This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: EzGrJ/Au4mK42Cklf10rZXsDbOdQ3R1ldhCVJbCo4aw=
Subject key identifier: F2:70:85:25:25:F5:BE:C1:8A:76:FA:3E:75:05:E5:6E:2B:76:EB:AE
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 019C427D80E1DB0BC921A4C38842F66B4952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 12FD
Signing time: Mon 09 Feb 2026 13:00:47 +0000
Manifest this update: Mon 09 Feb 2026 13:00:47 +0000
Manifest next update: Tue 10 Feb 2026 13:00:47 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: MuOELVfdMiL7qomeSoKl2CQ83SB51ljkJ01UIO154N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:80:e1:db:0b:c9:21:a4:c3:88:42:f6:6b:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Feb 9 13:00:47 2026 GMT
Not After : Feb 10 13:00:47 2026 GMT
Subject: CN=f270852525f5bec18a76fa3e7505e56e2b76ebae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:3a:6b:0a:43:2e:59:32:a3:36:76:99:f5:
f5:9d:68:ed:a6:83:df:c8:1d:a8:8b:13:e7:5b:65:
ff:f1:13:87:0b:50:4c:f7:9e:f3:89:3d:67:2a:6e:
58:7b:2b:3d:71:37:65:dc:3a:b9:ca:1b:0a:6d:41:
e4:88:75:c9:51:c0:a8:3c:dc:17:fa:56:5e:9f:62:
a1:be:c1:fa:3b:c4:db:8f:1a:1d:41:e8:47:c4:ad:
f8:88:21:b4:c9:fd:e8:3f:4e:42:af:c1:bf:c8:67:
6b:76:85:91:6b:c9:31:bf:06:be:6b:ff:4d:94:54:
4b:91:85:17:54:3e:e6:8d:82:3b:62:62:55:62:7d:
24:c2:e1:04:01:68:f5:eb:37:38:7f:f0:7d:c0:e4:
a5:41:72:c0:9f:c5:bb:98:00:8b:b4:df:ad:84:8a:
cf:f8:9a:6b:70:29:50:2d:62:04:5e:a2:5b:0d:7e:
e1:c7:e2:a8:16:f1:bd:2b:69:d4:4b:7a:f9:dc:b4:
44:12:f0:de:80:6f:6b:8b:c7:c6:cf:7a:d8:b0:fd:
d9:84:80:fe:fa:ec:48:83:77:a0:59:96:90:67:0e:
8e:a5:38:ec:df:3e:33:83:0e:37:fb:3c:c2:e6:66:
11:b8:2b:0f:20:07:b5:d1:c3:d0:42:c8:cb:67:87:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:85:25:25:F5:BE:C1:8A:76:FA:3E:75:05:E5:6E:2B:76:EB:AE
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2d:8d:d4:d0:5b:a4:f0:ec:30:3f:e9:87:cc:86:e1:01:f0:
2d:8e:bc:fc:b8:ee:6d:84:23:52:7e:5b:4c:00:45:65:36:1e:
19:55:88:8b:9b:37:65:15:9c:0c:1c:e2:14:38:27:23:f1:e7:
a6:19:8b:a6:a5:6e:33:bc:18:49:23:54:e0:78:3e:c0:20:14:
e9:6d:65:87:93:00:1b:a7:32:d1:a2:aa:d0:0e:8f:26:0b:55:
ff:30:a8:1d:d7:17:9c:6f:28:71:42:13:a5:87:07:9e:08:17:
58:65:54:b8:e4:90:62:93:a5:82:0c:68:4f:9c:c8:a9:3c:c1:
55:85:b1:fd:97:f9:1f:f7:40:ba:af:8e:e2:c0:ce:7a:bf:1f:
5b:b4:ab:47:68:d7:1e:68:c0:c3:9f:45:8b:6e:e7:0a:54:6a:
23:d2:6c:e9:6d:db:e2:70:70:25:d7:c0:77:b7:5c:f4:2a:aa:
d4:ff:6b:f7:4c:c1:35:15:9f:16:17:fe:08:f3:56:2b:25:03:
d2:e6:13:e9:21:a5:55:82:01:ce:68:4c:3a:9b:df:00:d8:80:
ae:38:1a:07:55:ab:b9:29:a8:8b:52:a1:7b:55:56:db:f9:c1:
5c:ec:01:51:06:51:4a:39:1e:8b:28:9e:fa:97:32:5a:e2:76:
b9:47:90:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfYDh2wvJIaTDiEL2a0lSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZWJkOGFlNmZkNTJiYmJkNDk3MGMyMTYxNjNkOWIyYjBm
MGYyNDEwHhcNMjYwMjA5MTMwMDQ3WhcNMjYwMjEwMTMwMDQ3WjAzMTEwLwYDVQQD
EyhmMjcwODUyNTI1ZjViZWMxOGE3NmZhM2U3NTA1ZTU2ZTJiNzZlYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBE6awpDLlkyozZ2mfX1nWjtpoPf
yB2oixPnW2X/8ROHC1BM957ziT1nKm5Yeys9cTdl3Dq5yhsKbUHkiHXJUcCoPNwX
+lZen2KhvsH6O8TbjxodQehHxK34iCG0yf3oP05Cr8G/yGdrdoWRa8kxvwa+a/9N
lFRLkYUXVD7mjYI7YmJVYn0kwuEEAWj16zc4f/B9wOSlQXLAn8W7mACLtN+thIrP
+JprcClQLWIEXqJbDX7hx+KoFvG9K2nUS3r53LREEvDegG9ri8fGz3rYsP3ZhID+
+uxIg3egWZaQZw6OpTjs3z4zgw43+zzC5mYRuCsPIAe10cPQQsjLZ4fjFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJwhSUl9b7Binb6PnUF5W4rduuuMB8GA1UdIwQY
MBaAFKjr2K5v1Su71JcMIWFj2bKw8PJBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQt
ZTFjNGM0YWEwZTFkLzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQtZTFjNGM0YWEwZTFk
LzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYy2N1NBb
pPDsMD/ph8yG4QHwLY68/LjubYQjUn5bTABFZTYeGVWIi5s3ZRWcDBziFDgnI/Hn
phmLpqVuM7wYSSNU4Hg+wCAU6W1lh5MAG6cy0aKq0A6PJgtV/zCoHdcXnG8ocUIT
pYcHnggXWGVUuOSQYpOlggxoT5zIqTzBVYWx/Zf5H/dAuq+O4sDOer8fW7SrR2jX
HmjAw59Fi27nClRqI9Js6W3b4nBwJdfAd7dc9Cqq1P9r90zBNRWfFhf+CPNWKyUD
0uYT6SGlVYIBzmhMOpvfANiArjgaB1WruSmoi1Khe1VW2/nBXOwBUQZRSjkeiyie
+pcyWuJ2uUeQYg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:02 2026 by rpki-client