This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: VTrkzQojvMEisB3X+6WpRmF8tlKn+0OUnFlmNOtBuzo=
Subject key identifier: 4B:99:0B:BF:00:84:F6:C1:FB:1C:3E:0A:5C:D3:54:09:22:E6:A1:E7
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 019C446C79907E3865E62403EAEBA7E59FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 0A75
Signing time: Mon 09 Feb 2026 22:01:25 +0000
Manifest this update: Mon 09 Feb 2026 22:01:25 +0000
Manifest next update: Tue 10 Feb 2026 22:01:25 +0000
Files and hashes: 1: SyjKeUnbRSDs4kNGNlsLLfS--v4.roa (hash: FpkjhgAtv2x7Z5TEduGx1C16Z0THVbd0mVvuXtouz6k=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: WmHyBznmpXGnqKfHfkOpeskTaMnAMGflvlfLw912Pyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:79:90:7e:38:65:e6:24:03:ea:eb:a7:e5:9f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Feb 9 22:01:25 2026 GMT
Not After : Feb 10 22:01:25 2026 GMT
Subject: CN=4b990bbf0084f6c1fb1c3e0a5cd3540922e6a1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:1a:0e:a9:2f:80:55:e8:a7:0b:b6:a1:9f:
b0:a8:3e:dc:ab:53:20:39:83:1d:65:14:a3:6b:e6:
b3:43:d8:fa:3a:08:47:5c:14:9d:b5:86:1f:d1:aa:
27:29:f1:41:7e:e3:27:21:37:8d:a2:3e:2a:d4:9d:
36:c7:c0:1a:8b:60:35:8f:71:ed:e0:21:87:6e:98:
8e:c0:d8:84:35:53:11:33:36:54:76:cf:40:ea:3b:
6d:dc:7d:c6:75:9e:05:80:af:0f:2a:87:5a:a2:40:
42:ca:21:94:8a:30:fa:0e:18:00:ed:bb:98:25:6c:
62:31:f8:fd:53:2c:bf:a0:d9:36:a8:50:7e:e1:24:
14:47:90:0c:64:93:0d:bb:68:8b:c4:70:83:d5:1b:
fa:c8:66:d2:20:6e:c0:b8:c1:b3:fe:e0:72:99:4e:
d3:32:31:c4:02:fb:42:b8:d5:b0:0f:ae:25:38:fa:
2f:5a:a1:05:34:d2:1f:5b:16:08:68:95:b3:7a:84:
6c:33:48:08:9c:79:61:7c:45:43:39:0f:b0:85:34:
cc:d6:7f:73:4d:97:21:ad:19:c7:38:f0:dc:30:19:
53:86:d0:57:6b:be:87:04:90:66:05:21:c4:60:c4:
1d:23:94:25:b4:51:c9:da:9e:4b:28:f6:53:4d:29:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:99:0B:BF:00:84:F6:C1:FB:1C:3E:0A:5C:D3:54:09:22:E6:A1:E7
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:82:90:41:f0:7b:ca:d9:c6:f8:d6:24:46:0a:a1:3c:33:4f:
7b:17:b3:ea:c8:75:fd:a8:59:35:8d:54:82:b2:99:d2:61:17:
84:e9:2b:20:87:5e:5c:bd:2e:a7:db:a4:b1:6d:77:5a:3c:bf:
ca:45:5b:22:53:46:94:fd:e7:c6:54:ae:da:cd:e0:3a:96:92:
d2:2a:c0:1d:22:1f:b6:29:b0:ce:28:e0:e6:cf:76:b6:9a:d0:
38:73:6f:c4:06:18:88:76:94:ce:d7:5f:7e:61:5f:3a:25:a0:
53:2a:28:e3:c9:68:c7:8b:4c:fa:64:fe:74:92:38:df:b8:51:
2e:c1:7b:22:c8:ca:2f:65:f5:17:3c:8c:6c:4c:45:2b:5c:d0:
f3:28:39:fe:67:5e:46:c6:66:09:eb:7d:35:87:cc:45:f4:da:
4d:22:c1:c7:d1:05:da:27:c3:05:98:0f:ef:69:61:65:d2:78:
23:1b:f7:fd:4d:c7:bd:77:ca:00:6b:3b:00:b3:16:14:eb:55:
9f:72:84:b5:62:51:78:1d:fb:02:af:93:24:92:81:07:e0:35:
e7:9f:95:d4:dc:f4:8d:b8:c7:48:62:be:80:45:ba:67:6f:d8:
d7:d4:59:9c:e4:a6:5f:3a:56:af:07:66:d4:fc:f0:52:44:4a:
f3:e5:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:30 2026 by rpki-client