This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: uHHOk40BPClDtCGXLdS368MgsXAf8dVUdwUCpB1d5i8=
Subject key identifier: 48:7E:7C:46:45:38:2E:B0:C5:F9:B1:2E:CF:A9:B9:EA:D5:6F:4A:49
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019C4246952CCE03A19638E8A99EC59C9CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 08F9
Signing time: Mon 09 Feb 2026 12:00:47 +0000
Manifest this update: Mon 09 Feb 2026 12:00:47 +0000
Manifest next update: Tue 10 Feb 2026 12:00:47 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: 9PkrajJrdaahuP8+GcH7srbMP3ReuZs2KhiT0GmziFU=)
2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:95:2c:ce:03:a1:96:38:e8:a9:9e:c5:9c:9c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Feb 9 12:00:47 2026 GMT
Not After : Feb 10 12:00:47 2026 GMT
Subject: CN=487e7c4645382eb0c5f9b12ecfa9b9ead56f4a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:6f:a4:e9:db:29:dd:28:e3:06:b6:44:c6:
7c:25:fe:e1:28:9e:d3:57:86:a8:57:18:56:70:3d:
d1:16:88:6b:26:a9:99:05:da:d6:56:88:f2:03:9e:
6b:e1:c0:ac:99:8e:ce:0b:69:fa:9b:75:35:9e:e9:
6d:70:dc:c6:cb:62:1c:cc:d2:31:49:59:e4:fc:3c:
61:28:a0:c6:c7:84:c7:ba:6e:f6:84:46:f6:af:8c:
20:c5:2a:72:dc:84:6a:58:5a:67:6a:da:e2:df:f8:
70:71:80:f0:a6:3d:84:97:0c:c1:44:bc:ae:58:c5:
ba:fa:58:fb:30:17:7f:81:09:56:13:ad:2c:bf:30:
8e:88:85:ba:e3:44:e0:b0:c2:d6:30:07:fd:2c:86:
21:d4:0e:e7:b9:6e:6e:88:c7:1e:8b:8a:06:30:33:
82:d3:17:9d:2a:41:07:ea:12:1e:0f:75:66:9c:75:
f8:19:ec:b9:a0:3b:77:18:af:14:3b:c2:92:41:1d:
aa:1c:ee:3f:a1:cb:dc:0d:0c:32:dd:df:92:92:7d:
b8:8c:1c:01:b6:74:e4:3c:bd:49:18:5d:11:aa:b8:
2b:67:96:ce:d2:f7:28:bf:9c:ef:4e:56:1c:57:0c:
c8:2b:05:92:a3:de:bb:62:80:42:91:be:15:f1:d9:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7E:7C:46:45:38:2E:B0:C5:F9:B1:2E:CF:A9:B9:EA:D5:6F:4A:49
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7f:18:8d:69:bb:0d:0f:9b:9a:c3:51:12:7c:80:81:25:63:
81:b0:50:6a:50:4c:41:45:0b:d8:40:99:73:ea:cf:e2:2b:de:
2d:85:4b:48:0a:84:de:0a:25:05:e2:d4:ee:2b:54:3e:ac:0e:
22:fd:f9:26:95:c9:b2:ab:3c:e1:1a:a5:30:f6:4c:c1:ef:59:
c5:5d:e9:f6:62:34:8e:43:92:54:90:dd:02:6b:03:fb:14:e2:
07:1e:25:56:f9:5a:75:f1:54:25:e0:e8:de:dc:27:d2:de:0a:
03:02:ac:d8:20:fc:1f:8c:68:1b:3c:d5:4b:d1:b0:f6:4c:cb:
a5:30:19:45:43:33:a7:4f:ec:84:a7:49:36:16:ea:c7:7c:dd:
b8:b5:52:e1:40:c5:31:8c:68:62:5b:6e:9f:e5:fa:c6:f3:29:
45:85:45:67:ea:06:5b:ab:b6:28:77:d2:bb:16:d7:b1:e8:2d:
45:17:88:be:c5:15:ef:d7:0d:1f:5b:27:d3:68:f1:c8:e0:b4:
ae:d1:b3:84:26:d6:0d:54:16:f0:90:4a:9f:98:d4:07:b8:26:
ec:34:f1:55:02:a1:e4:aa:3d:77:55:9d:98:1a:ad:5d:f7:83:
a1:a7:eb:5b:9c:d3:6c:b2:fb:61:f6:42:ee:7e:09:9d:79:e8:
d2:92:fb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:34 2026 by rpki-client