This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: /WNKSzFuaqnB5zWUrFuJu0QIjSbAMiPT90MxcZstHfA=
Subject key identifier: AF:0D:70:ED:CA:71:21:67:1A:52:D6:6F:48:4B:AD:75:F5:B9:4E:46
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 019C413422C797B0B1D21C7C7F9802B71BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 133B
Signing time: Mon 09 Feb 2026 07:01:01 +0000
Manifest this update: Mon 09 Feb 2026 07:01:01 +0000
Manifest next update: Tue 10 Feb 2026 07:01:01 +0000
Files and hashes: 1: SRftmv9sQMTlSJPXfowLnAaGrnE.roa (hash: HYcUVT7S2MMJhQf2Ty7rezIr8XBfCmUq2EwYkkh9kE0=)
2: UdthD-mHKRSAmhucefcr8Jq7Psc.roa (hash: lVsaOqAelHfvqHNn/6/Wb6tKGvQfaZI6JG0LsDpyxOY=)
3: gqOpS-28u42YNGKEB_JVnGai9oM.roa (hash: IToAx5jrtAZ+cIDNcVkiQZZOuWe9Knt1GiJD5XkMVss=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: 8d1ZNSRiCuBzOJNW12zihVJ/LVqq/HPsTb55crnlsXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:22:c7:97:b0:b1:d2:1c:7c:7f:98:02:b7:1b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Feb 9 07:01:01 2026 GMT
Not After : Feb 10 07:01:01 2026 GMT
Subject: CN=af0d70edca7121671a52d66f484bad75f5b94e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:b3:02:98:5a:8b:f3:e7:16:fd:01:26:7c:
63:66:df:c5:04:e9:5a:e6:97:60:2c:7d:5d:3b:6f:
da:83:a0:11:ac:13:c3:7e:de:17:66:14:49:cc:72:
9c:1e:9a:83:5f:64:49:07:d1:ae:ba:8c:b7:09:2e:
c2:22:ca:e3:9b:15:29:18:a6:c1:32:7f:cc:ef:29:
ce:f7:d9:81:7a:f6:d3:6b:c8:0f:6f:b6:2b:e9:83:
65:90:1e:49:69:db:9a:47:3a:dc:b2:b3:9f:7b:9b:
2d:dc:05:1f:a4:d2:ca:53:08:b5:62:13:8c:0a:c2:
64:38:6f:da:ee:ec:52:8f:83:80:99:a3:98:80:72:
d2:e5:1f:af:50:e7:e9:2f:52:64:45:09:78:8b:09:
4c:bf:71:f3:03:70:fb:b8:fc:7a:9f:a6:15:7c:6d:
23:98:e8:0b:cb:6a:14:c5:cc:e4:95:f8:4d:88:b3:
df:1f:6c:eb:b9:99:63:eb:3b:55:37:d9:1c:cb:af:
c9:37:1a:db:43:81:96:18:bf:fe:cd:7c:de:65:92:
91:9a:88:2d:00:13:1b:1c:bd:76:20:61:88:f4:d9:
c7:c9:05:d7:12:0c:c2:c3:49:23:11:dc:94:c5:e8:
c4:ff:77:8a:bc:b4:31:71:73:d6:7e:6d:d3:17:30:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0D:70:ED:CA:71:21:67:1A:52:D6:6F:48:4B:AD:75:F5:B9:4E:46
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:92:fc:e0:1f:77:19:bb:da:c3:bf:85:f3:3d:06:63:0b:1b:
ff:11:64:d8:ab:ca:7e:b8:12:4a:56:67:78:10:4d:d4:6f:6a:
09:b5:89:90:ab:a0:9b:04:12:05:42:3d:fd:95:14:9a:a5:42:
85:10:1e:c6:fc:d0:2c:98:ed:d9:c2:f7:99:ed:5c:4d:17:c3:
e0:60:40:87:88:e0:2c:8f:86:69:5b:2c:54:06:1d:85:f5:6a:
f7:cd:7e:d9:b9:1b:63:cb:dc:f3:5a:12:ee:8b:b8:80:86:53:
5b:f6:71:6d:2b:87:57:20:93:83:b3:02:15:02:97:7b:db:0d:
c9:11:13:31:d9:b8:77:2d:77:92:6d:22:b4:92:8b:bb:fe:86:
28:5b:44:3c:ba:e0:27:37:12:4d:8e:52:54:e5:11:5e:83:ac:
7c:61:17:02:f1:4e:9e:fd:50:50:c7:f9:c0:6b:ef:1e:a0:e9:
5a:d6:bf:d7:e4:01:c1:2a:76:27:33:30:a5:7b:29:fd:cf:de:
9f:2d:43:dd:d2:43:ed:66:5a:04:75:b4:20:0d:2c:27:ed:27:
ed:5d:08:a2:2b:79:71:8a:30:3e:ca:de:0b:64:c9:b3:ad:d8:
ba:07:c5:10:45:ed:e0:ac:24:d5:cb:10:6e:6f:e0:77:92:b5:
aa:30:70:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBNCLHl7Cx0hx8f5gCtxvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYmUzYzZkOTk4MTE4MTljZWRkZGNkMjdlNGJlMjViYzBj
ZjUwNmYwHhcNMjYwMjA5MDcwMTAxWhcNMjYwMjEwMDcwMTAxWjAzMTEwLwYDVQQD
EyhhZjBkNzBlZGNhNzEyMTY3MWE1MmQ2NmY0ODRiYWQ3NWY1Yjk0ZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOqzAphai/PnFv0BJnxjZt/FBOla
5pdgLH1dO2/ag6ARrBPDft4XZhRJzHKcHpqDX2RJB9Guuoy3CS7CIsrjmxUpGKbB
Mn/M7ynO99mBevbTa8gPb7Yr6YNlkB5JaduaRzrcsrOfe5st3AUfpNLKUwi1YhOM
CsJkOG/a7uxSj4OAmaOYgHLS5R+vUOfpL1JkRQl4iwlMv3HzA3D7uPx6n6YVfG0j
mOgLy2oUxczklfhNiLPfH2zruZlj6ztVN9kcy6/JNxrbQ4GWGL/+zXzeZZKRmogt
ABMbHL12IGGI9NnHyQXXEgzCw0kjEdyUxejE/3eKvLQxcXPWfm3TFzAR9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8NcO3KcSFnGlLWb0hLrXX1uU5GMB8GA1UdIwQY
MBaAFMu+PG2ZgRgZzt3c0n5L4lvAz1BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2Ut
OGNmN2Q0NDkzMzU4LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84NDhjOGItMGU5Yy00ZDZlLTg3M2UtOGNmN2Q0NDkzMzU4
LzEveTc0OGJabUJHQm5PM2R6U2ZrdmlXOERQVUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZL84B93
Gbvaw7+F8z0GYwsb/xFk2KvKfrgSSlZneBBN1G9qCbWJkKugmwQSBUI9/ZUUmqVC
hRAexvzQLJjt2cL3me1cTRfD4GBAh4jgLI+GaVssVAYdhfVq981+2bkbY8vc81oS
7ou4gIZTW/ZxbSuHVyCTg7MCFQKXe9sNyRETMdm4dy13km0itJKLu/6GKFtEPLrg
JzcSTY5SVOURXoOsfGEXAvFOnv1QUMf5wGvvHqDpWta/1+QBwSp2JzMwpXsp/c/e
ny1D3dJD7WZaBHW0IA0sJ+0n7V0Ioit5cYowPsreC2TJs63YugfFEEXt4Kwk1csQ
bm/gd5K1qjBwgQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:40 2026 by rpki-client