This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier: jh86KkTGmRp6dy1dJH2JV58DgS3IrBotcmWlN0yGrMs=
Subject key identifier: 18:31:BF:71:32:EE:1A:95:78:D4:40:A0:17:77:E4:7C:32:C8:45:B8
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial: 019C41A262027D7801625424B0ABBB05ACCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number: 1725
Signing time: Mon 09 Feb 2026 09:01:26 +0000
Manifest this update: Mon 09 Feb 2026 09:01:26 +0000
Manifest next update: Tue 10 Feb 2026 09:01:26 +0000
Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: lboxbPhaL8tEllxzYcftUiK5PsGYbMcgIt3lUXAcKrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:62:02:7d:78:01:62:54:24:b0:ab:bb:05:ac:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Validity
Not Before: Feb 9 09:01:26 2026 GMT
Not After : Feb 10 09:01:26 2026 GMT
Subject: CN=1831bf7132ee1a9578d440a01777e47c32c845b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:ea:f5:5a:d7:f3:a1:21:ef:1f:eb:d1:52:
c7:8a:30:39:71:d1:ec:de:bf:33:68:ba:ce:42:c3:
83:fe:5b:37:95:35:16:1d:6b:75:33:37:5c:ce:b2:
53:a6:38:dc:8a:5b:de:0b:c0:74:66:c6:74:4f:03:
ba:04:31:99:7d:b7:79:56:61:7e:45:40:10:32:b9:
c4:5d:1d:bd:81:92:d3:aa:59:f0:e9:62:b4:6a:db:
ed:8b:87:3c:89:59:a1:ab:f8:46:33:c9:dc:f9:58:
93:da:a9:b2:80:c6:c7:e9:d1:2c:3c:25:7f:06:ba:
3c:99:68:17:98:40:e4:b4:a3:5c:32:24:87:cc:6e:
7d:33:99:1f:6c:d7:74:74:90:17:d7:f8:01:16:02:
a1:5f:c3:20:75:0e:08:22:ba:df:50:f2:6d:fb:91:
9a:7b:10:e4:40:56:98:07:79:05:57:17:e1:bb:d9:
5f:8a:9f:10:a3:05:73:18:24:14:80:ef:9d:94:28:
de:34:c8:ab:24:a3:16:10:85:3d:fe:0f:af:c7:94:
a4:e3:17:83:b6:51:63:8c:2f:d3:5f:56:a1:9e:31:
5c:86:55:49:0a:09:51:ac:d8:4a:7b:06:41:4b:a6:
94:12:f4:80:c9:86:c7:ae:a1:55:6c:60:5c:34:be:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:31:BF:71:32:EE:1A:95:78:D4:40:A0:17:77:E4:7C:32:C8:45:B8
X509v3 Authority Key Identifier:
keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:72:d9:91:ca:46:e2:50:4e:83:16:98:d9:87:20:65:d7:3f:
5f:de:e3:e2:db:ef:60:c2:fc:18:99:10:c3:a2:27:4a:e6:2c:
c2:8e:57:b4:aa:92:4b:17:13:31:22:d5:72:11:e6:0f:5f:8e:
71:f7:85:3f:04:cb:c1:e5:2b:a0:53:43:ee:4b:4e:20:f6:3b:
b9:cb:59:6d:86:eb:01:61:9b:a3:db:30:81:c2:44:1a:9c:69:
92:09:e0:16:f9:4d:b1:f4:3d:66:3f:b2:c8:84:fc:1a:3a:6b:
49:fb:ec:ea:2d:f4:14:f1:de:95:30:83:fe:42:91:32:e3:c2:
d4:5e:4e:b4:a6:c2:e8:93:cb:ce:f9:8f:c3:66:77:72:46:05:
0c:38:00:06:30:b3:67:b5:fb:cb:1d:d6:60:37:48:11:c7:a9:
1c:57:fb:6a:83:ac:de:58:0b:0d:b2:48:c2:b9:d3:bd:0b:47:
e5:c1:26:dc:a0:2d:37:f9:f6:b9:a7:e1:2b:b5:98:20:e7:96:
b2:75:c9:d4:4c:fc:0b:93:2d:ce:81:e6:6a:48:fd:26:f5:ae:
2d:75:4b:5b:89:b1:d8:f8:bf:e7:08:c2:01:42:75:c8:d3:b7:
db:93:91:b1:5e:d1:ec:58:8d:f9:3f:ab:1d:e5:bf:a8:ea:ec:
ff:bc:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:54 2026 by rpki-client