This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: VAzuK9G6rAqeWWKWZtl+oJ6EoeuNyMnXYxiMIxstUQg=
Subject key identifier: BC:71:4E:19:FC:5E:E3:B8:35:56:DA:50:59:1C:41:8F:3D:FF:11:2F
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 019C1B390C823E750DBB6EC61CA1B5ED429F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: 01B8
Signing time: Sun 01 Feb 2026 22:00:49 +0000
Manifest this update: Sun 01 Feb 2026 22:00:49 +0000
Manifest next update: Mon 02 Feb 2026 22:00:49 +0000
Files and hashes: 1: 1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa (hash: KLFgdmKccdlHIAP3ZnS+JYnP7Rs5RZwMaM2WwUNBXZU=)
2: Al7UlQjrzC_B0KidPO1VngOHAZs.roa (hash: RboRF3P/11e8NVLi7uKrgu86UzYAOCgIgjZIHHYh4Fo=)
3: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: a/Cyd4KwPZK68c9Wjs0675kztw3zwLIkP8GkCBrWV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:39:0c:82:3e:75:0d:bb:6e:c6:1c:a1:b5:ed:42:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: Feb 1 22:00:49 2026 GMT
Not After : Feb 2 22:00:49 2026 GMT
Subject: CN=bc714e19fc5ee3b83556da50591c418f3dff112f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:72:3c:e2:39:28:91:61:92:39:d2:36:5c:
10:58:23:f8:e7:35:4d:0e:5e:03:bd:1e:6a:aa:0b:
80:bd:c6:72:9c:43:aa:11:4b:b7:99:83:b3:12:3b:
76:1c:e5:25:e3:8c:ac:d5:db:a7:00:04:98:b0:1f:
52:d9:a8:37:77:c4:b6:67:5a:e0:f3:75:f7:47:ee:
a8:eb:ca:42:f0:cc:a5:87:0d:47:a1:5d:52:6b:bb:
65:9b:d2:84:ac:fb:07:4f:d2:2f:41:1f:fc:36:6a:
c4:90:f5:73:5e:16:e6:e0:00:51:f0:56:fa:0e:d3:
7d:fc:fd:10:0c:dc:fd:f3:99:08:a2:41:4c:13:d2:
9b:0e:1d:3e:82:ad:b4:df:fe:fc:3a:ac:37:ab:b1:
03:44:67:60:7e:78:d9:bf:30:45:10:d3:d8:fa:d1:
1f:3f:9b:76:75:4e:e5:1a:aa:17:c7:38:e4:99:e6:
17:7d:98:6d:c3:6a:42:16:ba:43:5b:67:66:f3:e4:
82:9b:21:f4:bd:9e:5c:b7:ef:83:92:39:fa:48:cc:
bf:66:d4:46:71:4f:64:6a:14:4c:37:95:42:68:35:
99:41:e1:f0:2e:de:c9:86:3c:11:db:2a:8f:4e:0c:
24:f1:4c:c3:ea:df:8c:d8:8f:db:ef:53:be:23:d5:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:71:4E:19:FC:5E:E3:B8:35:56:DA:50:59:1C:41:8F:3D:FF:11:2F
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:26:70:0f:5d:d6:a1:2f:1e:0d:25:fe:57:b0:fc:ba:eb:0a:
59:87:4b:6d:84:14:63:d1:49:c2:6a:c9:e1:e0:68:05:2c:2f:
e1:03:e2:6f:94:2b:ef:0b:11:87:01:8e:ad:14:fb:a8:3f:89:
42:bb:78:bb:1b:59:89:09:e6:18:57:d2:61:23:81:38:17:1a:
53:ab:49:d8:8d:9f:85:2b:75:9e:35:b8:75:72:53:ce:ef:04:
ab:c4:99:89:db:e4:0f:1c:b1:08:5e:0b:ec:cf:d6:71:d9:af:
85:ee:2b:a4:c2:a5:d1:ce:45:1c:18:a4:0e:03:d8:8f:12:51:
8a:8c:5b:fa:1b:4b:01:92:ab:ec:c0:e8:27:bb:a4:71:76:e8:
b0:a3:1d:11:d2:53:d8:a5:66:19:7c:05:c2:e1:3e:e5:bb:4c:
2e:f2:99:ce:f6:96:cf:6a:c1:5c:18:f3:1b:63:ab:6a:86:b9:
a6:0a:0b:66:be:1c:2f:ef:04:ce:35:61:85:40:12:08:4d:6e:
e5:5e:ad:27:6c:56:09:9a:00:36:6e:76:71:a9:51:cc:44:79:
0a:1f:58:5c:11:58:a4:aa:04:c4:b8:30:13:1b:9a:d1:7b:af:
ed:27:c6:85:af:7d:57:c1:cf:17:a3:0f:4f:08:56:de:36:79:
84:a1:be:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwbOQyCPnUNu27GHKG17UKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjVjZmQ1MjZhYWQ3MmE0YzhmNDczM2ZhY2EwZjRkYjdm
OWY3NjcwHhcNMjYwMjAxMjIwMDQ5WhcNMjYwMjAyMjIwMDQ5WjAzMTEwLwYDVQQD
EyhiYzcxNGUxOWZjNWVlM2I4MzU1NmRhNTA1OTFjNDE4ZjNkZmYxMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDByPOI5KJFhkjnSNlwQWCP45zVN
Dl4DvR5qqguAvcZynEOqEUu3mYOzEjt2HOUl44ys1dunAASYsB9S2ag3d8S2Z1rg
83X3R+6o68pC8Mylhw1HoV1Sa7tlm9KErPsHT9IvQR/8NmrEkPVzXhbm4ABR8Fb6
DtN9/P0QDNz985kIokFME9KbDh0+gq203/78Oqw3q7EDRGdgfnjZvzBFENPY+tEf
P5t2dU7lGqoXxzjkmeYXfZhtw2pCFrpDW2dm8+SCmyH0vZ5ct++Dkjn6SMy/ZtRG
cU9kahRMN5VCaDWZQeHwLt7JhjwR2yqPTgwk8UzD6t+M2I/b71O+I9USIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxxThn8XuO4NVbaUFkcQY89/xEvMB8GA1UdIwQY
MBaAFA0lz9UmqtcqTI9HM/rKD023+fdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjkt
ZDIxMDgzOGE0NmU2LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjktZDIxMDgzOGE0NmU2
LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiZwD13W
oS8eDSX+V7D8uusKWYdLbYQUY9FJwmrJ4eBoBSwv4QPib5Qr7wsRhwGOrRT7qD+J
Qrt4uxtZiQnmGFfSYSOBOBcaU6tJ2I2fhSt1njW4dXJTzu8Eq8SZidvkDxyxCF4L
7M/Wcdmvhe4rpMKl0c5FHBikDgPYjxJRioxb+htLAZKr7MDoJ7ukcXbosKMdEdJT
2KVmGXwFwuE+5btMLvKZzvaWz2rBXBjzG2Oraoa5pgoLZr4cL+8EzjVhhUASCE1u
5V6tJ2xWCZoANm52calRzER5Ch9YXBFYpKoExLgwExua0Xuv7SfGha99V8HPF6MP
TwhW3jZ5hKG+bw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:16:11 2026 by rpki-client