This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier: oHky/R45w4arC48wFpUpnQ2RTMvKCSL023772T+Gtwk=
Subject key identifier: 84:02:08:AA:75:C5:A7:D3:7C:1D:EE:69:74:47:14:93:6F:D3:F0:BC
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 019C41A1E7DA82D4CA3E79A6B2733D569588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number: 15C5
Signing time: Mon 09 Feb 2026 09:00:55 +0000
Manifest this update: Mon 09 Feb 2026 09:00:55 +0000
Manifest next update: Tue 10 Feb 2026 09:00:55 +0000
Files and hashes: 1: OBdFDRVC595sAnyB_0VmTmVJFWo.roa (hash: 28ttAFOYw0/3k0gD+y/7PAKtDPtrhHQLrlbHUNtynS0=)
2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: paNypUF5aRfw91wsDYEautf+wEf0N+6g027aggiVnMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:e7:da:82:d4:ca:3e:79:a6:b2:73:3d:56:95:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Feb 9 09:00:55 2026 GMT
Not After : Feb 10 09:00:55 2026 GMT
Subject: CN=840208aa75c5a7d37c1dee69744714936fd3f0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:a7:6b:82:d7:2c:ff:65:ec:32:0c:d9:13:
38:32:d1:4f:6e:d7:c3:89:02:f6:92:34:ad:96:d5:
99:0c:e1:2d:3d:4e:34:34:2b:36:cb:ac:f1:7b:14:
91:b6:7b:f7:31:fc:56:f5:05:a5:95:69:d7:ce:39:
be:58:34:68:17:a8:70:cd:47:a1:93:64:b2:9e:44:
d3:f4:92:aa:28:63:ab:34:a5:45:1c:8d:cc:fd:d1:
5e:26:90:82:30:2a:29:48:2c:1b:fa:d4:d4:7e:86:
c0:13:2f:0b:84:bf:f9:d1:46:58:38:0d:3b:41:b0:
07:9c:16:39:b4:ff:14:24:78:b8:ec:ed:13:b3:cd:
e8:b0:d6:4b:17:9d:9a:5e:1e:9c:82:ec:0d:9b:e9:
7e:8d:d1:2f:0f:dc:54:69:44:c3:f3:06:ad:07:cc:
5e:ac:51:b2:e8:4a:bc:2a:1e:b1:e4:ff:cb:24:c7:
94:51:33:e0:69:27:50:c8:ca:91:e5:9b:ba:b3:a1:
b6:a7:09:94:b2:91:59:fa:6d:f6:c1:88:b9:06:db:
27:eb:e1:ec:b0:1b:1a:30:01:14:63:7a:9b:0f:ae:
bf:0f:9e:20:f0:a1:ea:5e:a2:d5:3a:5e:43:92:42:
ba:fc:a5:77:62:99:b6:2f:f0:64:12:10:8d:c5:9f:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:02:08:AA:75:C5:A7:D3:7C:1D:EE:69:74:47:14:93:6F:D3:F0:BC
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d0:c5:d2:28:56:1f:1a:6b:16:56:97:8c:81:5c:b7:4e:9e:
ef:bd:c2:a3:f5:48:6e:ed:fc:d9:48:97:9c:46:5f:5a:5e:e7:
2f:c9:de:bc:d2:0d:6b:90:1e:07:14:58:f4:d2:a8:7f:44:e1:
ad:b6:09:9a:3f:a6:86:39:f0:1d:73:06:21:de:05:ab:54:ea:
25:e1:07:8b:31:27:79:cd:00:83:47:06:be:ca:7f:25:82:59:
37:e8:20:94:a3:d8:f4:42:f3:43:84:b3:35:58:0b:bd:16:53:
86:31:be:c3:19:65:ed:59:68:0c:48:e8:5b:05:0a:fe:b3:93:
d9:42:95:94:30:12:34:2a:43:38:9c:20:c5:cc:ca:37:09:5f:
cb:a8:2f:83:71:cb:9b:3f:d2:a9:3f:23:df:8a:ba:36:66:95:
44:3b:e4:dc:6c:1d:10:dc:81:c1:a8:82:b6:1f:7f:ba:e0:01:
ef:9e:80:86:3d:a2:f4:d6:45:18:79:85:06:19:8e:44:95:ff:
3b:37:2e:fe:9a:ac:d6:c2:59:64:59:13:54:c9:cc:61:ab:fb:
e5:73:5c:86:75:37:1d:28:64:1b:e0:7b:b1:dc:3a:1b:6d:c4:
6b:59:a5:3d:57:4d:2f:d1:05:33:04:09:2a:1f:d2:33:c1:9a:
95:52:22:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:29 2026 by rpki-client