This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json)
Hash identifier: bcNlYltvYW37G8TEdk3AeIcCVjFsdq7gl/QtSznExVU=
Subject key identifier: F4:79:6E:93:30:DC:B8:C6:AF:F6:61:F2:B6:17:9C:2D:14:C2:75:AC
Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Certificate serial: 019C4321E0374C8FB78E377D2E4D7997B3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
Manifest number: 1274
Signing time: Mon 09 Feb 2026 16:00:19 +0000
Manifest this update: Mon 09 Feb 2026 16:00:19 +0000
Manifest next update: Tue 10 Feb 2026 16:00:19 +0000
Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: AuIYh3uD/U3+GLE3obeqpsyPTDdZqYHqXNVqpsVNuRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:e0:37:4c:8f:b7:8e:37:7d:2e:4d:79:97:b3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa
Validity
Not Before: Feb 9 16:00:19 2026 GMT
Not After : Feb 10 16:00:19 2026 GMT
Subject: CN=f4796e9330dcb8c6aff661f2b6179c2d14c275ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ac:a2:1f:59:ba:45:d7:92:0c:68:24:49:77:
c9:61:f3:33:05:a3:d7:12:21:17:ae:6d:4f:c2:96:
de:a7:02:83:09:e1:9e:80:cd:09:13:de:0c:44:d7:
e6:cd:32:44:93:a7:0e:d1:05:30:52:6e:a9:df:17:
e0:57:80:08:15:d2:3c:64:a1:3f:01:cc:c3:35:56:
e0:c5:8c:3b:c2:78:49:79:9c:c7:b6:7d:c9:6d:22:
c3:3e:e3:55:08:c0:63:29:62:89:4f:c4:52:a9:49:
6c:90:5b:51:87:fc:c8:c0:06:c9:f8:cc:50:4e:16:
69:03:bc:e8:8d:a2:91:31:3e:44:75:48:1e:53:d7:
69:a7:83:23:c2:14:45:6e:65:56:77:4b:21:c0:52:
c1:9a:e8:f5:6e:04:a3:52:c3:38:a1:0e:16:e8:b5:
cb:04:26:f7:a8:a3:51:54:24:ac:12:32:63:67:ec:
47:bd:94:56:86:53:b6:12:32:bb:b8:c2:e5:0f:9e:
50:29:f7:f2:e7:f1:e1:24:a3:cf:bc:24:16:fe:71:
1d:dc:4f:7c:0a:d9:a6:23:19:f9:1e:45:4c:b2:3c:
00:63:58:55:1d:4c:68:53:4d:78:f9:00:29:54:25:
db:ba:94:16:21:9c:46:5b:32:e0:3e:5e:44:a9:e6:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:79:6E:93:30:DC:B8:C6:AF:F6:61:F2:B6:17:9C:2D:14:C2:75:AC
X509v3 Authority Key Identifier:
keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8d:b4:d9:9d:a1:4c:0c:11:49:2f:8e:ef:e4:d1:cc:38:a2:
d8:24:13:7a:44:cc:5f:42:a9:4d:d7:60:3a:23:98:0e:a1:79:
ab:39:25:50:0c:46:bf:31:e0:3e:f6:24:68:f8:54:0c:62:8b:
5b:2c:9e:a7:59:de:2d:43:04:da:55:c1:81:49:a1:af:ea:93:
b8:a0:7c:ed:b8:67:3b:6d:d0:ba:4b:9c:5f:28:12:72:a2:e3:
7f:9a:3e:2c:d4:ab:09:cc:fe:89:c2:4f:ac:c0:2b:df:28:10:
b8:f6:8e:b3:d8:03:d1:4f:07:a7:75:f9:ac:9c:1f:2e:9d:d0:
43:5b:9c:4e:97:8b:01:3f:16:65:76:98:93:d5:6f:14:21:34:
8e:06:0a:1f:a6:cc:32:26:50:a6:10:ae:a4:50:e6:64:d8:5d:
ab:2a:9b:de:a4:c7:75:16:80:1c:13:7c:36:24:17:47:85:32:
c9:8e:da:89:05:44:fc:cd:7c:c7:63:0a:c5:b0:00:fc:02:4a:
28:a0:94:b1:29:ca:15:35:98:e6:16:26:2d:0b:3d:65:b1:25:
75:5f:17:ca:01:7d:f1:fd:7f:ca:7c:aa:de:e6:99:05:f0:f4:
c1:0b:f7:6a:90:2e:28:b8:9e:64:38:c4:8b:b5:92:55:5b:21:
ae:9c:61:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:28 2026 by rpki-client