This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
File: S1ejnbXHqja-gs11HlDLkCMDPco.mft (raw, json)
Hash identifier: ozkGm8YeapwFJoto6ebF50gWiw5wM7g3XB8j5hqHMzY=
Subject key identifier: 55:86:28:F5:17:96:61:F4:5C:AF:7F:16:BF:F3:7B:47:49:D4:44:BB
Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Certificate serial: 019C4321CD0E97B5A2C572DE5C45DDFA0CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
Manifest number: 03D6
Signing time: Mon 09 Feb 2026 16:00:14 +0000
Manifest this update: Mon 09 Feb 2026 16:00:14 +0000
Manifest next update: Tue 10 Feb 2026 16:00:14 +0000
Files and hashes: 1: D11NIVjANkynDLC7lwNSF6fXqaU.roa (hash: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs=)
2: S1ejnbXHqja-gs11HlDLkCMDPco.crl (hash: ofNgYofwH1xsxA2aPj+kslCBrrTkBzOhEXJ6EHZ/eb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:cd:0e:97:b5:a2:c5:72:de:5c:45:dd:fa:0c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca
Validity
Not Before: Feb 9 16:00:14 2026 GMT
Not After : Feb 10 16:00:14 2026 GMT
Subject: CN=558628f5179661f45caf7f16bff37b4749d444bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:15:93:60:6f:48:05:a5:14:fc:fb:0d:49:
fa:23:ac:6c:53:17:c7:97:58:3a:74:47:70:61:ea:
99:98:cc:f3:f1:a9:f0:c1:ce:ae:87:5d:93:23:3a:
93:3e:cd:74:05:eb:ba:40:fb:ab:de:40:08:72:ae:
e1:63:52:13:39:10:04:aa:5c:da:e0:71:e9:e9:fe:
46:a0:b7:72:7a:12:f0:22:52:e7:15:72:3f:02:18:
61:df:ca:16:38:f9:82:e2:35:57:4d:1f:02:17:ff:
90:e4:01:80:8c:06:aa:ea:23:b3:a1:78:87:30:a3:
e8:b1:49:ab:0a:6a:66:b5:4a:9c:21:ed:62:a7:d6:
91:c6:06:7d:7e:f5:90:ec:90:52:52:2a:e4:84:99:
ea:a4:ce:ea:b0:36:81:48:24:c9:fe:f0:d1:67:20:
08:8b:b3:0e:fe:ee:e2:97:c5:da:75:a2:5c:37:c1:
be:96:94:fe:3a:5f:ec:48:86:68:ba:83:d4:f0:97:
9d:31:4a:1f:7d:37:3e:ae:df:03:f8:df:e8:1f:54:
1a:5f:2f:7a:07:3c:96:17:4d:db:6f:41:11:4c:63:
da:36:b9:22:cf:cd:8e:62:22:fb:7e:a5:39:c2:75:
7a:ef:70:f5:79:f9:ec:c2:78:a2:ae:6f:9d:ee:05:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:86:28:F5:17:96:61:F4:5C:AF:7F:16:BF:F3:7B:47:49:D4:44:BB
X509v3 Authority Key Identifier:
keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bc:cd:24:6d:2b:a8:7b:3c:a0:45:82:c7:42:97:1a:ff:81:
19:9b:18:4b:05:b9:aa:83:ca:a5:5c:26:05:f1:5b:b8:2a:0c:
39:86:1d:8e:3b:57:09:7d:93:6c:29:28:2f:a0:f3:91:21:01:
5b:23:d3:e6:2a:90:12:80:f4:62:ce:6e:2d:ff:0a:33:ba:06:
61:63:92:ef:64:af:c9:57:3f:56:1d:6c:5e:ae:8b:d6:52:c6:
9c:b2:0d:09:8e:44:00:68:d6:5e:91:f2:bb:56:ba:f5:02:31:
00:bf:82:b6:be:fd:aa:94:6a:92:4f:ac:68:b3:d6:76:11:93:
a4:8b:ee:a8:5c:1f:dc:d9:01:3a:a7:5d:af:af:19:15:40:b0:
8d:cb:8d:05:82:c9:93:42:12:72:78:64:4a:85:28:4b:c6:38:
19:3d:e8:d3:1b:b8:9d:9f:cc:49:ed:f2:cb:83:f0:45:3c:fd:
e5:8a:ba:98:5e:7e:0e:8b:79:68:a4:52:6a:51:5a:d2:59:d3:
5e:54:0a:2f:1e:da:b5:f1:ff:e9:6c:f1:3c:88:ac:98:60:09:
3a:72:a0:91:b2:74:7d:34:fa:d8:3a:31:bf:40:ad:89:23:c7:
f3:ef:28:9d:b4:89:14:92:bc:1f:79:65:75:57:2b:b4:15:d9:
4a:bb:a4:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIc0Ol7WixXLeXEXd+gy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTdhMzlkYjVjN2FhMzZiZTgyY2Q3NTFlNTBjYjkwMjMw
MzNkY2EwHhcNMjYwMjA5MTYwMDE0WhcNMjYwMjEwMTYwMDE0WjAzMTEwLwYDVQQD
Eyg1NTg2MjhmNTE3OTY2MWY0NWNhZjdmMTZiZmYzN2I0NzQ5ZDQ0NGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswUVk2BvSAWlFPz7DUn6I6xsUxfH
l1g6dEdwYeqZmMzz8anwwc6uh12TIzqTPs10Beu6QPur3kAIcq7hY1ITORAEqlza
4HHp6f5GoLdyehLwIlLnFXI/Ahhh38oWOPmC4jVXTR8CF/+Q5AGAjAaq6iOzoXiH
MKPosUmrCmpmtUqcIe1ip9aRxgZ9fvWQ7JBSUirkhJnqpM7qsDaBSCTJ/vDRZyAI
i7MO/u7il8XadaJcN8G+lpT+Ol/sSIZouoPU8JedMUoffTc+rt8D+N/oH1QaXy96
BzyWF03bb0ERTGPaNrkiz82OYiL7fqU5wnV673D1efnswniirm+d7gXwAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWGKPUXlmH0XK9/Fr/ze0dJ1ES7MB8GA1UdIwQY
MBaAFEtXo521x6o2voLNdR5Qy5AjAz3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmIt
YjNkMTg5NmYzNjlmLzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmItYjNkMTg5NmYzNjlm
LzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7zNJG0r
qHs8oEWCx0KXGv+BGZsYSwW5qoPKpVwmBfFbuCoMOYYdjjtXCX2TbCkoL6DzkSEB
WyPT5iqQEoD0Ys5uLf8KM7oGYWOS72SvyVc/Vh1sXq6L1lLGnLINCY5EAGjWXpHy
u1a69QIxAL+Ctr79qpRqkk+saLPWdhGTpIvuqFwf3NkBOqddr68ZFUCwjcuNBYLJ
k0IScnhkSoUoS8Y4GT3o0xu4nZ/MSe3yy4PwRTz95Yq6mF5+Dot5aKRSalFa0lnT
XlQKLx7atfH/6WzxPIismGAJOnKgkbJ0fTT62Doxv0CtiSPH8+8onbSJFJK8H3ll
dVcrtBXZSrukZg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:27 2026 by rpki-client