This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier: AQi4GHysD2qb/3AU4Z8SaqdqgHQuL0th6cjTdiNEo6A=
Subject key identifier: 09:F1:D7:B8:90:B4:AA:C5:BC:C3:4B:88:B7:E4:FC:CE:1C:3E:27:42
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer: /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial: 019C439009247AD209503F970FDA032CEE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number: 07C8
Signing time: Mon 09 Feb 2026 18:00:38 +0000
Manifest this update: Mon 09 Feb 2026 18:00:38 +0000
Manifest next update: Tue 10 Feb 2026 18:00:38 +0000
Files and hashes: 1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: +FCtElWRD8l4jQVCdrkoiqRtHTLrMeDerK+0x4U1Wdo=)
2: y0R9OFgldF2xPpgLWZUCfSkApQg.roa (hash: K3dYxSYTTkLjGKIU3PEtGoJyW8WxL0sMjVKEq6R8Rf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:09:24:7a:d2:09:50:3f:97:0f:da:03:2c:ee:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
Validity
Not Before: Feb 9 18:00:38 2026 GMT
Not After : Feb 10 18:00:38 2026 GMT
Subject: CN=09f1d7b890b4aac5bcc34b88b7e4fcce1c3e2742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:f1:3b:d3:7e:a3:80:33:44:58:4c:cc:75:
9f:39:0e:a5:61:79:77:f1:5c:1e:61:33:1c:48:26:
4e:01:e4:00:e6:7d:bb:68:7a:99:e2:d1:0e:f4:80:
78:2b:61:94:a4:c5:0d:08:0b:df:e3:87:75:88:d0:
9f:9f:e0:99:38:1e:ed:0c:09:42:02:4d:36:2b:d4:
9a:eb:2c:c9:20:6a:46:4d:a1:fa:e1:8e:de:4b:dc:
53:a5:8b:98:b9:9b:5b:e4:b8:b8:83:ab:ec:e2:0f:
f7:76:44:d8:8e:93:5c:35:0a:db:7c:12:8f:2f:96:
ea:9d:26:64:4d:38:98:41:04:d9:1b:7b:c5:1f:01:
46:0f:9a:b2:33:a0:0b:10:c7:eb:9f:c5:e6:01:f8:
20:04:c3:93:af:1e:62:0c:8c:ac:bc:56:00:93:2b:
c6:ac:ca:56:cb:66:4e:cb:12:39:50:f5:02:27:ee:
9c:96:4d:43:46:03:d5:4e:40:94:43:53:1b:c8:b6:
ed:62:08:66:37:41:d9:09:22:53:c4:01:67:f6:61:
5d:fa:f2:35:91:98:10:08:da:9a:9d:14:af:82:36:
bc:1b:d1:8c:ab:3a:52:2a:fe:5b:61:19:23:d4:0c:
d3:e0:65:97:24:91:0d:ef:d5:49:8d:1b:ef:2a:70:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F1:D7:B8:90:B4:AA:C5:BC:C3:4B:88:B7:E4:FC:CE:1C:3E:27:42
X509v3 Authority Key Identifier:
keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b1:cd:3e:7c:96:a1:e7:98:cf:a2:26:23:74:8c:10:70:05:
64:b8:94:2f:e0:f4:ac:e7:8a:65:c5:e2:a4:29:fa:c1:53:d2:
0d:5a:c5:03:45:11:cb:03:44:2f:a7:f1:4e:1d:b9:98:6d:26:
a7:28:d7:55:9b:45:5b:f6:1c:41:df:28:62:ae:05:8c:cb:14:
60:ad:67:c5:5d:8c:af:b7:37:82:14:d5:61:7a:e3:78:3a:c7:
50:98:82:25:58:4d:36:05:d7:d6:a0:5a:fc:aa:55:69:2c:78:
5d:d7:52:52:0f:e0:8b:75:38:af:b8:67:14:70:c5:f2:58:94:
95:da:b9:36:de:7a:99:3b:be:0a:b7:0b:66:a5:18:f2:57:17:
1c:04:dc:e2:94:00:41:32:23:47:a1:cf:3e:e7:35:34:35:f0:
f6:a0:af:65:4f:11:46:99:08:07:2d:f2:06:c2:21:80:33:6f:
2a:c9:b6:63:a3:1d:a1:a0:8e:a0:e2:58:5f:64:bf:85:b4:02:
77:15:11:06:67:70:85:53:bf:a9:c7:a8:6a:1a:57:d0:84:01:
db:54:00:25:1f:70:ed:66:78:e7:30:bc:be:d3:9a:3d:64:8f:
70:3c:f0:cf:92:12:3f:3c:55:4a:31:2e:e5:a9:4b:63:e0:70:
ca:7e:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:58 2026 by rpki-client