This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json)
Hash identifier: 91GUsnXOUJvS/RzVqLNlE/89A8y61taVNO6DJjMYLKw=
Subject key identifier: 3B:A4:A1:F1:96:7C:FB:03:AC:2B:DC:88:E6:A6:AE:CD:BE:53:D4:7D
Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Certificate serial: 019C4246A57CEE4230DD1D6A0E8D1C4E3F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
Manifest number: 10E8
Signing time: Mon 09 Feb 2026 12:00:51 +0000
Manifest this update: Mon 09 Feb 2026 12:00:51 +0000
Manifest next update: Tue 10 Feb 2026 12:00:51 +0000
Files and hashes: 1: J_6ozcvtDoYKAmCxlhoux76Ahfg.roa (hash: lv/v7VLFA2FqHauF9FdFYvoyrCMGxHrhesLrZHX2U9c=)
2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: kiJuxoCWj1hpjvFO0cWP65FSNHcMnpn02d5ZPTmlChI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:a5:7c:ee:42:30:dd:1d:6a:0e:8d:1c:4e:3f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a
Validity
Not Before: Feb 9 12:00:51 2026 GMT
Not After : Feb 10 12:00:51 2026 GMT
Subject: CN=3ba4a1f1967cfb03ac2bdc88e6a6aecdbe53d47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:10:0f:93:e9:4e:91:dc:bc:08:c9:67:57:
7a:db:38:ae:f4:fb:98:fd:c4:84:95:b8:3b:f9:7a:
b9:ca:49:32:ef:ee:c8:3d:3e:77:e2:58:cd:0e:f7:
46:c8:09:da:9a:e4:40:b6:46:55:f3:f7:7b:72:9f:
5c:37:15:21:b0:69:b7:99:97:ad:70:af:09:63:0f:
6a:44:ff:dd:2b:7e:88:3e:f2:4c:90:c9:0c:22:1a:
e1:af:67:0f:8c:f6:ee:4d:33:47:bd:14:da:e2:19:
d6:fc:c5:4f:61:7f:6c:75:36:92:d2:59:a6:49:9a:
84:38:51:22:b1:c2:1e:b6:79:f0:e6:40:68:2c:77:
b2:82:33:b9:b1:10:b1:0c:78:b2:c3:25:9d:f9:b4:
82:88:eb:59:e3:3f:4f:19:fc:8c:35:a5:32:d8:21:
c2:31:d1:6a:a3:cc:da:d6:5a:c0:6f:ff:80:42:45:
2b:3b:93:69:b8:d4:92:e0:a8:a4:be:ce:86:cd:75:
40:c6:44:9e:a4:1b:ec:03:84:78:76:e9:78:2e:c5:
61:13:e7:b3:16:0a:34:d2:fb:88:55:48:3d:49:7f:
86:d5:ef:8a:b4:9f:0f:f9:8d:e9:d6:27:bb:b2:43:
03:b3:54:a8:f1:a6:8f:12:84:63:6b:6c:16:dc:3c:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A4:A1:F1:96:7C:FB:03:AC:2B:DC:88:E6:A6:AE:CD:BE:53:D4:7D
X509v3 Authority Key Identifier:
keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dd:2a:6e:ab:a0:fb:a9:4a:c3:f0:1a:8b:97:38:83:26:28:
e7:ed:50:45:37:32:1b:bf:1b:d2:ff:2b:17:9f:cb:3c:18:16:
3c:ba:e9:35:92:66:92:4d:fe:a7:a2:c6:86:6c:89:a2:c1:0a:
74:b3:14:8f:4c:d4:a0:a5:3c:3d:c3:e0:53:f5:62:2b:d7:e6:
8d:00:59:a0:ab:16:31:65:39:ca:c6:d6:21:30:64:f5:c3:3e:
ad:d4:31:96:5d:ba:1c:3a:6f:58:cf:04:5d:3a:b4:bd:5f:0e:
51:fc:d2:70:21:43:35:b4:ef:8a:9b:e5:1e:be:a0:d4:d3:5e:
9d:40:2b:ff:a7:5d:cf:c3:25:8f:5a:d7:fe:6a:f8:68:e6:c4:
73:3c:be:65:5a:b5:1d:cb:b5:74:fb:1a:60:c4:7c:52:78:25:
99:a6:38:9b:dd:99:b6:40:dc:54:74:90:33:7c:ab:46:4a:bd:
13:a9:5e:6a:ce:bf:67:fa:e6:42:00:dd:50:be:8a:99:bd:42:
43:09:6f:7e:be:94:e7:b3:dd:ba:2f:79:d9:e0:e1:7e:db:a5:
68:14:5c:99:2e:9b:e0:79:2f:0f:3d:22:52:4b:92:87:0e:85:
82:c9:d0:db:b2:d5:60:83:03:f0:9e:97:b7:2f:08:d5:71:4d:
34:63:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:53 2026 by rpki-client