This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File: ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier: wp3CJ9WTmh1CwEmEThpzHRclvYVki9JgNZPGtdt26tI=
Subject key identifier: 83:FE:13:02:87:61:39:23:3F:D5:9F:A0:99:DE:6A:0D:EC:C0:BF:6B
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial: 019C42462F738E2B4B8739758E3C4681AB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number: 01AE
Signing time: Mon 09 Feb 2026 12:00:21 +0000
Manifest this update: Mon 09 Feb 2026 12:00:21 +0000
Manifest next update: Tue 10 Feb 2026 12:00:21 +0000
Files and hashes: 1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: wCjHFdOe6j2zSSP1GSkgCVnZwtAMIsh5L6x0sM+6nrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:2f:73:8e:2b:4b:87:39:75:8e:3c:46:81:ab:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Validity
Not Before: Feb 9 12:00:21 2026 GMT
Not After : Feb 10 12:00:21 2026 GMT
Subject: CN=83fe1302876139233fd59fa099de6a0decc0bf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:84:f4:f2:bd:56:73:38:07:be:2a:9d:d2:
76:7f:56:5e:04:5f:74:07:6f:b2:3e:e3:b7:f7:99:
be:89:c6:8e:0d:58:f8:4c:cc:3a:7a:57:ab:18:40:
6c:75:ba:2a:06:c2:6c:db:64:30:25:22:ef:fa:eb:
5b:ef:da:65:f2:c1:b6:35:8b:13:df:54:2f:82:b9:
59:d8:e4:59:4c:19:86:ad:d5:56:d9:88:a7:5f:80:
6a:f0:81:67:0c:8a:d4:52:c4:00:5d:ab:9f:07:2c:
fc:be:76:fc:0a:20:90:56:82:cd:f8:fb:1c:35:c0:
60:ea:77:8b:a7:bf:8f:0d:a0:42:a0:ab:c3:84:f2:
7c:70:bf:b2:8d:77:46:fa:b2:f0:b7:b5:ce:c0:6e:
fa:66:2a:b1:72:ba:10:88:9c:d6:15:a7:c4:fb:87:
26:d3:2e:73:a4:94:16:37:6a:7c:c6:58:c1:80:8e:
f9:4e:8c:7c:eb:cf:c8:87:cc:bc:07:ad:f9:80:21:
a9:9c:ec:de:e7:fd:f2:50:70:42:8c:8f:09:f5:69:
23:f0:43:e3:72:12:26:b2:0c:bd:6e:a2:80:cf:3e:
8b:6d:8b:11:51:71:4d:14:ff:01:a8:79:8e:01:2e:
7e:c8:6f:d6:9c:25:99:9b:73:ac:22:e9:2e:da:0d:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FE:13:02:87:61:39:23:3F:D5:9F:A0:99:DE:6A:0D:EC:C0:BF:6B
X509v3 Authority Key Identifier:
keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:eb:b3:94:88:26:31:c9:17:2e:6e:d7:68:12:17:46:b4:23:
90:73:29:2e:c7:c9:ae:ba:70:73:dd:84:c3:15:7f:ba:91:1d:
66:91:94:e5:d5:86:20:71:41:87:15:85:45:1e:58:b9:44:04:
fe:b9:8c:31:ba:60:65:e4:00:c8:d9:46:a4:b5:21:2e:89:d1:
46:20:1a:be:02:8f:dd:d2:da:9f:9c:73:91:38:78:8e:22:56:
66:8b:97:52:96:82:61:14:3e:c1:7e:0a:84:c3:47:9b:60:42:
0e:e3:bb:0e:8f:50:68:84:05:30:74:63:53:b3:03:62:4f:ee:
f1:e8:6d:50:5e:ec:72:11:0f:6b:e6:8f:50:c2:62:e2:4b:15:
05:3f:d6:85:45:28:f9:64:0c:a7:3e:a0:5c:8f:10:ba:9e:94:
a8:c5:47:e8:36:25:85:0b:23:bf:d5:67:b0:b3:0c:d9:f3:34:
24:de:b4:8d:a1:d3:58:e4:bc:e4:5b:37:95:ec:68:62:87:56:
c2:fb:4a:9b:cc:96:2d:e0:ff:23:34:6b:64:e7:20:78:3c:c0:
e5:e9:a7:73:02:22:0e:42:a9:7f:a8:d5:6a:0c:10:10:84:08:
1c:af:b4:c8:d3:0e:77:06:09:78:61:25:31:a3:28:c1:4d:6c:
d4:18:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:27 2026 by rpki-client