This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
File: mtVmfEEoFBE5zKfFBH_BclC_Y68.mft (raw, json)
Hash identifier: 3E2biAfbEI1SLLGVq0RE7B1cXoZ+uQ48m4TA3EFn6jE=
Subject key identifier: B1:5C:01:3B:25:DC:4D:AA:10:99:56:A7:B5:0D:61:DD:13:D9:8F:11
Authority key identifier: 9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
Certificate issuer: /CN=9ad5667c4128141139cca7c5047fc17250bf63af
Certificate serial: 019C438FDCCA8B97AC3C6F4D085DF78CCA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 18:00:27 +0000
Manifest this update: Mon 09 Feb 2026 18:00:27 +0000
Manifest next update: Tue 10 Feb 2026 18:00:27 +0000
Files and hashes: 1: mtVmfEEoFBE5zKfFBH_BclC_Y68.crl (hash: BQYSDEQsjk4R9HmXfvHIIANG9XmTcnN0RcbXy0DuZ8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:dc:ca:8b:97:ac:3c:6f:4d:08:5d:f7:8c:ca:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad5667c4128141139cca7c5047fc17250bf63af
Validity
Not Before: Feb 9 18:00:27 2026 GMT
Not After : Feb 10 18:00:27 2026 GMT
Subject: CN=b15c013b25dc4daa109956a7b50d61dd13d98f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:98:ff:de:32:a5:e8:7b:50:3c:4f:8f:51:
31:78:0b:f4:3d:39:f2:a4:79:d1:de:ba:ef:cf:63:
c8:25:04:11:d6:20:ba:8f:3f:c9:c9:df:1f:36:b3:
61:1f:0a:ed:6a:90:33:2c:bb:22:d5:04:fa:da:3f:
59:9c:00:5a:6c:4c:8c:d6:65:55:6e:01:96:32:2d:
ac:a5:46:02:03:c7:b1:f2:c6:14:9c:02:a2:35:66:
db:71:54:52:64:7e:ba:1a:2f:c2:43:e8:3b:d8:d2:
99:6e:12:cd:08:69:61:8c:7c:f8:eb:c2:66:6c:0e:
3a:ab:72:30:de:cc:4b:14:40:a9:3a:6f:cf:53:75:
1e:db:8f:b2:9d:c0:76:97:55:4f:aa:18:f3:c3:a6:
d6:f0:12:5b:23:fc:ce:ab:a5:15:c0:40:28:6a:fa:
9d:d9:3f:8c:90:86:bb:2b:7b:b3:50:b1:e3:ee:52:
de:4c:0b:e3:45:28:59:e1:c5:af:78:64:c0:59:78:
6f:c8:f4:1d:9c:64:78:c1:ec:27:7f:b0:86:3d:e1:
b5:58:cd:e7:cd:18:5d:ad:4e:eb:81:62:67:8d:16:
5d:2f:63:a3:a2:93:a5:ad:66:b3:be:a4:6e:a2:3e:
e8:e2:0f:cf:3f:d4:bd:10:b1:af:ee:19:ab:bc:b0:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5C:01:3B:25:DC:4D:AA:10:99:56:A7:B5:0D:61:DD:13:D9:8F:11
X509v3 Authority Key Identifier:
keyid:9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4e:b5:c8:38:ff:6c:34:e8:e8:c1:80:e3:fd:0c:63:b8:30:
5e:46:28:0b:0b:16:e0:83:0e:c5:1e:c3:d4:0f:cd:d9:07:71:
2f:16:b0:9f:5f:a3:19:5e:d7:99:b3:8f:74:7e:d0:21:91:f3:
49:e5:f6:41:b8:89:e6:c3:3a:b2:a8:08:1a:ac:8a:ce:23:84:
ca:13:37:e2:35:a7:49:72:ce:43:57:fb:65:7b:48:66:83:7b:
60:65:a5:21:b7:5b:8b:a8:c6:ff:a3:c1:ea:c7:46:00:1c:ea:
06:7c:7b:e2:c9:6a:88:c8:eb:8e:92:66:ff:a5:43:7e:df:03:
7d:93:d2:46:d1:e2:53:78:aa:da:4a:b4:ba:80:c0:2c:32:78:
76:f6:ed:f2:e0:71:66:77:38:d3:ba:f5:a3:13:fc:c7:1b:7e:
b2:0b:b3:c4:45:a5:11:c2:81:c4:b8:40:3e:1e:00:1c:d6:43:
1f:95:38:8f:3a:81:32:86:75:9e:e2:da:a4:ce:4b:8d:62:d6:
a0:a1:0d:e2:f4:45:08:2a:7d:15:e8:6b:5d:07:37:3b:91:66:
af:b8:48:68:9e:e0:f2:2f:d4:26:1c:6e:79:34:c2:cc:7e:94:
1e:3d:38:0b:ef:52:59:17:45:72:ea:14:49:69:81:da:2f:7e:
c8:8a:8d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:19 2026 by rpki-client