This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier: /Dxsu0pBUx3EqvdFEdr+PTkGBn1JShPnvPSY4Dl2cJw=
Subject key identifier: 08:69:68:75:83:49:B8:DD:1A:4B:7C:27:24:1F:09:23:10:5F:19:AE
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial: 019C420FA5A84374A97E09BF4B3B30CE9853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 11:00:47 +0000
Manifest this update: Mon 09 Feb 2026 11:00:47 +0000
Manifest next update: Tue 10 Feb 2026 11:00:47 +0000
Files and hashes: 1: 1CsIbYboFfXpu9s0vWDMRaV6Mz8.roa (hash: aw9rHGkSfZiIUgRqcbBY40U13wLpn52XPqFkofANffo=)
2: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: j4TBdKEEhnLf0E/J3ZSpgP5Gap9Q7SfiXRhfZjDbwPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:a5:a8:43:74:a9:7e:09:bf:4b:3b:30:ce:98:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Validity
Not Before: Feb 9 11:00:47 2026 GMT
Not After : Feb 10 11:00:47 2026 GMT
Subject: CN=086968758349b8dd1a4b7c27241f0923105f19ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:49:77:d2:7e:fb:f8:3d:1a:33:90:d6:e2:
a9:6b:29:f0:c3:a8:24:9b:9f:1f:8c:c7:3a:04:ba:
40:1d:13:13:23:46:6c:bc:59:a7:86:06:9c:78:ce:
fb:0d:52:4d:77:03:07:bb:df:4a:0c:80:7c:07:f1:
48:35:14:4b:0d:5b:80:71:88:17:f4:6c:5c:28:2a:
54:33:18:84:4c:88:63:0a:17:d4:57:f0:a1:e9:76:
45:f3:70:54:2e:35:5d:97:4b:c6:1e:c1:9a:7e:79:
a4:a0:ef:6d:64:91:62:9f:e1:7c:89:e2:37:cc:e2:
1b:42:ce:75:3b:0a:a0:85:6d:d7:6d:f6:90:02:f2:
0c:7d:e9:c0:b0:33:23:cb:13:75:1e:58:b3:b8:d4:
5a:f0:c6:57:76:64:0a:63:d9:cf:7f:f5:56:ec:0c:
71:21:69:e4:aa:b7:5f:d5:90:4e:dc:93:62:10:68:
09:6d:5b:be:5b:ed:d4:bb:7e:af:3b:fc:5c:df:e5:
e9:bb:16:8a:a4:f3:d1:03:11:e2:d5:93:c7:6a:28:
83:a2:18:56:33:5f:c5:59:f1:e2:95:b6:40:16:51:
31:1f:ad:c3:8c:71:01:61:da:67:c7:04:19:34:4d:
8f:6b:59:ad:14:07:78:f6:4b:3f:b2:c0:15:6b:e9:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:69:68:75:83:49:B8:DD:1A:4B:7C:27:24:1F:09:23:10:5F:19:AE
X509v3 Authority Key Identifier:
keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3c:64:66:d3:96:39:d4:cb:fb:1c:2a:1a:ee:6c:55:69:8f:
0b:30:b2:92:9a:20:ca:b5:16:50:03:c6:a5:1b:81:06:2f:44:
32:8c:f5:8b:cd:f7:65:ac:ca:b4:f9:53:0c:25:f4:3c:e8:0b:
66:21:54:10:0d:30:8a:4c:5f:fc:63:62:67:94:94:fc:81:16:
74:65:f4:b9:30:e9:ad:9c:ec:a4:ee:15:d7:95:9b:f9:05:67:
d3:0b:6b:8b:26:f2:5b:23:3f:98:c9:a2:34:ab:df:b3:14:19:
5a:28:17:5f:93:e7:d8:8f:29:f9:c0:1e:2b:a2:18:7a:ce:d0:
b8:08:ce:57:84:37:a6:06:a1:b8:b3:82:49:8d:72:fe:f3:02:
4d:10:3e:77:73:68:24:4b:09:80:a5:4a:2d:8c:7a:36:e5:24:
eb:18:13:60:1e:f8:f7:2b:ae:07:07:d0:71:2f:e4:d2:8a:c1:
b3:a8:bb:b4:90:cd:aa:b4:0e:08:e9:2c:12:d4:b5:27:e8:c0:
28:68:88:c9:cf:5a:80:da:0f:8d:cb:ad:4c:3c:22:29:42:80:
a6:56:bf:e5:6c:bf:67:d4:d6:4d:4e:a3:e1:9e:29:c1:9f:e1:
40:bf:65:0d:31:a6:32:4c:1c:21:5d:65:e0:1f:d2:3f:dd:20:
94:c7:cb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:48 2026 by rpki-client