This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: iF+oVN8w0MBC7OeJaynO947lEp0lUlaOGgXMRwAN4G0=
Subject key identifier: 99:E9:8D:EB:6A:48:79:9D:7F:70:80:8C:8B:B4:3E:E4:1B:A6:E2:DA
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 019C41A23B9B5C8A79B85FC974762705DAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 09:01:16 +0000
Manifest this update: Mon 09 Feb 2026 09:01:16 +0000
Manifest next update: Tue 10 Feb 2026 09:01:16 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: RJx5W9ccl2SEPqgxnrey9Mfb0RAHyJORt4yv46XrbyQ=)
2: CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa (hash: P8wfVUsJaZ53GQVWp0JenO6tbrEXgFSMeFb1uzEMGrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:3b:9b:5c:8a:79:b8:5f:c9:74:76:27:05:da:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Feb 9 09:01:16 2026 GMT
Not After : Feb 10 09:01:16 2026 GMT
Subject: CN=99e98deb6a48799d7f70808c8bb43ee41ba6e2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:b9:00:5b:73:37:67:a5:f5:e3:9f:4d:ba:
24:7b:cb:d2:26:0c:22:49:6f:b2:27:27:9e:19:fd:
58:89:c8:07:83:b6:e9:a4:14:59:31:bb:74:c1:9d:
08:9f:39:87:76:12:2a:5c:6b:8f:f8:e4:f2:8a:63:
c0:3c:fc:f7:de:cf:51:7b:ec:0e:38:17:ee:78:b7:
aa:a1:8a:ff:61:5f:c0:d6:15:2c:40:f6:3f:de:c8:
34:4a:da:8a:6e:c3:65:56:3c:bc:af:29:7d:c1:ef:
e0:e4:d8:8b:ba:b8:aa:1a:3f:dd:a7:5e:41:f1:4a:
20:61:f9:44:94:ee:9f:e9:9b:c1:1b:5f:b0:9e:70:
14:b8:8a:ca:5e:8a:ef:da:81:64:41:ec:bf:a1:8a:
7d:17:77:1e:31:59:34:ab:78:c2:5e:f2:e0:22:8a:
20:14:b1:92:d0:93:6a:c1:44:4b:8e:17:fd:66:c2:
e7:69:7e:86:e6:cd:8b:69:8b:70:13:52:44:6d:6d:
3e:40:65:8c:6a:29:fa:37:6a:62:8a:fe:23:f7:04:
43:00:1c:89:70:6a:2a:fa:03:c3:bf:a4:78:fa:a5:
58:a7:73:5d:47:e8:17:15:cf:d9:21:19:4f:7a:08:
a9:4b:5b:4f:a3:ce:e5:ce:a9:e5:2f:3e:6b:4e:fc:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E9:8D:EB:6A:48:79:9D:7F:70:80:8C:8B:B4:3E:E4:1B:A6:E2:DA
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:57:fb:dc:e6:39:98:cd:06:cf:5d:5f:e8:5c:62:ea:f3:b6:
31:0a:bf:b2:aa:42:86:41:ef:cc:55:8e:29:a0:b1:5b:1a:f8:
98:9d:fb:44:55:59:b5:88:64:3b:ae:fc:eb:9f:60:1a:59:d2:
15:1c:02:e0:86:78:dc:c1:a8:2d:39:8b:de:64:68:7c:68:44:
54:ca:c3:ab:5b:22:6a:ed:73:3f:d8:a7:1c:09:bd:ed:ca:22:
1b:d4:a7:03:d4:c5:da:1e:4a:48:d9:fd:e3:71:5a:3d:bb:08:
d1:7c:13:db:b8:cf:46:77:72:af:1b:e3:0d:9f:8d:d2:0b:b8:
ba:be:8e:98:32:e2:fe:fc:c9:e8:2c:de:7f:e5:94:6e:2a:ac:
13:9f:95:b1:6c:e4:fe:42:4b:79:d6:a1:b5:e3:72:82:e7:b5:
f7:a4:7e:aa:60:80:c4:c0:36:82:e1:9a:6d:27:b1:44:f7:2b:
a2:23:76:f1:d5:f1:26:fa:6c:63:e7:d8:01:26:71:f2:eb:0c:
74:84:ec:12:dd:95:f1:25:12:c5:2c:e1:8d:34:08:d8:c5:d3:
18:36:70:b6:6f:50:54:32:5f:a3:fd:80:bc:0f:47:c5:e7:39:
0f:49:16:cc:95:9f:8e:5d:0a:10:45:35:7d:c0:a5:3e:19:4c:
ef:b2:34:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:41 2026 by rpki-client