This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: MU/4/F3lUnSEEGDREiNW7+pcvybpqN5FM2J5Y9/pmx8=
Subject key identifier: BF:43:BC:C8:F6:27:8E:D5:C4:9C:BF:BD:5B:E1:E0:65:A9:C9:2E:8A
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 019C4210082E4C354F687BA8A518E37A7C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 13BC
Signing time: Mon 09 Feb 2026 11:01:12 +0000
Manifest this update: Mon 09 Feb 2026 11:01:12 +0000
Manifest next update: Tue 10 Feb 2026 11:01:12 +0000
Files and hashes: 1: 2dwCjqUUqCKWVJ6DvVzwdYlDvXQ.roa (hash: DPrgb6Kgdw0KIjv41bfjhUKWYAfrl79h2DWiUA8CcIQ=)
2: IMFLS8lmXO1X5kPh5brIEnkKfS4.roa (hash: w30MlBbSWaBo/k7+866HLmrY83fawU5Z9usPbYOh250=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: cxRSl8OEhCpMZjbLdotXH371NgGhOyZUjO04bkSYQKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:08:2e:4c:35:4f:68:7b:a8:a5:18:e3:7a:7c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Feb 9 11:01:12 2026 GMT
Not After : Feb 10 11:01:12 2026 GMT
Subject: CN=bf43bcc8f6278ed5c49cbfbd5be1e065a9c92e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:21:49:d6:33:49:57:cf:76:f2:4e:1f:7c:
73:1b:9c:21:2f:86:f8:d6:42:a3:5e:b8:86:b8:c8:
85:73:8d:8c:20:b2:4f:ed:5c:a0:7d:bd:cf:4b:b9:
c2:22:80:51:05:55:1f:5a:27:22:31:c2:26:d1:9e:
7c:0f:6d:ac:47:3a:eb:bc:a1:3f:6d:b9:26:6e:07:
fb:8c:aa:d8:41:0c:01:24:13:a7:93:c5:bc:34:65:
f2:d8:1f:81:da:03:0f:8b:bf:21:27:a8:14:6b:3f:
c0:7b:43:12:fc:79:40:35:57:74:c7:5b:52:6e:d6:
e7:c2:4f:cc:66:1f:84:35:bc:86:04:21:25:b2:30:
77:dd:71:21:77:03:14:e8:b4:9a:28:c1:5c:8f:c8:
a1:9c:6e:58:21:98:5c:e4:21:7f:47:aa:13:d7:18:
64:4f:21:47:47:f0:b9:6b:07:b3:b8:04:5e:5a:9f:
6e:67:a3:20:7b:b2:bf:dd:f8:c2:63:57:c9:d5:eb:
5b:68:c7:43:e2:16:4d:46:db:c3:cb:43:e0:1f:0f:
3d:11:fd:52:2c:d9:8d:f8:78:92:b0:9f:39:7b:e5:
1a:d6:3d:37:d3:19:48:0c:46:72:f3:bd:cb:e8:32:
78:54:6d:7b:92:29:bd:62:75:78:ab:84:c4:a0:9d:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:43:BC:C8:F6:27:8E:D5:C4:9C:BF:BD:5B:E1:E0:65:A9:C9:2E:8A
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9c:96:c4:00:54:9d:8b:34:06:cb:5d:22:80:11:4f:d7:db:
9b:6e:32:58:94:b9:5d:eb:5b:9c:42:30:de:3c:b6:31:52:03:
17:d3:69:2e:15:0f:b8:6e:bb:38:7e:e7:a4:d0:30:85:e0:0e:
3d:f0:bf:f3:7d:cb:62:eb:13:f1:dc:0b:4e:39:76:ea:60:b2:
9e:e2:74:52:3b:3e:0b:86:c6:d3:9d:72:dc:3f:88:ce:e1:df:
b7:1b:b6:37:11:1b:6f:0f:25:79:75:ce:2d:25:d9:40:2a:7a:
cb:f2:ae:9c:a6:04:f5:91:b9:06:43:dc:64:3b:d3:63:87:12:
86:e7:fe:cc:ca:09:3d:c0:14:e2:ab:27:bd:38:83:ae:5f:38:
fa:5a:ae:56:7a:49:e3:e4:78:30:27:38:6f:00:c6:37:45:e8:
43:dc:0f:e4:44:ba:a1:9e:de:29:c8:97:97:b1:ba:94:6d:0a:
8d:79:e8:6f:cf:ed:0c:ae:9e:45:4d:c1:af:ef:fb:66:3e:b5:
f3:37:ca:92:9f:9b:ad:6c:17:5d:7b:9c:87:d9:de:ae:60:1e:
be:b3:c0:93:55:46:9b:6e:98:09:ca:89:5c:de:1b:51:35:f5:
3a:24:9b:18:12:ca:d1:c7:7b:c9:c9:86:76:2a:90:93:fb:ed:
56:0e:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:28 2026 by rpki-client