This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: Tf5GxN7En2bCP17TCKtaYcVUb1Q8APPNo26i8Lhxxqg=
Subject key identifier: A8:EC:72:75:94:EA:AC:12:36:EE:BF:6D:F0:A4:9B:F7:33:77:7C:B3
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 019C41D88728DE5E632F78420FDDDFAA3B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0C39
Signing time: Mon 09 Feb 2026 10:00:35 +0000
Manifest this update: Mon 09 Feb 2026 10:00:35 +0000
Manifest next update: Tue 10 Feb 2026 10:00:35 +0000
Files and hashes: 1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: 69w27sfdCjt6eUjuVVMrZX+TS3U67ntvqcvafA4LZto=)
2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:87:28:de:5e:63:2f:78:42:0f:dd:df:aa:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Feb 9 10:00:35 2026 GMT
Not After : Feb 10 10:00:35 2026 GMT
Subject: CN=a8ec727594eaac1236eebf6df0a49bf733777cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:50:10:64:a0:59:9e:d9:fb:86:46:bb:a0:
a5:cf:44:ea:a8:10:1a:05:17:75:df:d8:2a:cc:32:
b7:d8:04:a6:5d:ba:6c:c2:85:cf:21:f2:8b:53:58:
7c:9a:dc:f1:59:21:00:bc:b7:98:76:12:ca:14:79:
f8:25:60:6f:67:85:3a:1b:01:17:cf:1c:6a:2f:cb:
da:f4:eb:d0:3d:6a:a4:34:c9:a0:3b:c3:2f:a4:b0:
94:8a:99:1e:b0:91:de:17:66:cb:b3:db:2c:fb:e6:
48:9d:2b:41:93:ef:fd:bb:ad:db:cb:54:ae:89:a0:
b4:64:df:b3:97:82:95:52:0f:dc:3c:af:70:ba:89:
1f:15:b4:8f:bf:4c:04:b6:e4:a8:31:00:77:92:51:
a0:24:bf:41:72:92:77:ba:4c:08:1c:93:10:9b:57:
ab:af:e8:ea:30:77:73:31:20:bb:5b:93:7e:41:9c:
69:92:e8:d1:ee:33:72:4e:94:1a:1f:55:68:41:b4:
8e:7c:77:8c:49:1c:c4:58:26:c8:09:d0:aa:5b:8c:
f6:c4:f5:19:60:bf:ad:af:ee:50:25:88:ff:58:ae:
96:c2:76:f7:2e:d2:30:73:12:ec:7d:11:f0:1d:6b:
45:cc:71:9d:59:cd:0e:d9:85:61:8c:56:a6:65:07:
23:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EC:72:75:94:EA:AC:12:36:EE:BF:6D:F0:A4:9B:F7:33:77:7C:B3
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c2:08:3e:67:d5:1a:95:78:5c:43:ac:7e:5b:6d:c2:74:28:
29:d3:5f:9c:64:63:9a:27:35:8a:52:4e:7d:4b:d4:5f:03:16:
4c:d9:5e:79:c2:03:0c:d8:4f:77:e6:d4:60:f6:0f:5c:82:7f:
86:a3:84:a6:42:b4:3a:d7:b6:1d:ba:44:26:b1:68:0d:20:ac:
63:19:a9:a1:38:50:91:5d:ad:f8:75:10:b6:a1:f3:d6:44:0e:
b2:99:27:58:b2:00:c2:a1:08:c7:f7:db:a8:83:ba:89:06:10:
97:41:12:95:92:e1:06:fc:13:18:17:91:e2:6c:1a:c0:f5:e0:
9c:10:12:8e:ce:fc:9f:cb:d4:8b:eb:95:de:2f:d5:a9:4c:3c:
04:92:e1:3f:99:61:72:14:60:73:49:ab:7c:d9:9e:88:5a:3e:
34:2c:5c:5b:bf:04:bf:4d:dc:c0:75:f1:23:95:0e:67:a5:a6:
27:cb:a5:c9:6d:d8:d8:70:5d:91:e1:fe:2f:12:21:b8:cb:de:
cb:01:a3:83:12:5d:84:e7:c9:fe:27:01:00:aa:ef:44:db:3c:
30:0d:17:f4:5f:9a:48:a5:1e:74:f5:73:03:ca:30:98:a3:89:
ca:74:e4:dc:96:c0:f3:8e:af:cd:09:d6:ca:68:9f:88:2e:d5:
71:23:70:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:36 2026 by rpki-client