This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File: MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier: CiUVz6W7X53XQOGzrX+9ZkBQnDWuT/I3432CDAVZzEA=
Subject key identifier: C8:1E:3C:AB:38:1E:56:2C:A5:6E:5E:A0:2A:C1:14:24:23:37:A2:E1
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer: /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial: 019C427E2B36A94D4175A54B2E06BBB88179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 13:01:30 +0000
Manifest this update: Mon 09 Feb 2026 13:01:30 +0000
Manifest next update: Tue 10 Feb 2026 13:01:30 +0000
Files and hashes: 1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: o9Vy2Exw2Zlfy2KX9lE0Iy2DOmVEJRUyfOIQLPX1bS8=)
2: qmzQIGHE-UPS6KYpQ-lO-Kh-fAA.roa (hash: Nfcf0dxf81UBVMjoGjSg559+Hju5Dln2RKJKCrFeGVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:2b:36:a9:4d:41:75:a5:4b:2e:06:bb:b8:81:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Validity
Not Before: Feb 9 13:01:30 2026 GMT
Not After : Feb 10 13:01:30 2026 GMT
Subject: CN=c81e3cab381e562ca56e5ea02ac114242337a2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:16:e2:f9:f6:76:0d:c8:74:cd:d3:66:9c:
c3:db:38:5f:e6:4f:62:da:fe:e8:a0:8e:5b:40:54:
61:58:8d:3c:43:fe:fe:c8:c3:75:5a:d2:83:c0:4c:
a3:54:c0:55:09:a6:6d:84:eb:5f:cd:5d:4e:fe:b9:
1d:38:06:9b:31:3a:3c:12:ed:46:d8:ae:bf:34:73:
c8:2e:81:bc:ec:25:b5:db:05:ee:cc:e1:22:05:91:
85:05:23:ec:1f:29:92:f3:87:25:f5:28:2f:56:ff:
af:c9:f0:ea:73:d4:3b:4d:d0:5e:39:81:f3:c6:a1:
12:14:a6:ce:84:fd:27:c5:69:a0:27:f6:6b:22:8b:
1f:7b:ae:77:dc:13:ef:f7:38:09:bc:5d:b5:06:82:
4a:81:e5:07:3a:59:9c:6b:92:73:46:90:d5:f4:c9:
8e:d0:29:45:30:ae:9a:1d:9d:01:37:9a:03:90:fc:
a4:3f:92:37:8e:59:73:03:36:bf:4a:4a:22:f2:94:
c5:90:c3:7b:a5:38:e9:2a:e3:a9:25:45:3b:29:7c:
b6:b4:96:25:8c:a1:9f:2e:3f:5b:c2:b3:ad:ce:80:
4d:c2:76:66:f9:c3:c2:2b:6a:4b:77:47:67:a0:1e:
ef:41:bc:d5:9f:65:0f:3e:71:83:30:55:2b:6a:0d:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1E:3C:AB:38:1E:56:2C:A5:6E:5E:A0:2A:C1:14:24:23:37:A2:E1
X509v3 Authority Key Identifier:
keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:93:78:ca:69:2f:af:70:c7:d8:20:d8:99:ab:ac:8e:e6:13:
43:0a:bc:22:e3:ad:29:94:4a:c6:cc:2b:66:d8:4d:d1:56:e4:
9b:20:bf:21:81:5a:26:1e:36:48:bd:db:9c:aa:6c:1d:57:94:
b7:61:53:70:71:d4:ad:4e:87:13:20:6a:73:40:6e:28:d6:92:
04:2d:09:63:bf:22:8c:79:b7:6f:b4:8a:c0:7c:d6:49:ab:fc:
af:3c:0a:ad:ec:fe:45:73:39:5e:59:c4:4a:36:eb:2e:21:70:
d0:68:fc:2c:48:46:cb:c4:2f:26:36:a5:af:85:4d:3a:37:4d:
b4:68:e7:20:63:11:3a:ed:32:92:33:64:ca:36:e6:d2:bf:8c:
fd:fa:b5:49:90:d2:ef:8a:4e:c6:46:32:b6:f7:c9:3b:71:4f:
ee:06:ab:d1:30:a5:75:c4:8b:dd:e2:40:a3:d2:51:b0:b6:99:
5d:97:89:f3:c6:58:7e:5c:cf:0f:56:b6:6f:98:00:bc:ab:4a:
38:7e:5d:cf:6a:e1:d3:3a:5d:32:5f:90:52:ef:5b:5d:b3:9a:
1e:8e:fa:ba:b4:2c:b0:cb:a4:0d:43:0c:64:1d:2c:5b:3f:f0:
3f:00:fc:74:ae:1a:a9:1b:05:7b:85:0e:a4:4c:47:61:18:1c:
aa:b3:92:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:01 2026 by rpki-client