This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: 6f8YUKmjIRe3UWsP+R0+nu4BRLZgrJGeL6HvB7F6G/4=
Subject key identifier: 74:B8:FD:01:93:47:F5:F3:8E:55:41:CF:C8:6D:F7:25:A8:94:4F:E9
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 019C432293D3DFA2EAF3280EEF7E77654C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 07BC
Signing time: Mon 09 Feb 2026 16:01:05 +0000
Manifest this update: Mon 09 Feb 2026 16:01:05 +0000
Manifest next update: Tue 10 Feb 2026 16:01:05 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: +9kauVnVTgYjFkQZitPg/2XHx2LTNwejQ7DqZIgxm6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:93:d3:df:a2:ea:f3:28:0e:ef:7e:77:65:4c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Feb 9 16:01:05 2026 GMT
Not After : Feb 10 16:01:05 2026 GMT
Subject: CN=74b8fd019347f5f38e5541cfc86df725a8944fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:28:be:6e:65:45:ef:63:2c:ac:0d:51:b4:
bc:90:88:b9:a6:58:f9:cb:36:99:ab:81:48:6b:1e:
65:dc:c6:44:c7:4f:53:48:b5:73:0e:9e:0c:1e:c5:
e8:71:de:3d:04:c9:9d:12:46:3f:38:19:47:cb:05:
5e:f1:07:6f:69:fd:b1:d8:f7:fc:5c:0c:30:df:10:
7f:7d:c1:0f:07:1d:d6:fa:25:88:b5:0d:ac:b3:8d:
0a:93:ba:f5:29:72:43:1f:16:d1:92:a4:65:ca:38:
72:28:5d:2d:9c:d0:0a:63:b1:54:9c:cf:1d:52:ff:
0d:07:ae:5d:f6:03:60:4b:69:c5:aa:a5:fa:6b:34:
25:c0:5d:71:3e:ae:06:99:a7:22:28:57:ba:a3:bb:
02:40:a0:04:72:9b:a7:37:b9:34:57:c3:14:20:f5:
f7:12:de:be:55:99:e1:7b:61:82:ac:3b:3b:67:57:
0d:83:98:30:e1:69:d8:ab:0e:10:63:57:06:6b:5e:
ca:a6:ba:5d:d0:40:0b:f9:6d:b3:31:51:7f:6b:dd:
68:13:04:19:2e:27:5a:fc:7c:62:1f:08:95:d4:92:
fa:02:29:db:eb:9e:b9:fb:54:3c:5d:61:bf:29:c2:
cd:6f:e5:b9:99:27:7d:86:b7:8e:14:fc:5d:a6:08:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B8:FD:01:93:47:F5:F3:8E:55:41:CF:C8:6D:F7:25:A8:94:4F:E9
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:70:c5:20:7c:33:b8:ea:e4:31:d0:ef:f7:b6:9d:7d:ce:16:
98:b3:d6:5a:41:ac:fe:df:5f:db:e3:a4:f4:e9:1d:79:81:9f:
ce:26:fc:8f:5e:10:02:79:4b:91:de:c5:6f:88:fc:c6:e8:0a:
a8:6d:57:b5:52:81:ed:93:ac:fe:a9:a6:c5:83:10:f5:c0:ce:
4e:a3:8a:11:15:0c:17:06:81:1c:81:ff:e5:df:e8:68:f6:b4:
a2:2c:b1:8e:08:03:a7:b6:db:9e:e3:82:b0:11:61:53:f4:27:
c0:c0:de:ea:f7:47:6d:bf:c4:60:71:0c:8b:db:f7:e4:63:e4:
68:a8:52:bf:50:75:e4:d2:10:43:d5:c1:be:d4:97:e0:5c:d5:
74:dd:0d:78:b9:e9:0f:22:c6:1e:df:d8:fb:4a:38:a9:4e:74:
d5:a0:04:37:f8:fb:56:c9:fa:7d:a7:40:93:b8:8a:9d:52:63:
7f:58:f1:f1:a5:ef:7f:7f:69:eb:79:6a:ee:24:d0:3b:83:b8:
e2:db:62:15:e6:e3:5a:a6:78:d4:bb:28:dd:a8:c3:56:ac:c8:
6a:73:be:df:1d:bf:47:6d:39:5c:42:71:31:77:7c:4a:c5:75:
19:e0:fd:75:1a:b2:17:a7:2d:80:09:cb:c0:33:c2:eb:98:ad:
10:22:d6:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIpPT36Lq8ygO7353ZUwNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmMzM2Q1YmE1ODUyMzRjY2NlZjhhNTdhZDg2Y2ExZWFm
YzRhYTIwHhcNMjYwMjA5MTYwMTA1WhcNMjYwMjEwMTYwMTA1WjAzMTEwLwYDVQQD
Eyg3NGI4ZmQwMTkzNDdmNWYzOGU1NTQxY2ZjODZkZjcyNWE4OTQ0ZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qIovm5lRe9jLKwNUbS8kIi5plj5
yzaZq4FIax5l3MZEx09TSLVzDp4MHsXocd49BMmdEkY/OBlHywVe8Qdvaf2x2Pf8
XAww3xB/fcEPBx3W+iWItQ2ss40Kk7r1KXJDHxbRkqRlyjhyKF0tnNAKY7FUnM8d
Uv8NB65d9gNgS2nFqqX6azQlwF1xPq4GmaciKFe6o7sCQKAEcpunN7k0V8MUIPX3
Et6+VZnhe2GCrDs7Z1cNg5gw4WnYqw4QY1cGa17Kprpd0EAL+W2zMVF/a91oEwQZ
Lida/HxiHwiV1JL6Ainb6565+1Q8XWG/KcLNb+W5mSd9hreOFPxdpghhjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHS4/QGTR/XzjlVBz8ht9yWolE/pMB8GA1UdIwQY
MBaAFK68M9W6WFI0zM74pXrYbKHq/EqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmIt
OTZhNWI1ZGFkNjcxLzEvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmItOTZhNWI1ZGFkNjcx
LzEvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnDFIHwz
uOrkMdDv97adfc4WmLPWWkGs/t9f2+Ok9OkdeYGfzib8j14QAnlLkd7Fb4j8xugK
qG1XtVKB7ZOs/qmmxYMQ9cDOTqOKERUMFwaBHIH/5d/oaPa0oiyxjggDp7bbnuOC
sBFhU/QnwMDe6vdHbb/EYHEMi9v35GPkaKhSv1B15NIQQ9XBvtSX4FzVdN0NeLnp
DyLGHt/Y+0o4qU501aAEN/j7Vsn6fadAk7iKnVJjf1jx8aXvf39p63lq7iTQO4O4
4ttiFebjWqZ41Lso3ajDVqzIanO+3x2/R205XEJxMXd8SsV1GeD9dRqyF6ctgAnL
wDPC65itECLWnw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:25 2026 by rpki-client