:47:be:71:6b:84:00:19:a4:b3:4a:a3:09:a6:4b:
a4:e4:45:38:37:57:e4:69:b2:38:1b:6f:61:d5:28:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6A:AD:31:B3:DA:4E:0C:0B:F4:98:32:A5:A6:44:58:0A:2B:A6:1A
X509v3 Authority Key Identifier:
keyid:10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b8:af:d2:fb:e4:62:6a:a0:24:0e:a6:d1:f2:8f:c6:ac:97:
27:5c:c0:cd:42:16:6a:05:9d:23:64:06:26:ff:71:61:cc:22:
88:de:02:87:2f:d4:31:e6:80:d3:28:d9:f2:c7:61:19:21:6d:
c3:b2:94:c5:ce:c9:a7:df:d7:f7:c9:44:b8:96:93:1a:f8:8a:
f7:68:16:53:38:03:da:01:be:25:30:ea:d1:ba:d6:ec:d0:9a:
2a:b9:31:7f:a5:73:71:2c:d8:c9:11:a2:ee:f1:c5:c3:24:cc:
2c:c6:fe:0e:94:72:32:0c:e9:99:97:8c:c0:f9:43:b6:0a:aa:
5e:20:7e:2d:47:e4:cc:32:e9:5b:18:ca:22:3e:0e:5f:50:25:
14:5c:a8:e0:0f:82:16:d1:da:7f:ca:45:ac:08:24:a6:fc:36:
a1:c8:c6:a0:5d:ed:56:5a:58:e6:88:32:ed:86:c9:9a:c8:5a:
86:ce:77:2f:08:2b:69:ce:8a:83:88:07:66:df:af:14:84:6c:
9e:f5:09:44:77:16:2b:24:d3:01:bb:b7:f2:8b:9e:1b:3c:8e:
58:96:10:be:8d:9f:de:75:5a:f9:0f:d2:c2:9f:d7:0d:fc:ed:
e6:b0:da:81:5c:64:94:57:e2:eb:fc:ca:82:ab:94:55:fd:7a:
4e:13:4f:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfYlNgGiJ0ESkOltv2S+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYjY1Y2Y2ZmE1ZTFmY2FlOGNmODRjOTcwMWUzOGJkZmI2
M2FhYjMwHhcNMjYwMjA5MTMwMDQ5WhcNMjYwMjEwMTMwMDQ5WjAzMTEwLwYDVQQD
EyhhMDZhYWQzMWIzZGE0ZTBjMGJmNDk4MzJhNWE2NDQ1ODBhMmJhNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrmM1ifinY94ZDTolFI1c5V3PsmY
j4gqcrvbMtjmwkfqTlnpfwrXHKz39vWynwLwRUeOeg0GLdckibcxPaH4dWf36WUT
REJLSpydPA8MSyUoQn2jaaNqJD2f/9Whpeoi9WjrzwZT6SBrO+RMV1uDSES6HObc
xcBWcYPbWXuPECGQIwWF0CouI0x0dYP0qG4Vgk0aW2iozqC2M1yQdihafzvYgjvW
EjFes4DrfMg9scD3aZ7tp7vafeTzG+uUQ0el0OHOikRL/MEVNuKwbcz3zuCyLeN6
kBHPVOxXjcaEUnIHR75xa4QAGaSzSqMJpkuk5EU4N1fkabI4G29h1ShSXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBqrTGz2k4MC/SYMqWmRFgKK6YaMB8GA1UdIwQY
MBaAFBC2XPb6Xh/K6M+EyXAeOL37Y6qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84MDkwYzItODE4MC00ZjNmLTgxNDIt
YTIzODU1ODcyYjg2LzEvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84MDkwYzItODE4MC00ZjNmLTgxNDItYTIzODU1ODcyYjg2
LzEvRUxaYzl2cGVIOHJvejRUSmNCNDR2ZnRqcXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLiv0vvk
YmqgJA6m0fKPxqyXJ1zAzUIWagWdI2QGJv9xYcwiiN4Chy/UMeaA0yjZ8sdhGSFt
w7KUxc7Jp9/X98lEuJaTGviK92gWUzgD2gG+JTDq0brW7NCaKrkxf6VzcSzYyRGi
7vHFwyTMLMb+DpRyMgzpmZeMwPlDtgqqXiB+LUfkzDLpWxjKIj4OX1AlFFyo4A+C
FtHaf8pFrAgkpvw2ocjGoF3tVlpY5ogy7YbJmshahs53Lwgrac6Kg4gHZt+vFIRs
nvUJRHcWKyTTAbu38oueGzyOWJYQvo2f3nVa+Q/Swp/XDfzt5rDagVxklFfi6/zK
gquUVf16ThNPKw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:40 2026 by rpki-client