This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
File: IsX-stJfrE3YuqT3HY3CJoGGoDk.mft (raw, json)
Hash identifier: SZ7RF2fy60tZraagyASDjaUfHuy087oxoYa/AxVKxOQ=
Subject key identifier: 4C:A5:7E:D6:10:C6:26:70:E5:EE:A8:38:1E:6D:1C:1F:64:7B:41:6F
Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
Certificate issuer: /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Certificate serial: 019C42EAE2F26125D006A3043560D5D13DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 15:00:15 +0000
Manifest this update: Mon 09 Feb 2026 15:00:15 +0000
Manifest next update: Tue 10 Feb 2026 15:00:15 +0000
Files and hashes: 1: 1AKA9ICtH2sefFDvLoJsK9ePE54.roa (hash: 4v9nHWweB0nvxv/LfJiO5A7Jex4IvVHgN7szjLpSCK4=)
2: IsX-stJfrE3YuqT3HY3CJoGGoDk.crl (hash: EW3e4vPi+f6JTFlQMJI7JMtDyjtgoT1zVUX8HTSI3qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:e2:f2:61:25:d0:06:a3:04:35:60:d5:d1:3d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Validity
Not Before: Feb 9 15:00:15 2026 GMT
Not After : Feb 10 15:00:15 2026 GMT
Subject: CN=4ca57ed610c62670e5eea8381e6d1c1f647b416f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:72:07:34:6a:93:7f:08:27:b9:95:59:c9:
5d:b3:f3:d2:66:31:6b:86:5f:66:7c:7c:91:66:af:
22:a8:6b:56:dd:a7:95:30:b6:50:46:1f:78:65:77:
cb:6e:31:31:55:ca:0c:ce:a1:38:99:27:3a:bb:e9:
15:09:a5:28:0c:f6:3c:a9:68:d4:bc:60:a9:0f:42:
dd:98:82:ec:d7:d0:15:79:dd:2d:51:ea:dd:1f:04:
87:d9:fd:dd:73:27:59:82:2a:07:52:ea:7a:92:39:
8e:2a:cc:38:a8:11:99:a4:55:21:e9:92:9d:05:78:
b1:ee:89:1f:ee:e9:31:a8:be:d1:db:0a:dd:dd:c2:
f5:1a:68:72:3d:cd:f6:54:75:9c:aa:a0:ea:0c:e6:
ed:20:aa:5f:e0:65:e9:65:e7:59:61:68:3e:69:74:
10:6a:f6:b1:87:96:8f:61:1f:03:b1:24:af:16:90:
d7:19:78:47:e9:cc:aa:c8:a0:8b:68:8d:b7:87:33:
2a:7e:fc:ae:42:da:be:ba:ce:d9:f0:8b:73:ad:d6:
37:5b:56:52:ff:e9:24:1e:81:b7:75:42:72:49:5a:
93:4b:a7:6d:ec:bb:cd:ed:05:c2:f8:00:33:37:ee:
74:3d:16:e2:ac:d5:cf:37:70:62:85:1b:86:cf:4b:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:7E:D6:10:C6:26:70:E5:EE:A8:38:1E:6D:1C:1F:64:7B:41:6F
X509v3 Authority Key Identifier:
keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:30:02:cd:18:c9:64:77:93:22:f3:56:e7:54:6d:dd:06:d4:
fe:4e:75:9a:6d:d6:8b:9d:e6:00:21:c8:04:6a:20:33:3e:7b:
db:22:2d:44:6f:42:b6:96:ce:b0:2c:09:30:ee:2a:0a:2a:f1:
08:05:cc:58:e8:8f:1f:b1:01:7b:bf:de:1c:b6:1c:22:2a:13:
95:7e:35:77:ec:f8:a7:a3:8d:d5:c1:5c:e9:5c:08:70:f5:c5:
93:e4:69:d0:77:54:10:1c:3b:00:69:1c:3d:9e:35:5c:c5:25:
9c:c3:f7:bf:72:ea:3c:62:0a:34:d5:0d:31:81:37:3a:27:60:
5b:b8:c0:98:f7:54:e5:21:82:44:96:37:6b:77:69:4a:fd:d3:
d2:6c:3b:bf:25:aa:7d:3f:23:b2:e7:13:7c:3d:ff:ba:dc:b4:
9f:0b:30:7f:ac:44:de:f5:2b:cd:5e:5c:fe:d8:1f:0a:6b:38:
8b:87:88:6b:29:9f:1c:3e:86:3f:cb:90:2d:08:fc:c7:91:9c:
17:78:57:88:ba:4a:c2:12:ed:d6:6a:24:b8:5c:a2:32:c6:48:
50:f2:55:01:9f:b9:46:bf:8e:d3:39:cb:ff:0f:08:bf:3a:d7:
86:7e:32:6f:a6:8c:4f:12:d8:57:b6:51:ba:e8:ca:81:5f:48:
85:b1:1f:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6uLyYSXQBqMENWDV0T2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzVmZWIyZDI1ZmFjNGRkOGJhYTRmNzFkOGRjMjI2ODE4
NmEwMzkwHhcNMjYwMjA5MTUwMDE1WhcNMjYwMjEwMTUwMDE1WjAzMTEwLwYDVQQD
Eyg0Y2E1N2VkNjEwYzYyNjcwZTVlZWE4MzgxZTZkMWMxZjY0N2I0MTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjetyBzRqk38IJ7mVWclds/PSZjFr
hl9mfHyRZq8iqGtW3aeVMLZQRh94ZXfLbjExVcoMzqE4mSc6u+kVCaUoDPY8qWjU
vGCpD0LdmILs19AVed0tUerdHwSH2f3dcydZgioHUup6kjmOKsw4qBGZpFUh6ZKd
BXix7okf7ukxqL7R2wrd3cL1GmhyPc32VHWcqqDqDObtIKpf4GXpZedZYWg+aXQQ
avaxh5aPYR8DsSSvFpDXGXhH6cyqyKCLaI23hzMqfvyuQtq+us7Z8ItzrdY3W1ZS
/+kkHoG3dUJySVqTS6dt7LvN7QXC+AAzN+50PRbirNXPN3BihRuGz0tbfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEylftYQxiZw5e6oOB5tHB9ke0FvMB8GA1UdIwQY
MBaAFCLF/rLSX6xN2Lqk9x2NwiaBhqA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kMjE2ZWQtOWE3Ni00YTkzLWI2YTkt
NDY4ZjQ5OGZhZjFjLzEvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kMjE2ZWQtOWE3Ni00YTkzLWI2YTktNDY4ZjQ5OGZhZjFj
LzEvSXNYLXN0SmZyRTNZdXFUM0hZM0NKb0dHb0RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzACzRjJ
ZHeTIvNW51Rt3QbU/k51mm3Wi53mACHIBGogMz572yItRG9CtpbOsCwJMO4qCirx
CAXMWOiPH7EBe7/eHLYcIioTlX41d+z4p6ON1cFc6VwIcPXFk+Rp0HdUEBw7AGkc
PZ41XMUlnMP3v3LqPGIKNNUNMYE3OidgW7jAmPdU5SGCRJY3a3dpSv3T0mw7vyWq
fT8jsucTfD3/uty0nwswf6xE3vUrzV5c/tgfCms4i4eIaymfHD6GP8uQLQj8x5Gc
F3hXiLpKwhLt1mokuFyiMsZIUPJVAZ+5Rr+O0znL/w8IvzrXhn4yb6aMTxLYV7ZR
uujKgV9IhbEfrA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:53:28 2026 by rpki-client