This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: M0U6wee0rh9v9gOokW5j5Nx0SiQ0Mb6nxBDLGoAMacA=
Subject key identifier: 68:DC:DE:BA:76:C9:75:FC:62:2E:2C:EB:14:58:5B:E6:18:E6:82:21
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019C41D8CFA79284FC88E6DD3E56EE33AA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 10:00:53 +0000
Manifest this update: Mon 09 Feb 2026 10:00:53 +0000
Manifest next update: Tue 10 Feb 2026 10:00:53 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: 64bkipwY/hWW9PAWzu/yU8HSi2E6rHAe4elER/LkHdM=)
2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:cf:a7:92:84:fc:88:e6:dd:3e:56:ee:33:aa:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Feb 9 10:00:53 2026 GMT
Not After : Feb 10 10:00:53 2026 GMT
Subject: CN=68dcdeba76c975fc622e2ceb14585be618e68221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:c6:83:8d:b4:63:a5:4a:a8:38:57:5d:95:
cc:12:38:5d:8a:2c:e1:00:41:30:d6:4b:08:d4:1c:
e4:3a:d6:d5:0d:c6:0b:c5:e4:fe:c4:33:30:1f:19:
e7:2c:e7:7c:5d:fe:c6:f8:ad:bf:36:a1:f3:21:e5:
c1:6b:5c:de:b3:35:82:e5:22:f5:e1:bd:24:32:a6:
36:4f:f9:9b:91:f9:2f:ad:fa:87:75:a7:2b:5a:eb:
2e:97:a4:34:00:21:46:f4:38:be:f6:a1:b0:0a:e4:
2c:14:68:36:0a:bc:8f:74:33:57:6a:b1:30:4a:40:
9d:73:b0:22:b5:3f:22:a2:d5:b1:1f:59:00:80:99:
27:12:0b:4b:d5:93:7a:c5:aa:de:c6:d8:f5:87:19:
38:64:bf:02:a1:df:6e:44:8f:ec:ce:8d:e0:7d:bd:
0d:f0:e0:20:dd:37:e0:a3:2c:2c:21:00:0a:f3:f8:
3a:b8:d5:a5:db:9a:a3:0b:27:91:3e:37:5f:12:f9:
f7:31:00:75:44:92:ca:12:ee:07:49:c4:a6:ed:39:
60:a5:03:d9:92:f6:38:22:ce:a9:4c:1b:20:0b:ec:
57:37:e6:e8:c0:14:bb:7a:d0:c5:85:21:59:87:95:
69:5d:03:21:da:fd:4b:3c:f6:4a:2c:f8:2e:fe:af:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DC:DE:BA:76:C9:75:FC:62:2E:2C:EB:14:58:5B:E6:18:E6:82:21
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a7:f4:e9:4b:be:48:4f:93:b7:54:05:8d:8b:da:3a:85:ab:
36:c2:e7:53:49:50:ee:35:8a:96:aa:72:d8:b8:29:af:58:8a:
c4:9a:d5:fc:87:59:f3:7d:21:42:76:68:49:44:2a:a0:1c:6c:
cf:d7:28:3b:dc:fc:a4:da:55:98:e2:25:ea:a9:9a:6c:55:3a:
60:0b:91:2f:2f:00:eb:ef:c5:84:19:9a:64:9c:be:51:80:0b:
e9:6d:af:31:dd:73:5f:4c:59:87:7c:18:86:8f:de:cd:a7:24:
34:ae:b1:1b:53:32:43:76:cc:c5:a8:2d:1e:7c:d5:0c:74:5b:
59:f5:8e:a4:07:13:c4:a1:76:d8:20:62:d7:96:96:28:42:d7:
e7:82:25:62:34:4d:02:09:ca:be:80:f4:26:fa:f5:7d:08:5c:
98:c0:ce:e7:1d:2a:b6:2b:9d:18:81:a6:0f:50:9f:93:d9:5a:
e3:f6:0e:a6:7b:a4:e9:eb:45:59:c8:a3:c0:7e:8a:77:8d:5e:
d7:d5:c5:74:4c:d6:db:35:c8:19:f7:ba:bc:17:2a:13:35:d6:
07:ff:81:8c:18:fe:2d:47:01:da:ad:d1:2d:ef:33:0c:9f:c3:
ae:9e:27:6d:c5:aa:8b:5c:11:6d:cb:1e:1f:63:81:af:54:4d:
ca:0c:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:25 2026 by rpki-client