This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
File: 9QG54gYW1oa0BdqQavpZdjUGNkA.mft (raw, json)
Hash identifier: ThySPBUWiUxVppRUHcVEL1qk0Wqe657pIhYY6dUuJI8=
Subject key identifier: 9F:EB:C9:97:5C:3F:63:51:20:4B:AC:CE:A1:F8:2F:93:BB:B3:56:55
Authority key identifier: F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
Certificate issuer: /CN=f501b9e20616d686b405da906afa597635063640
Certificate serial: 019C4390C089D01B2F901DB14D816420C04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
Manifest number: 154C
Signing time: Mon 09 Feb 2026 18:01:25 +0000
Manifest this update: Mon 09 Feb 2026 18:01:25 +0000
Manifest next update: Tue 10 Feb 2026 18:01:25 +0000
Files and hashes: 1: 9QG54gYW1oa0BdqQavpZdjUGNkA.crl (hash: YlDj1BM7NLbOh4QUrX4ENAMX2FCiuKDnZuXJDgrxlaw=)
2: mEgDM3l5c0LrVuCqn477ft25k3w.roa (hash: KJ2JP42lCHcxJukTZAz4D69v5GnFU1eWXwSmVHNVnQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:c0:89:d0:1b:2f:90:1d:b1:4d:81:64:20:c0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f501b9e20616d686b405da906afa597635063640
Validity
Not Before: Feb 9 18:01:25 2026 GMT
Not After : Feb 10 18:01:25 2026 GMT
Subject: CN=9febc9975c3f6351204baccea1f82f93bbb35655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:d5:7f:07:f5:04:e7:96:26:0a:e1:65:d9:
ed:ef:ac:fc:f2:38:54:ae:ef:19:4d:d7:4c:91:3d:
fa:32:0b:81:a6:ca:78:27:77:9e:e1:9d:d9:67:e7:
97:d1:6b:4a:77:d2:7f:ad:d2:05:dc:96:f9:f4:50:
84:e6:d2:30:3a:93:32:57:be:9b:ed:d0:24:c7:82:
bf:f7:e2:af:83:3d:34:b3:a3:3a:e4:0c:f7:7e:d7:
c4:d9:5e:1d:3c:01:cc:fe:b4:a7:85:f4:fb:66:9a:
6b:c0:e6:5a:77:09:ff:4a:5a:30:c5:a4:3f:0d:49:
95:e4:a0:97:a1:f5:e9:89:35:c4:8d:53:80:ad:08:
91:8e:ee:ed:8c:53:df:24:b8:66:1d:43:50:5e:a1:
4d:8b:7a:61:62:0b:c9:79:80:94:04:e9:3b:55:e7:
72:24:21:a1:fb:dc:24:87:d5:d7:aa:00:b8:07:27:
d9:96:da:94:08:df:44:42:fa:0c:f0:4b:5e:ce:13:
1d:fe:6d:0c:9e:3a:28:1d:c9:20:a9:7d:08:f9:d8:
a1:48:7e:4a:df:9e:0d:b8:cd:53:09:b2:de:46:0b:
82:47:5d:63:47:b7:a5:74:68:0b:10:8a:a4:8e:0e:
c5:0e:5c:fd:fe:a2:40:60:b1:15:54:09:9a:57:82:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EB:C9:97:5C:3F:63:51:20:4B:AC:CE:A1:F8:2F:93:BB:B3:56:55
X509v3 Authority Key Identifier:
keyid:F5:01:B9:E2:06:16:D6:86:B4:05:DA:90:6A:FA:59:76:35:06:36:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QG54gYW1oa0BdqQavpZdjUGNkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7afce4-218b-47ed-95ab-75d5843aa489/1/9QG54gYW1oa0BdqQavpZdjUGNkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1f:2a:9d:c1:db:83:df:2c:4c:33:35:8e:6f:6a:13:b5:36:
ec:af:b3:46:dd:70:5f:90:67:a0:d1:7b:70:c9:85:ee:c5:98:
25:d9:9e:9b:c9:d8:2d:ef:b2:69:90:bd:d8:3e:5c:bd:e1:d9:
5c:8f:8d:a0:52:a3:6b:1d:c0:b0:46:8f:a9:a4:7f:c8:33:16:
6a:3e:36:34:02:e1:b2:88:3f:a8:18:b5:a0:7b:ac:0d:1b:3f:
91:91:a3:fd:33:38:22:08:c7:dc:26:8c:cb:d8:ec:0c:6e:bb:
30:9e:53:19:a2:8f:a1:8c:75:64:d5:ae:2b:87:00:54:e0:a2:
b8:28:1a:c0:58:d5:0b:80:b3:46:33:a2:07:7f:f6:0c:d2:f5:
ed:c6:ba:fd:5b:61:7d:9e:59:13:3d:26:88:93:54:da:c3:32:
31:ae:29:b5:ec:83:31:d2:ee:53:79:4d:b3:b3:6a:3b:4b:28:
ba:af:f1:40:5b:a2:12:76:cc:48:dc:36:ca:72:2f:f3:bb:10:
b2:3b:22:f6:e8:a7:e9:8d:fa:48:63:f7:4d:15:1f:6a:72:63:
bb:0d:e1:ad:d7:4d:42:5a:32:65:97:f5:77:7a:b5:5a:e4:dd:
d3:10:02:95:3b:1d:95:c3:66:1d:6e:bb:01:2e:25:59:5b:0a:
5a:f2:55:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:29 2026 by rpki-client