This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier: UEg0qM2OSlVKYsfvZTk5aulT0w/B5KgKLrsiAOv37+s=
Subject key identifier: 9C:0C:80:6C:E9:72:F9:DB:A4:22:10:07:2E:A4:B3:5D:44:F0:19:2D
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 019C43FE616700D36A0492788491CE7E927D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number: 17A1
Signing time: Mon 09 Feb 2026 20:01:10 +0000
Manifest this update: Mon 09 Feb 2026 20:01:10 +0000
Manifest next update: Tue 10 Feb 2026 20:01:10 +0000
Files and hashes: 1: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: nzdRxX3nf4cZi8J1yLcTr1fQTIyvEnGI5FY5Kn9BUe0=)
2: utqV7JvD2fPW5q4tE2tywy7q_gU.roa (hash: rBBPe7YgsDv+7/FRm135TSdCTknOZAtf1EPjWsG38hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:61:67:00:d3:6a:04:92:78:84:91:ce:7e:92:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Feb 9 20:01:10 2026 GMT
Not After : Feb 10 20:01:10 2026 GMT
Subject: CN=9c0c806ce972f9dba42210072ea4b35d44f0192d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:c2:c3:ca:8b:f5:41:10:db:ed:92:be:9d:
15:d4:06:60:95:8c:b8:d1:6a:6b:94:f8:0d:58:e1:
93:d1:02:f9:81:e1:27:a3:64:5a:7e:fe:ba:1d:44:
53:97:16:3a:d2:a2:eb:fc:eb:29:e5:8b:9e:31:74:
13:8d:e4:bc:4c:46:6b:f6:65:fe:a6:39:9c:90:f7:
9d:cb:ab:65:8f:1e:2e:6a:06:cd:3f:a9:e6:fe:ef:
81:a4:f5:c9:cc:93:3c:83:69:ad:05:3d:a0:6a:26:
7d:2c:5b:0c:73:6c:24:7a:55:89:a2:5f:5a:7e:a0:
b4:d6:86:79:18:70:99:b1:fc:f3:6b:b5:08:e3:5b:
7b:66:fd:1a:b0:71:c8:f4:7c:6d:df:6b:4a:7a:25:
ca:9c:54:ef:70:b5:e2:af:ab:9a:d2:84:fc:8f:4d:
25:7f:cd:0f:89:e9:0e:0c:fc:28:a6:66:96:37:93:
d3:bb:1f:a3:fc:ff:dd:a1:e5:c6:b4:06:39:2f:cd:
63:96:e9:e7:b1:29:44:45:5e:75:d2:54:64:dc:e9:
94:61:76:9e:63:97:6b:8c:ba:78:bb:d2:56:5d:16:
4b:a6:3d:d2:a9:44:da:bb:a6:09:75:e8:41:76:dc:
05:ec:59:ad:dd:c0:9c:48:7d:97:ce:cf:f6:1f:48:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0C:80:6C:E9:72:F9:DB:A4:22:10:07:2E:A4:B3:5D:44:F0:19:2D
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5a:2a:c6:25:93:30:20:59:ce:0c:e8:ac:6a:a9:ac:74:fc:
5d:ab:64:95:fe:e8:fa:3e:8d:63:a1:b2:05:b5:9f:79:80:49:
bd:ca:13:56:35:b0:16:9b:af:5d:9f:6c:a4:f9:5c:14:4b:1c:
10:62:23:cf:4e:94:1e:c4:62:e9:b6:80:59:9f:e0:38:dc:5d:
6e:9b:c1:3f:41:a0:64:4b:35:82:a1:9a:42:38:fe:3c:18:51:
24:80:c3:93:cc:9b:9f:00:47:33:9d:69:5c:f9:a7:9a:00:bc:
ed:62:a2:2e:01:0e:e4:94:3a:85:b2:06:4a:13:f6:77:d7:b2:
b6:cd:69:c7:9c:ab:51:f5:b3:32:bb:52:f0:aa:70:57:a2:4a:
7c:18:24:56:29:5c:8c:ef:2d:88:41:dd:83:76:5c:86:16:37:
cb:2a:27:31:6e:ba:1a:8f:ee:38:98:6a:0b:30:f2:56:e6:4d:
8d:54:e1:c2:41:20:1a:d6:3e:bf:a8:66:f0:3d:60:72:11:31:
8b:2d:5a:3f:68:94:d2:c0:a8:66:89:0f:e5:8e:0c:76:26:1f:
81:7e:bb:f9:7e:27:b9:b4:e0:97:d8:59:a6:b5:93:42:a2:2a:
f9:ef:d0:fa:f5:b6:96:63:75:94:ac:7c:59:31:5c:e1:05:9c:
50:62:9d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:26:33 2026 by rpki-client