This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json)
Hash identifier: VmsA9r8//f2n7Syj2APw4Z8W5RAzUPdg750kctyDzEg=
Subject key identifier: 84:8C:D2:4F:4B:97:F5:23:23:35:43:E5:EB:14:6F:0D:71:6E:66:09
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 019C4322CCE7C59E8781E8EEFA9EA396A42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
Manifest number: 1826
Signing time: Mon 09 Feb 2026 16:01:20 +0000
Manifest this update: Mon 09 Feb 2026 16:01:20 +0000
Manifest next update: Tue 10 Feb 2026 16:01:20 +0000
Files and hashes: 1: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: vrLy0kIEhLoo6zaWmxxZ9gBUIFMrvQ5KLWg3WX20HgE=)
2: p4odwBPCjK_f_cbe3suhJpjfBd4.roa (hash: BbTKrvDIk3p4mxNlC+Mfbr4gEXADSPPB2996OHBG8d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:cc:e7:c5:9e:87:81:e8:ee:fa:9e:a3:96:a4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Feb 9 16:01:20 2026 GMT
Not After : Feb 10 16:01:20 2026 GMT
Subject: CN=848cd24f4b97f523233543e5eb146f0d716e6609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2a:69:09:ae:46:70:88:b7:41:6d:99:00:2a:
a3:bf:38:2e:1a:7f:ce:cb:85:fe:2d:3c:03:35:c8:
66:c9:b8:f2:84:ad:30:f2:37:d1:a2:db:82:e9:6f:
cb:ae:20:43:69:6e:ad:18:7e:26:b0:ff:c1:4b:f2:
a8:cd:f9:2a:c7:a1:f5:9f:c0:6b:b7:80:ac:13:ca:
12:24:25:f2:3f:54:fe:ab:6a:8f:b7:b8:c0:53:54:
dd:02:70:13:8d:62:1a:6f:22:28:c9:fd:c9:82:cb:
3e:48:a4:36:7a:0a:8e:d0:1b:9b:fc:c6:10:a2:72:
0f:e0:f2:cf:90:10:64:45:1d:d5:89:01:9b:9c:0f:
40:2f:ee:e2:96:41:69:c9:ab:98:97:e9:bc:d7:66:
1c:df:87:9e:e0:61:e7:69:31:33:d3:b8:b0:08:bc:
7a:dc:55:ab:12:86:b9:d5:0d:44:86:47:8b:d1:35:
22:94:85:af:e0:5a:b8:bb:67:68:99:6a:0d:a4:b3:
3c:c6:6e:af:bc:fc:71:c3:19:c4:60:15:cb:1c:37:
c7:e4:15:6b:d1:33:f4:07:3b:7b:68:60:93:bd:6a:
94:49:8d:71:19:fd:b8:db:6d:88:35:42:69:92:86:
6d:73:b4:33:ee:a3:5e:0e:fc:bb:68:a7:fa:81:29:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8C:D2:4F:4B:97:F5:23:23:35:43:E5:EB:14:6F:0D:71:6E:66:09
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:42:76:f1:90:54:08:68:59:b7:0e:d3:6b:b0:dd:73:b8:05:
73:b0:fc:5c:3f:49:28:28:8b:10:1f:01:da:c9:b9:2b:3e:78:
50:3d:0c:a7:66:59:86:1b:f0:64:96:26:bd:99:3f:76:72:0d:
35:55:4d:91:cc:68:94:4d:bb:96:4c:bf:66:34:82:57:74:f1:
3c:0e:e3:b7:74:0e:1c:6b:a1:8a:d3:6c:b4:c4:f2:49:91:5d:
20:af:81:ad:32:13:e4:d9:fb:24:2e:65:37:6c:ce:ae:13:1d:
da:fa:52:e1:3c:72:21:a3:18:f7:2e:66:50:a8:e7:9e:0a:30:
73:ba:64:e0:5f:54:16:1e:50:0f:5b:7b:a9:df:4b:94:79:ca:
6f:3e:d5:19:30:4e:2b:a1:14:96:b7:41:25:5f:c3:00:8a:e6:
e9:5a:fb:d7:9e:8d:4c:80:7f:45:2a:43:aa:3b:df:d2:da:cb:
93:23:74:a0:39:3b:94:39:a2:e2:4b:b7:12:fd:ad:15:4d:98:
0f:c9:7f:f9:02:1d:f5:33:5b:e9:15:88:46:7a:d2:a0:58:4a:
da:33:76:9e:19:9b:1b:6c:32:5c:53:58:1a:5f:6c:e6:a3:44:
e4:8a:82:e8:8b:08:f0:7c:9c:19:ec:dd:23:34:89:9d:f3:7b:
b5:ac:3f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIsznxZ6Hgeju+p6jlqQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx
YTg2ODAwHhcNMjYwMjA5MTYwMTIwWhcNMjYwMjEwMTYwMTIwWjAzMTEwLwYDVQQD
Eyg4NDhjZDI0ZjRiOTdmNTIzMjMzNTQzZTVlYjE0NmYwZDcxNmU2NjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSppCa5GcIi3QW2ZACqjvzguGn/O
y4X+LTwDNchmybjyhK0w8jfRotuC6W/LriBDaW6tGH4msP/BS/Kozfkqx6H1n8Br
t4CsE8oSJCXyP1T+q2qPt7jAU1TdAnATjWIabyIoyf3Jgss+SKQ2egqO0Bub/MYQ
onIP4PLPkBBkRR3ViQGbnA9AL+7ilkFpyauYl+m812Yc34ee4GHnaTEz07iwCLx6
3FWrEoa51Q1EhkeL0TUilIWv4Fq4u2domWoNpLM8xm6vvPxxwxnEYBXLHDfH5BVr
0TP0Bzt7aGCTvWqUSY1xGf24222INUJpkoZtc7Qz7qNeDvy7aKf6gSle6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISM0k9Ll/UjIzVD5esUbw1xbmYJMB8GA1UdIwQY
MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt
MTM4Yjc4N2RlM2UzLzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz
LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUJ28ZBU
CGhZtw7Ta7Ddc7gFc7D8XD9JKCiLEB8B2sm5Kz54UD0Mp2ZZhhvwZJYmvZk/dnIN
NVVNkcxolE27lky/ZjSCV3TxPA7jt3QOHGuhitNstMTySZFdIK+BrTIT5Nn7JC5l
N2zOrhMd2vpS4TxyIaMY9y5mUKjnngowc7pk4F9UFh5QD1t7qd9LlHnKbz7VGTBO
K6EUlrdBJV/DAIrm6Vr7156NTIB/RSpDqjvf0trLkyN0oDk7lDmi4ku3Ev2tFU2Y
D8l/+QId9TNb6RWIRnrSoFhK2jN2nhmbG2wyXFNYGl9s5qNE5IqC6IsI8HycGezd
IzSJnfN7taw/UQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:41 2026 by rpki-client