This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
File: 5O8X9MtP6SrQU-7yXznWOuEgfdM.mft (raw, json)
Hash identifier: eh3HgNSa+6VpNAFJkttvbD8GgoxjRCuYJqsWN1LxmGw=
Subject key identifier: 31:CA:A6:6B:3C:43:25:82:8C:DB:F9:FE:FD:9F:29:86:3D:0B:67:FA
Authority key identifier: E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3
Certificate issuer: /CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
Certificate serial: 019C4133A1929D38C966248B595D68580EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
Manifest number: 0446
Signing time: Mon 09 Feb 2026 07:00:28 +0000
Manifest this update: Mon 09 Feb 2026 07:00:28 +0000
Manifest next update: Tue 10 Feb 2026 07:00:28 +0000
Files and hashes: 1: 5O8X9MtP6SrQU-7yXznWOuEgfdM.crl (hash: 3GGG5Eanm8Wdsan9q5dgSmKf3rf3SQSy3b2pGE9tdnQ=)
2: cBjJxakkyJzF0q-LCtB6-kdh34o.roa (hash: HB2nmxENxIBEcrL1Kfx6L8VUwos3oCy0KZ5RcYbIeJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:a1:92:9d:38:c9:66:24:8b:59:5d:68:58:0e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
Validity
Not Before: Feb 9 07:00:28 2026 GMT
Not After : Feb 10 07:00:28 2026 GMT
Subject: CN=31caa66b3c4325828cdbf9fefd9f29863d0b67fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:3d:29:4c:27:3f:33:54:ae:bb:a6:f0:7f:
1c:85:9c:82:de:cd:dc:55:d6:88:7e:f9:7e:d3:33:
cc:6e:ac:57:89:38:db:12:52:85:82:d0:37:bf:75:
2a:c5:cc:a8:97:49:d0:c6:09:74:f4:a8:52:3f:7a:
f6:04:45:c1:6c:03:65:dc:5e:67:13:9f:ae:cf:28:
4a:b6:7d:b9:40:9d:1c:2a:84:d1:a6:9e:10:fc:1e:
ca:ef:70:0f:02:b7:98:ba:e9:ea:a6:ba:0c:5e:b1:
c1:e2:8e:80:1e:93:54:2f:cf:b1:16:b7:b8:d3:22:
f3:80:a4:5d:d5:ad:09:5b:73:17:2d:6c:78:8e:8e:
74:33:19:10:02:9e:4e:90:fa:f5:48:a9:7f:02:65:
da:b8:13:9d:34:6f:fb:70:44:7e:75:c6:59:2b:c6:
e8:6c:c4:44:a4:cb:bd:04:77:f7:1f:b6:93:31:63:
96:21:2d:74:5e:b2:3b:36:21:16:86:be:9b:6e:9e:
81:95:ea:f3:64:77:06:20:39:ec:f7:b0:a6:e3:47:
ef:ce:c0:ce:44:6a:90:45:e5:c7:99:a0:52:7e:90:
8a:fe:68:4e:d2:e6:ad:96:3d:3c:f7:ff:74:c0:72:
8e:26:86:89:de:92:72:61:36:90:89:80:ad:f0:e1:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CA:A6:6B:3C:43:25:82:8C:DB:F9:FE:FD:9F:29:86:3D:0B:67:FA
X509v3 Authority Key Identifier:
keyid:E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:45:1b:94:a5:9d:51:9d:90:a0:bc:c9:8f:95:3a:bc:f0:af:
7d:b7:f3:5f:29:e8:81:5c:0c:06:9b:2f:95:5a:d5:fb:67:46:
66:51:54:ff:08:8a:99:f7:3c:41:b8:a7:ec:9e:10:80:c6:0d:
ff:98:1b:9a:ba:c4:6a:93:33:44:c9:cd:4d:67:cf:80:2f:92:
00:f8:95:d9:89:1b:0d:93:db:b7:42:fe:8b:9a:8d:ed:4e:e6:
22:cb:b7:81:80:14:00:bc:22:82:67:f8:b6:e7:13:bc:f0:89:
17:ff:63:76:fe:f6:e0:d2:c4:66:13:aa:db:b0:de:97:5f:57:
f5:4e:68:4a:e6:16:e9:94:71:22:99:f7:c9:43:9d:58:57:2c:
4b:ba:24:c6:b9:69:ea:3b:ea:b7:7b:51:40:8e:7b:d6:62:18:
9a:43:6e:f6:1d:c5:49:9c:5c:77:0e:43:64:d9:c0:c8:2d:9f:
66:59:8d:67:ed:f3:a8:a3:bf:56:41:0e:87:85:56:23:96:f9:
89:35:eb:d6:8a:23:35:29:f4:55:bf:1d:91:f5:af:29:b7:aa:
4b:17:a0:64:3a:eb:61:5d:65:e6:6a:60:8e:1d:4b:ba:53:7f:
78:15:bf:06:74:03:c5:6d:3e:58:ea:e6:86:81:e5:ca:45:f4:
5d:68:e6:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBM6GSnTjJZiSLWV1oWA75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZWYxN2Y0Y2I0ZmU5MmFkMDUzZWVmMjVmMzlkNjNhZTEy
MDdkZDMwHhcNMjYwMjA5MDcwMDI4WhcNMjYwMjEwMDcwMDI4WjAzMTEwLwYDVQQD
EygzMWNhYTY2YjNjNDMyNTgyOGNkYmY5ZmVmZDlmMjk4NjNkMGI2N2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbs9KUwnPzNUrrum8H8chZyC3s3c
VdaIfvl+0zPMbqxXiTjbElKFgtA3v3Uqxcyol0nQxgl09KhSP3r2BEXBbANl3F5n
E5+uzyhKtn25QJ0cKoTRpp4Q/B7K73APAreYuunqproMXrHB4o6AHpNUL8+xFre4
0yLzgKRd1a0JW3MXLWx4jo50MxkQAp5OkPr1SKl/AmXauBOdNG/7cER+dcZZK8bo
bMREpMu9BHf3H7aTMWOWIS10XrI7NiEWhr6bbp6BlerzZHcGIDns97Cm40fvzsDO
RGqQReXHmaBSfpCK/mhO0uatlj089/90wHKOJoaJ3pJyYTaQiYCt8OETNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHKpms8QyWCjNv5/v2fKYY9C2f6MB8GA1UdIwQY
MBaAFOTvF/TLT+kq0FPu8l851jrhIH3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNTAzNTUtYzExYS00ZDM3LWExODIt
MjM3NjJhYTA5NzE3LzEvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xNTAzNTUtYzExYS00ZDM3LWExODItMjM3NjJhYTA5NzE3
LzEvNU84WDlNdFA2U3JRVS03eVh6bldPdUVnZmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkUblKWd
UZ2QoLzJj5U6vPCvfbfzXynogVwMBpsvlVrV+2dGZlFU/wiKmfc8Qbin7J4QgMYN
/5gbmrrEapMzRMnNTWfPgC+SAPiV2YkbDZPbt0L+i5qN7U7mIsu3gYAUALwigmf4
tucTvPCJF/9jdv724NLEZhOq27Del19X9U5oSuYW6ZRxIpn3yUOdWFcsS7okxrlp
6jvqt3tRQI571mIYmkNu9h3FSZxcdw5DZNnAyC2fZlmNZ+3zqKO/VkEOh4VWI5b5
iTXr1oojNSn0Vb8dkfWvKbeqSxegZDrrYV1l5mpgjh1LulN/eBW/BnQDxW0+WOrm
hoHlykX0XWjmdQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:13 2026 by rpki-client