This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: ENBjgbOJPmpP972XayUPDUOmz0b5i4UoyYMrPIFtnkM=
Subject key identifier: CB:FE:48:A3:7F:C3:4B:BC:48:AB:41:82:0B:15:1E:0E:B8:5A:FA:51
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 019C438FD41B7B7F6A90C12A858E5E8E497D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 0EAA
Signing time: Mon 09 Feb 2026 18:00:25 +0000
Manifest this update: Mon 09 Feb 2026 18:00:25 +0000
Manifest next update: Tue 10 Feb 2026 18:00:25 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: aOIEFW7XeK5a8yVLe7KofgCfbrieKzBVMzkwNa/UUvA=)
2: TgwXo42orCf9sT1fT8jrPa56jeU.roa (hash: GfcY69aJuiib4Ntp1/VS83/ai4i4eQHgc9DzBgB534U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:d4:1b:7b:7f:6a:90:c1:2a:85:8e:5e:8e:49:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Feb 9 18:00:25 2026 GMT
Not After : Feb 10 18:00:25 2026 GMT
Subject: CN=cbfe48a37fc34bbc48ab41820b151e0eb85afa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:25:f8:ef:70:64:24:9c:b7:46:41:c0:c0:
b1:ea:d4:c0:af:db:64:0d:ed:1b:3a:52:a3:50:8c:
a7:e7:54:aa:96:fc:48:1c:c3:a8:53:62:0e:82:ee:
7e:38:4d:3d:33:97:68:5a:3e:dd:62:20:02:1b:4b:
79:a6:04:a0:1f:58:d0:d0:a4:a6:7d:44:0b:a8:20:
60:2b:30:d2:38:a9:b2:14:2b:f3:9a:36:39:67:78:
d4:50:5c:11:84:f9:fd:c3:67:f3:5c:37:98:fd:ac:
97:68:6e:3f:a7:ba:ed:55:78:b2:83:50:91:80:25:
f5:cf:3c:8a:42:eb:9d:b3:81:61:78:62:ad:31:ac:
16:27:e5:b2:c8:0d:43:bd:c0:fc:2a:82:d2:55:17:
89:36:ba:52:c7:a0:2d:e3:68:d7:f8:72:05:a4:c2:
ef:88:a3:3a:0d:b8:99:79:db:1f:9b:5c:42:91:c3:
75:97:69:0a:e7:ff:b4:88:bb:a6:28:6b:78:4a:50:
02:7f:d7:79:54:cb:cf:c1:5a:bf:b2:8f:71:ba:51:
16:66:a5:0b:f0:04:3e:35:d9:e3:08:48:4b:dc:76:
4f:d3:e0:2e:8e:6e:56:c2:20:8b:a8:74:5e:eb:49:
f7:19:51:4d:1d:10:61:9d:7e:11:40:c9:08:6c:a2:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FE:48:A3:7F:C3:4B:BC:48:AB:41:82:0B:15:1E:0E:B8:5A:FA:51
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:ab:ec:42:dd:60:16:08:37:5c:7a:95:6c:37:d7:8d:18:24:
88:b3:f6:24:8c:1d:f8:3a:2a:c4:d7:ed:d5:90:c0:69:0a:b3:
a9:00:1f:79:e7:f6:6b:53:34:44:e0:43:41:f1:a7:a2:6f:6b:
5e:33:c8:c5:2f:c2:d5:16:05:06:d9:77:8d:32:0a:0b:3a:eb:
dd:64:1e:3d:b2:21:81:c1:1c:a7:73:3d:df:b2:24:77:15:5f:
82:f2:bc:87:1f:9c:b2:19:06:3a:36:0a:1a:10:31:34:c4:a1:
4d:c5:06:6b:61:61:49:19:43:d2:f0:2d:d1:54:d7:e4:50:a8:
57:ec:95:1f:9c:80:00:b9:00:ec:7f:99:27:99:da:a1:24:1a:
5c:1a:ca:06:34:da:2a:7d:73:59:88:f8:a4:c0:88:83:3a:fa:
7c:38:bb:43:e1:b7:f3:72:a3:98:a2:f1:00:82:51:b5:c2:ad:
cb:9d:09:ee:a4:31:47:68:dd:2b:e2:5f:47:1d:4b:31:c7:d4:
0f:af:ed:aa:7e:81:a6:61:7f:fd:e0:14:28:87:5f:fa:b2:0e:
4a:16:c6:7b:46:d8:1d:4a:9c:d4:f4:93:66:34:3d:d0:ff:38:
88:36:cc:57:23:03:36:de:46:f5:d7:e2:b0:a5:69:0d:43:2b:
f7:36:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:55 2026 by rpki-client