This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
File: v38LbdEqN0vCk1y-nfYeCTtVvvY.mft (raw, json)
Hash identifier: tcH1x/Zed0bcwjIRf4kTNB7i364h6Fp9UFx3O5VSccc=
Subject key identifier: 81:D3:45:60:27:E3:CE:CB:5B:08:05:D4:7F:A4:10:90:71:9B:00:AB
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 019C41D838BE8897EC7869DF4B99E87DBBA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
Manifest number: 0C8C
Signing time: Mon 09 Feb 2026 10:00:15 +0000
Manifest this update: Mon 09 Feb 2026 10:00:15 +0000
Manifest next update: Tue 10 Feb 2026 10:00:15 +0000
Files and hashes: 1: RL6QZS_NULlTuG3Ek-MVDyUcgDo.roa (hash: IplpMakeUolRKqMcAngwQ0jbRvEmY2a6dczG9twnMGc=)
2: v38LbdEqN0vCk1y-nfYeCTtVvvY.crl (hash: ymIA+uwaxXkBRzmPneouH9u0dm818fCjg/3K1Kzdw6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:38:be:88:97:ec:78:69:df:4b:99:e8:7d:bb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Feb 9 10:00:15 2026 GMT
Not After : Feb 10 10:00:15 2026 GMT
Subject: CN=81d3456027e3cecb5b0805d47fa41090719b00ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:75:18:d3:26:de:03:64:b4:83:6b:0e:b4:
bf:9d:94:07:48:b5:c2:4d:a5:ec:b6:8c:4c:11:af:
63:43:6d:d9:67:06:b3:98:b9:b2:f9:a9:b6:8a:50:
c1:64:3c:df:ba:e0:a6:39:55:6a:8f:19:f5:6e:dc:
77:a1:d3:08:f1:4d:27:7c:bf:1a:f6:f5:21:5e:f4:
58:3a:1c:fa:b7:2f:f8:13:e6:22:4a:9e:27:b4:05:
16:72:d8:8b:09:61:aa:94:bd:24:e1:50:d7:3d:28:
35:09:af:a7:40:ec:3a:49:12:6d:84:c1:87:16:1f:
8c:75:54:84:ac:09:73:83:d5:69:63:b1:39:16:7c:
27:1f:80:f3:bb:c6:e9:31:5c:4e:65:85:15:95:51:
bf:19:18:4b:6f:97:d8:8e:a1:74:cf:44:79:c9:9e:
ec:09:34:51:ed:69:2e:46:17:95:5f:57:3d:c6:3b:
78:aa:08:fd:a3:9f:76:cd:67:ff:d9:11:ff:dd:79:
91:53:33:46:00:41:af:03:ef:d2:6a:fb:69:e6:1e:
78:24:6d:7c:a7:72:9b:86:5c:2a:39:5d:13:18:16:
f6:f6:a4:88:ca:48:9a:2a:e3:e0:4b:87:37:97:a5:
8f:f9:19:fb:1e:92:e2:f1:10:3f:be:50:8c:58:72:
dc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D3:45:60:27:E3:CE:CB:5B:08:05:D4:7F:A4:10:90:71:9B:00:AB
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a2:5c:46:9c:2b:d9:31:72:3e:fc:e2:58:e8:a2:1d:e4:d0:
fe:f8:6a:51:b5:31:40:0c:13:5a:08:39:4d:1a:a5:cc:1c:18:
1d:85:01:84:81:86:64:f1:e7:72:d8:fa:4f:f0:7e:da:b3:d9:
43:d9:61:16:b3:f5:3d:77:02:c6:99:f1:2d:83:df:33:00:33:
ca:ec:5d:d1:56:54:6b:04:3d:3b:c7:d3:fb:05:5c:e4:6c:d6:
2e:93:6f:25:27:bb:15:d9:6b:60:b8:a0:e7:e6:54:9d:84:23:
0c:44:c0:ca:aa:42:36:2b:e8:c8:cb:98:46:56:6a:5d:de:b2:
0b:fd:93:40:9e:e3:98:c4:3f:f3:55:0b:7e:d0:06:51:f8:36:
02:4b:5a:fa:6a:68:dd:fa:29:ae:48:bc:e9:bc:f7:30:29:62:
f6:30:71:fb:67:66:29:d2:dd:4e:58:81:4b:88:26:1a:1f:b8:
fb:65:3a:66:74:62:6a:4f:ab:c1:28:bf:96:5d:d6:c6:5d:88:
d5:75:8f:6b:0f:13:e8:a3:36:b9:19:14:b2:64:74:e8:db:7a:
95:63:f4:38:25:6f:de:83:51:96:e1:9d:51:16:74:53:9b:58:
2a:55:7c:f2:47:a9:d5:95:d3:b1:25:75:d8:2e:6d:7a:f7:1c:
d8:0c:89:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2Di+iJfseGnfS5nofbunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmN2YwYjZkZDEyYTM3NGJjMjkzNWNiZTlkZjYxZTA5M2I1
NWJlZjYwHhcNMjYwMjA5MTAwMDE1WhcNMjYwMjEwMTAwMDE1WjAzMTEwLwYDVQQD
Eyg4MWQzNDU2MDI3ZTNjZWNiNWIwODA1ZDQ3ZmE0MTA5MDcxOWIwMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTF1GNMm3gNktINrDrS/nZQHSLXC
TaXstoxMEa9jQ23ZZwazmLmy+am2ilDBZDzfuuCmOVVqjxn1btx3odMI8U0nfL8a
9vUhXvRYOhz6ty/4E+YiSp4ntAUWctiLCWGqlL0k4VDXPSg1Ca+nQOw6SRJthMGH
Fh+MdVSErAlzg9VpY7E5FnwnH4Dzu8bpMVxOZYUVlVG/GRhLb5fYjqF0z0R5yZ7s
CTRR7WkuRheVX1c9xjt4qgj9o592zWf/2RH/3XmRUzNGAEGvA+/Savtp5h54JG18
p3KbhlwqOV0TGBb29qSIykiaKuPgS4c3l6WP+Rn7HpLi8RA/vlCMWHLcjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHTRWAn487LWwgF1H+kEJBxmwCrMB8GA1UdIwQY
MBaAFL9/C23RKjdLwpNcvp32Hgk7Vb72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODYzMTctOTVjNC00ZGM3LWEzMGIt
ZjdkMTEzMzlkYmFkLzEvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hODYzMTctOTVjNC00ZGM3LWEzMGItZjdkMTEzMzlkYmFk
LzEvdjM4TGJkRXFOMHZDazF5LW5mWWVDVHRWdnZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqJcRpwr
2TFyPvziWOiiHeTQ/vhqUbUxQAwTWgg5TRqlzBwYHYUBhIGGZPHnctj6T/B+2rPZ
Q9lhFrP1PXcCxpnxLYPfMwAzyuxd0VZUawQ9O8fT+wVc5GzWLpNvJSe7FdlrYLig
5+ZUnYQjDETAyqpCNivoyMuYRlZqXd6yC/2TQJ7jmMQ/81ULftAGUfg2Akta+mpo
3foprki86bz3MCli9jBx+2dmKdLdTliBS4gmGh+4+2U6ZnRiak+rwSi/ll3Wxl2I
1XWPaw8T6KM2uRkUsmR06Nt6lWP0OCVv3oNRluGdURZ0U5tYKlV88kep1ZXTsSV1
2C5tevcc2AyJTA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:15 2026 by rpki-client