This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier: X4m8U8+fS0yEDhirEiPbQXbUmfChRijyTb1N/LCnZks=
Subject key identifier: B2:BA:C8:BC:7E:C4:90:59:34:4E:46:AF:4C:50:A8:0E:45:13:02:B8
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial: 019C43FDB4D80DF1E16D546BECA3D947C65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number: 05CF
Signing time: Mon 09 Feb 2026 20:00:26 +0000
Manifest this update: Mon 09 Feb 2026 20:00:26 +0000
Manifest next update: Tue 10 Feb 2026 20:00:26 +0000
Files and hashes: 1: BbSoHPZ6_5cJFXmdCfnvim5a3TI.roa (hash: McuildlUAIggMuk9JmdtRzn1hMk29EnAK+dUtR/t2JI=)
2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: TIgKJQXitH+Zuxd5YhtxQ+f5lwbca3eR7QzSdg5iBAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:b4:d8:0d:f1:e1:6d:54:6b:ec:a3:d9:47:c6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Validity
Not Before: Feb 9 20:00:26 2026 GMT
Not After : Feb 10 20:00:26 2026 GMT
Subject: CN=b2bac8bc7ec49059344e46af4c50a80e451302b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:86:1b:62:e8:7c:12:dd:80:e7:65:1d:f9:
e7:01:01:7e:56:40:38:d4:d3:29:ef:97:3a:e1:1f:
4f:70:d3:3c:94:ed:37:be:ec:3f:3f:ff:e6:f9:47:
d7:f5:c8:40:5d:86:d1:c8:f5:e8:12:d0:15:7a:7a:
ba:1f:42:f4:42:f9:57:c6:1b:f1:3e:f4:be:24:b4:
f2:ec:40:0e:0b:09:34:d0:82:2d:eb:49:0f:c7:65:
57:03:55:02:79:6e:e7:d7:28:81:25:44:7a:3b:d8:
5e:d9:c2:4e:b7:ee:b6:76:1f:1a:c5:77:18:9b:6e:
8e:9a:18:1c:32:61:23:90:45:57:99:46:ee:8e:a8:
98:ff:c7:b4:49:c2:2e:8d:29:05:41:fc:a8:27:c9:
a5:98:b1:6a:b1:ab:02:b0:59:42:7b:69:22:f6:3c:
33:c3:b4:21:7f:98:5b:70:a5:8c:66:38:aa:2c:96:
48:07:35:cd:9f:72:fa:70:c7:e5:d1:ad:3e:bc:24:
53:46:73:3d:22:c2:98:c0:48:61:65:30:47:c5:7a:
09:88:fc:e9:46:47:c2:15:bb:e5:ac:0b:bc:4b:fc:
49:4f:a7:79:1a:67:1e:9a:f5:85:68:b3:36:a5:4f:
c4:52:90:b1:42:43:8f:db:b6:95:f4:a8:ed:50:5b:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BA:C8:BC:7E:C4:90:59:34:4E:46:AF:4C:50:A8:0E:45:13:02:B8
X509v3 Authority Key Identifier:
keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:74:07:d7:e0:1f:61:7c:da:6f:a6:87:eb:1b:73:e6:d7:7b:
4c:27:d0:da:ff:7c:5d:35:04:28:4e:37:94:e8:bc:29:eb:0b:
ca:3f:4c:ad:a5:12:59:99:66:df:e3:bd:60:c6:68:91:42:48:
ed:95:93:f0:12:e9:6c:77:02:84:35:5c:19:bc:d9:72:ec:f5:
eb:bd:21:70:48:8d:ef:8c:56:55:77:08:85:d5:38:cb:f7:ff:
13:4e:9e:23:77:b4:6b:17:d1:87:63:2d:54:1d:74:3e:53:0d:
fe:49:fd:26:77:a9:1b:06:e5:a8:ec:24:6e:7f:5b:9c:a3:35:
89:4b:6a:32:77:cc:46:6e:99:0b:8b:8c:71:60:c5:a4:77:72:
53:e9:4e:9b:25:5e:62:5f:8c:d4:36:db:a9:69:c5:67:e3:93:
1a:31:33:66:37:79:18:1c:b6:bf:86:1d:5d:c0:62:33:85:33:
13:49:8c:eb:5a:15:47:69:92:47:31:46:fb:8e:18:ce:30:f8:
10:79:94:88:d1:92:27:20:d1:d9:63:64:b0:d7:33:3a:2c:fc:
f3:32:cb:2f:1e:0c:76:04:75:87:cd:a9:61:b5:17:29:41:00:
90:a2:12:95:df:c4:34:64:49:0d:84:e0:c4:3d:23:5e:39:d2:
e5:0b:73:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/bTYDfHhbVRr7KPZR8ZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDk4ODZlMmRiMjcwOWRiMjIzNjRlMzM0ZDM5ZTJlZTQ4
OGQzNmUwHhcNMjYwMjA5MjAwMDI2WhcNMjYwMjEwMjAwMDI2WjAzMTEwLwYDVQQD
EyhiMmJhYzhiYzdlYzQ5MDU5MzQ0ZTQ2YWY0YzUwYTgwZTQ1MTMwMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XKGG2LofBLdgOdlHfnnAQF+VkA4
1NMp75c64R9PcNM8lO03vuw/P//m+UfX9chAXYbRyPXoEtAVenq6H0L0QvlXxhvx
PvS+JLTy7EAOCwk00IIt60kPx2VXA1UCeW7n1yiBJUR6O9he2cJOt+62dh8axXcY
m26OmhgcMmEjkEVXmUbujqiY/8e0ScIujSkFQfyoJ8mlmLFqsasCsFlCe2ki9jwz
w7Qhf5hbcKWMZjiqLJZIBzXNn3L6cMfl0a0+vCRTRnM9IsKYwEhhZTBHxXoJiPzp
RkfCFbvlrAu8S/xJT6d5GmcemvWFaLM2pU/EUpCxQkOP27aV9KjtUFsfgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLK6yLx+xJBZNE5Gr0xQqA5FEwK4MB8GA1UdIwQY
MBaAFJ/ZiG4tsnCdsiNk4zTTni7kiNNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEt
ZWJhMGNkNTdjMDIwLzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEtZWJhMGNkNTdjMDIw
LzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnQH1+Af
YXzab6aH6xtz5td7TCfQ2v98XTUEKE43lOi8KesLyj9MraUSWZlm3+O9YMZokUJI
7ZWT8BLpbHcChDVcGbzZcuz1670hcEiN74xWVXcIhdU4y/f/E06eI3e0axfRh2Mt
VB10PlMN/kn9JnepGwblqOwkbn9bnKM1iUtqMnfMRm6ZC4uMcWDFpHdyU+lOmyVe
Yl+M1DbbqWnFZ+OTGjEzZjd5GBy2v4YdXcBiM4UzE0mM61oVR2mSRzFG+44YzjD4
EHmUiNGSJyDR2WNksNczOiz88zLLLx4MdgR1h82pYbUXKUEAkKISld/ENGRJDYTg
xD0jXjnS5QtzgQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:15 2026 by rpki-client