This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: jhAFzKNYRRYqBaCYpqb07IzZD+s3y+YpnSmE7JtHHQ0=
Subject key identifier: 4E:20:93:FE:98:E5:F2:AB:93:B7:57:47:BD:BD:01:E5:E7:EC:C6:5F
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019C41D8BC7BCE0CF6C5D0596247A3C3F378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 10:00:48 +0000
Manifest this update: Mon 09 Feb 2026 10:00:48 +0000
Manifest next update: Tue 10 Feb 2026 10:00:48 +0000
Files and hashes: 1: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: 3t7BFlz+tJR4gdH9NPsTgbzCCKNpCbME7x84EqkZGSI=)
2: tVC2csu9UGG1-01gEwc1t4LJEVg.roa (hash: F7t5gXl+oY8MHELP0QCMp2iMpD0P8eAkfXVgIusmD4c=)
3: veTOQGnBK7iaYhGL3G7GNS69oDU.roa (hash: O4MK7Gc8l+4Xx+SJNgVyYVCnc4Eq4VWeh1FutcFXWtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:bc:7b:ce:0c:f6:c5:d0:59:62:47:a3:c3:f3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Feb 9 10:00:48 2026 GMT
Not After : Feb 10 10:00:48 2026 GMT
Subject: CN=4e2093fe98e5f2ab93b75747bdbd01e5e7ecc65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:2b:05:55:c5:06:a3:7d:f0:76:fb:35:41:
c8:69:4a:2c:d4:72:f9:0c:95:2a:17:17:3b:5f:8b:
2e:3a:82:8f:09:e7:80:a6:01:f7:02:a6:fa:7e:26:
66:c0:05:52:14:0f:44:01:8d:65:a8:25:c1:6f:05:
e1:7f:82:33:31:41:f4:9b:03:6e:da:ab:d3:ae:92:
6d:c8:48:89:1e:54:06:12:b6:e6:e6:77:b7:1a:2a:
16:fe:7b:86:29:f3:d3:ba:8b:65:6b:0a:ac:11:e5:
82:75:aa:6e:5c:1c:ce:56:fc:98:35:c4:38:2b:ac:
95:94:06:e2:a9:03:3d:1b:d0:44:3d:55:6d:56:a5:
f7:11:e8:41:fe:12:e9:da:41:e5:91:39:c9:94:8c:
98:d4:0e:83:2f:eb:c1:13:38:f7:99:58:f9:44:aa:
72:39:eb:cf:e8:a4:81:76:aa:17:3d:a0:44:07:5d:
ff:9f:1c:bf:9f:32:19:03:fc:44:4e:3b:e3:15:66:
7b:e4:ef:84:bd:5e:73:61:e9:3a:87:fe:66:bf:c7:
3f:ba:19:a2:f6:99:b4:23:71:74:9d:ca:1a:78:d2:
62:b3:b4:3c:50:13:f6:bf:47:9c:de:4c:44:82:f8:
9a:94:f7:73:e5:4a:1f:9c:ab:66:0a:04:ee:f1:68:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:20:93:FE:98:E5:F2:AB:93:B7:57:47:BD:BD:01:E5:E7:EC:C6:5F
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:37:6f:c4:24:b6:9b:96:f9:05:7d:ca:1a:e4:05:d0:a2:
ad:56:0c:93:74:d0:3d:8f:fc:ab:13:83:7f:3a:93:f2:a9:87:
50:63:a3:8c:ad:60:b8:41:07:fa:38:8a:ac:aa:0d:7f:9b:f3:
84:c5:b8:71:38:6b:e9:d7:b4:f2:35:f7:b3:14:f0:0e:62:53:
52:ba:ed:2f:df:d0:6d:94:0e:c6:db:1c:26:29:1e:89:bb:6c:
9a:c9:c8:ed:e2:49:b5:45:53:85:36:48:f4:46:90:d7:24:f6:
8a:d3:69:33:fa:bb:21:85:04:01:74:da:ae:4e:fc:0f:4a:25:
6b:80:38:98:b2:fc:31:21:e0:13:96:40:ab:d9:45:ae:ef:a5:
d2:7e:4e:48:a7:21:2c:c4:9a:40:e9:b2:4f:1a:c0:fe:27:d0:
c0:23:ed:9a:8e:9b:99:71:6f:a7:7f:f3:6a:64:80:4b:f7:6e:
36:b5:d8:5c:53:50:20:b8:aa:59:57:2d:44:b4:f6:a4:02:72:
59:7d:03:ab:df:20:56:a3:50:88:3e:0b:e7:66:e2:71:b7:2e:
76:1c:b2:9d:7e:00:b6:06:91:78:ab:a0:6a:e9:e2:d0:99:33:
90:60:90:d7:47:89:ae:fe:09:66:e2:ae:a6:c2:af:dc:56:5c:
eb:47:b4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:33 2026 by rpki-client