This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
File: 02QfqO0c_D2qI6qvjDp2_oftW6s.mft (raw, json)
Hash identifier: lrneWlKiUHsPgO3weczdemkee7aXJqn790m87lNtm3o=
Subject key identifier: CF:E1:6B:D5:24:BF:22:47:45:0D:5B:AC:88:8B:6A:6F:01:A2:E9:C3
Authority key identifier: D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
Certificate issuer: /CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Certificate serial: 019C46239B690CF54E9666901314E2AC5D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
Manifest number: 0EE1
Signing time: Tue 10 Feb 2026 06:01:04 +0000
Manifest this update: Tue 10 Feb 2026 06:01:04 +0000
Manifest next update: Wed 11 Feb 2026 06:01:04 +0000
Files and hashes: 1: 02QfqO0c_D2qI6qvjDp2_oftW6s.crl (hash: 2PLDihT5vc9KJmB8FWbDDvP8NDuCSy+BcBXUFyO0Yd8=)
2: byVdI5-pp6NIJu3UrT-3MuGaeXY.roa (hash: l8DHq/5oUA3iWZHNp7UWg+LEjnOk5a1rdRkMplixMAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:23:9b:69:0c:f5:4e:96:66:90:13:14:e2:ac:5d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Validity
Not Before: Feb 10 06:01:04 2026 GMT
Not After : Feb 11 06:01:04 2026 GMT
Subject: CN=cfe16bd524bf2247450d5bac888b6a6f01a2e9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:bb:a3:2c:58:40:0f:45:01:14:78:b2:4f:
2a:1d:40:7b:4d:40:6f:d1:c0:c3:7b:08:14:5a:2a:
27:d3:3e:89:b9:7c:65:b4:d2:cf:47:34:b8:8f:be:
39:e1:3e:b5:1f:30:1f:a3:8f:c9:bd:f1:0a:12:60:
90:30:a6:a6:a7:0f:25:60:ae:b3:74:2e:99:02:d0:
e5:3b:45:fa:7c:68:94:5d:d9:dd:33:87:be:7d:88:
f7:ec:c7:c1:6b:7b:19:ef:92:ee:7f:91:6f:89:92:
27:0e:87:37:92:cf:4a:1e:3a:c6:98:7a:2b:43:a8:
a7:5d:f8:86:48:b7:85:ee:db:12:ae:35:78:43:85:
be:e2:e1:77:f2:9c:1d:1b:c5:cf:bf:c7:7f:81:a0:
8b:46:57:ec:e4:7c:00:70:d4:d5:79:c6:77:c6:af:
9b:ed:ca:a4:3d:82:45:a5:57:2f:b3:b0:63:7f:ae:
cd:ab:57:c4:d3:d1:fc:ed:8c:ce:c4:ef:9e:10:1a:
74:a6:6a:46:25:53:25:5d:70:3d:e4:a3:11:ee:38:
bf:aa:12:3a:8a:ef:69:b5:0d:ba:34:90:c6:15:aa:
ba:78:39:68:31:dd:28:b3:be:85:2b:1b:c4:c8:46:
bd:7d:1c:18:77:11:10:03:aa:cf:2c:a8:70:92:d9:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E1:6B:D5:24:BF:22:47:45:0D:5B:AC:88:8B:6A:6F:01:A2:E9:C3
X509v3 Authority Key Identifier:
keyid:D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c8:c8:d2:c8:7b:14:20:46:04:1b:b0:24:d2:fa:de:67:ea:
