This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: VTvuDzmDFbM/9vQHO3i8qrpelmCXf4nFJDANLF1HseU=
Subject key identifier: 44:EF:29:D8:78:B7:6F:36:93:78:86:0C:07:69:C0:0A:ED:56:47:BD
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 019C1BDE4A1C8B025D63E92348AB34E7F490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 1802
Signing time: Mon 02 Feb 2026 01:01:18 +0000
Manifest this update: Mon 02 Feb 2026 01:01:18 +0000
Manifest next update: Tue 03 Feb 2026 01:01:18 +0000
Files and hashes: 1: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
2: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=)
3: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=)
4: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: 1kG9Ajib4l4p3ATsmXE7WibXrI5rQc187Rhkteb1j8A=)
5: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
6: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
7: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
8: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:de:4a:1c:8b:02:5d:63:e9:23:48:ab:34:e7:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Feb 2 01:01:18 2026 GMT
Not After : Feb 3 01:01:18 2026 GMT
Subject: CN=44ef29d878b76f369378860c0769c00aed5647bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:61:d2:8d:6d:68:56:95:85:02:c5:54:a5:
c4:3f:5a:00:b4:3b:ae:ad:f3:54:ac:7f:7c:2f:38:
32:ff:f9:ac:0d:bd:fd:59:29:04:b2:13:7b:7b:5c:
1e:9d:2c:a9:cd:88:0d:33:e1:b5:95:4e:e1:87:53:
d6:51:e6:d9:88:41:00:eb:18:22:08:cb:ef:aa:26:
00:da:c6:f4:fd:3b:49:02:a1:c8:a8:9f:07:d0:b4:
1f:14:18:81:d5:21:0c:a2:b4:cc:d3:ff:84:a7:3d:
35:2b:9c:46:19:2e:a1:5d:6b:1e:65:58:d9:83:a5:
68:75:e6:95:ce:5b:da:ef:e1:fd:0d:05:f4:94:1a:
b8:d2:2b:bc:b0:fa:3b:dd:c9:fd:f4:c4:77:47:34:
3c:67:1d:30:ed:64:c2:0f:77:5f:cd:0e:8f:14:d1:
07:8e:0d:f7:dc:7e:1b:b8:50:78:6d:0c:e3:dd:40:
41:58:0c:ac:88:a4:25:dc:d1:c1:79:c2:13:9a:7f:
0c:ac:26:00:a1:86:da:2b:e3:f9:ad:9a:46:21:5e:
1c:db:9d:e9:49:60:f6:34:8e:12:8b:9e:c6:ed:9c:
26:5d:d0:1b:91:e8:f1:29:ff:42:d8:61:82:83:1d:
4d:66:88:92:56:c6:a2:00:ba:ab:b5:00:a0:66:15:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:29:D8:78:B7:6F:36:93:78:86:0C:07:69:C0:0A:ED:56:47:BD
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7d:3c:ed:e9:b0:eb:f3:ab:af:6d:41:b0:3e:50:c4:68:cb:
79:51:1c:a1:a1:20:ff:7e:1b:28:2c:04:ee:c1:9d:ef:34:1e:
3b:6c:c8:46:99:6c:a6:9f:b8:22:1d:25:4f:7e:64:45:30:54:
44:56:0a:d3:6c:6b:3b:b8:33:ad:f8:72:6d:1b:de:e5:85:00:
5e:b1:ff:52:69:5f:d8:a3:cf:dd:21:e3:1b:97:f5:b1:72:cf:
33:36:b4:87:83:1a:75:71:76:c7:14:3b:84:a2:76:ac:e6:9d:
89:23:93:5c:0c:8c:f6:57:06:91:4d:b3:39:89:d6:46:5e:00:
39:5f:1a:b7:14:d9:cb:3d:f1:18:ee:ea:00:3c:81:9f:83:5c:
3b:e1:94:97:57:77:ae:51:3c:a8:41:23:b4:1d:cc:8c:0c:59:
99:68:0f:16:2b:e8:fe:45:5f:d0:a0:9e:7c:c4:12:c9:f6:24:
1e:37:bc:35:a9:2f:27:97:80:b7:6a:cf:c5:80:64:1a:7f:a8:
ca:5f:21:d8:b3:45:0d:cc:ff:e3:2d:71:35:a7:c8:49:6d:14:
a7:51:95:a5:48:7a:7b:b1:e1:c4:1c:98:4c:c8:ab:d0:7f:b3:
c0:ca:20:52:02:d4:48:05:e5:ea:83:8e:fb:71:7d:b8:46:ae:
5f:d7:f4:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwb3kociwJdY+kjSKs05/SQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj
NDM4YWMwHhcNMjYwMjAyMDEwMTE4WhcNMjYwMjAzMDEwMTE4WjAzMTEwLwYDVQQD
Eyg0NGVmMjlkODc4Yjc2ZjM2OTM3ODg2MGMwNzY5YzAwYWVkNTY0N2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkVh0o1taFaVhQLFVKXEP1oAtDuu
rfNUrH98Lzgy//msDb39WSkEshN7e1wenSypzYgNM+G1lU7hh1PWUebZiEEA6xgi
CMvvqiYA2sb0/TtJAqHIqJ8H0LQfFBiB1SEMorTM0/+Epz01K5xGGS6hXWseZVjZ
g6VodeaVzlva7+H9DQX0lBq40iu8sPo73cn99MR3RzQ8Zx0w7WTCD3dfzQ6PFNEH
jg333H4buFB4bQzj3UBBWAysiKQl3NHBecITmn8MrCYAoYbaK+P5rZpGIV4c253p
SWD2NI4Si57G7ZwmXdAbkejxKf9C2GGCgx1NZoiSVsaiALqrtQCgZhWhnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETvKdh4t282k3iGDAdpwArtVke9MB8GA1UdIwQY
MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt
OTg3ZGE0MzkyMDU2LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2
LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgn087emw
6/Orr21BsD5QxGjLeVEcoaEg/34bKCwE7sGd7zQeO2zIRplspp+4Ih0lT35kRTBU
RFYK02xrO7gzrfhybRve5YUAXrH/Umlf2KPP3SHjG5f1sXLPMza0h4MadXF2xxQ7
hKJ2rOadiSOTXAyM9lcGkU2zOYnWRl4AOV8atxTZyz3xGO7qADyBn4NcO+GUl1d3
rlE8qEEjtB3MjAxZmWgPFivo/kVf0KCefMQSyfYkHje8NakvJ5eAt2rPxYBkGn+o
yl8h2LNFDcz/4y1xNafISW0Up1GVpUh6e7HhxByYTMir0H+zwMogUgLUSAXl6oOO
+3F9uEauX9f0mw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:13:45 2026 by rpki-client