This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: m8XMOn3S4jnh9vL80OBpAcfRjmgHBmWa74KC04m9VW8=
Subject key identifier: 71:7D:F5:00:22:D6:6C:7F:7D:E5:34:3B:9A:39:3C:60:6F:A3:35:6A
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019C42EAE4FCBA6D4484A206DDBAC061E514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 15:00:16 +0000
Manifest this update: Mon 09 Feb 2026 15:00:16 +0000
Manifest next update: Tue 10 Feb 2026 15:00:16 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: Ai3BBBp/vBwIH/5VTL1qwiSurCpMZuZ2LztXMLvXCZ4=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:e4:fc:ba:6d:44:84:a2:06:dd:ba:c0:61:e5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Feb 9 15:00:16 2026 GMT
Not After : Feb 10 15:00:16 2026 GMT
Subject: CN=717df50022d66c7f7de5343b9a393c606fa3356a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:23:39:f6:83:f2:e5:1a:ea:b7:fe:83:69:96:
90:e1:69:1d:7e:e6:cf:32:65:ae:87:9e:9b:b1:8b:
eb:24:7d:7e:8e:92:99:ff:06:b8:c0:85:8f:7c:31:
8f:77:2b:4b:3c:3f:78:2e:bd:1d:c6:5f:99:3d:19:
5a:9a:5c:c7:cc:5f:23:cd:87:ab:8e:f0:99:63:b9:
ad:b3:db:ef:fb:96:d1:4d:d8:b0:63:da:fa:b9:a1:
a5:4b:96:06:87:21:59:d5:87:52:9e:b5:a7:c7:7d:
48:85:ef:df:7f:11:ba:ed:8d:fd:da:81:9b:90:18:
87:04:ac:a9:d0:34:96:9e:ac:d2:24:5e:54:cc:56:
59:ce:46:73:fa:90:0e:0d:91:66:29:85:a9:76:90:
c0:23:52:fd:50:55:41:f7:97:42:bc:4f:af:ba:e5:
33:3b:0c:4a:4e:2d:ed:93:00:35:6a:79:4c:3a:81:
c9:7a:07:e4:f8:aa:71:e7:a1:28:06:4c:f0:a9:b4:
0b:ac:22:d9:45:ae:83:cc:fc:86:49:c6:97:cd:bc:
9a:3a:8b:8d:73:c5:90:a2:8b:41:74:bc:3e:00:e4:
40:d1:86:3c:6a:de:bf:c3:7c:fc:31:f8:4f:c0:10:
fd:6d:8f:ac:2e:13:fe:2d:50:57:4a:74:71:1a:12:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7D:F5:00:22:D6:6C:7F:7D:E5:34:3B:9A:39:3C:60:6F:A3:35:6A
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e4:14:cd:05:2d:a4:8b:2f:e9:25:bd:90:09:35:87:fc:da:
bb:65:3c:26:25:e9:61:30:31:57:ee:e7:c6:5d:02:9c:31:6e:
5a:f6:36:59:f2:ea:b6:1a:3a:ee:30:48:12:a9:75:9a:61:38:
70:e5:6a:0c:c8:9a:63:63:21:ec:3f:f0:a7:a9:a6:81:ea:25:
ac:05:aa:e5:df:d0:b3:61:13:7f:50:ac:b7:44:fb:64:c5:48:
ef:5d:98:f6:0d:fb:4e:fc:3f:fb:e1:13:6c:60:32:69:0d:d5:
00:cf:0e:39:88:ea:ca:7a:11:fe:b6:42:78:a6:a4:69:f6:d1:
84:57:9b:30:88:91:d8:15:a1:18:2c:b4:3b:95:e8:af:62:f9:
fc:c4:94:73:9f:b7:f3:74:ca:9e:fc:44:cb:a8:c9:51:4e:e6:
c5:40:11:28:17:0a:88:87:16:ca:43:c7:85:ea:0e:7b:ba:43:
de:7a:f6:df:0f:cf:7b:37:93:fd:10:99:aa:1f:0b:35:60:7d:
3d:b4:e2:68:28:ef:0e:f8:5a:09:c7:7a:ec:bb:72:d9:d8:d5:
38:46:1c:99:9f:38:31:f9:2d:c1:7c:61:52:eb:92:be:c5:8e:
44:29:b1:71:35:92:24:48:92:60:9e:fb:07:95:8b:83:79:77:
70:0a:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:00 2026 by rpki-client