ea:e6:e4:a5:76:87:b3:2d:16:ee:bc:b9:82:9e:28:bc:01:99:
d3:8d:37:42:ef:d5:1a:c0:38:67:a3:d2:cc:c0:32:c1:db:4b:
c3:b1:d1:db:e5:aa:2d:b6:0b:00:37:6d:06:22:d4:d7:35:9f:
aa:6f:7e:53:74:4c:8a:7b:f3:08:98:ee:7d:f8:b6:6f:4d:cf:
50:b4:e3:89:a7:0b:cc:6c:e4:a8:43:1b:4b:eb:70:e4:de:7e:
0e:32:95:f9:ce:46:3a:7f:cc:41:c0:b9:8d:31:f5:57:0d:2a:
a7:07:34:bd:51:db:e5:2e:5e:9c:d7:dd:53:38:10:f4:11:2f:
2c:24:2a:7f:89:a6:29:be:c8:5d:eb:35:b2:2a:ab:f5:0f:7a:
25:ad:9d:63:ec:06:02:6f:25:2f:cb:54:e8:a8:12:db:b0:8f:
91:da:72:ee:ac:38:af:da:2a:f3:46:7f:0c:3e:52:72:21:fe:
cf:e2:c2:99:83:da:bb:be:68:c8:36:d5:02:77:d0:ca:b2:dd:
1d:68:4e:69:9a:c7:7a:7c:0b:a2:d6:c3:53:82:80:a3:03:a2:
5d:f7:0b:41:4e:45:97:33:2f:ea:c9:9c:e3:cd:c8:66:ab:db:
32:ca:94:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxGI5tpDPVOlmaQExTirF1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjQxZmE4ZWQxY2ZjM2RhYTIzYWFhZjhjM2E3NmZlODdl
ZDViYWIwHhcNMjYwMjEwMDYwMTA0WhcNMjYwMjExMDYwMTA0WjAzMTEwLwYDVQQD
EyhjZmUxNmJkNTI0YmYyMjQ3NDUwZDViYWM4ODhiNmE2ZjAxYTJlOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cm7oyxYQA9FARR4sk8qHUB7TUBv
0cDDewgUWion0z6JuXxltNLPRzS4j7454T61HzAfo4/JvfEKEmCQMKampw8lYK6z
dC6ZAtDlO0X6fGiUXdndM4e+fYj37MfBa3sZ75Luf5FviZInDoc3ks9KHjrGmHor
Q6inXfiGSLeF7tsSrjV4Q4W+4uF38pwdG8XPv8d/gaCLRlfs5HwAcNTVecZ3xq+b
7cqkPYJFpVcvs7Bjf67Nq1fE09H87YzOxO+eEBp0pmpGJVMlXXA95KMR7ji/qhI6
iu9ptQ26NJDGFaq6eDloMd0os76FKxvEyEa9fRwYdxEQA6rPLKhwktmhMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/ha9UkvyJHRQ1brIiLam8BounDMB8GA1UdIwQY
MBaAFNNkH6jtHPw9qiOqr4w6dv6H7VurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81OWQxMDktOGIwNi00ZGRkLWJjMjAt
OTk0MTk5MmM5YzI0LzEvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81OWQxMDktOGIwNi00ZGRkLWJjMjAtOTk0MTk5MmM5YzI0
LzEvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8jI0sh7
FCBGBBuwJNL63mfq6ubkpXaHsy0W7ry5gp4ovAGZ0403Qu/VGsA4Z6PSzMAywdtL
w7HR2+WqLbYLADdtBiLU1zWfqm9+U3RMinvzCJjuffi2b03PULTjiacLzGzkqEMb
S+tw5N5+DjKV+c5GOn/MQcC5jTH1Vw0qpwc0vVHb5S5enNfdUzgQ9BEvLCQqf4mm
Kb7IXes1siqr9Q96Ja2dY+wGAm8lL8tU6KgS27CPkdpy7qw4r9oq80Z/DD5SciH+
z+LCmYPau75oyDbVAnfQyrLdHWhOaZrHenwLotbDU4KAowOiXfcLQU5FlzMv6smc
483IZqvbMsqU7w==
-----END CERTIFICATE-----
Generated at Tue Feb 10 09:02:36 2026 by rpki-client