This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
File: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft (raw, json)
Hash identifier: oyuTACmsNXren902keBCOcArWzVskN4+Tbz5oV/WxaU=
Subject key identifier: EB:1B:52:A8:1D:8D:DE:B3:C3:BE:A8:9B:75:34:4F:0A:46:4E:67:8D
Authority key identifier: FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
Certificate issuer: /CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Certificate serial: 019C427E154B30746FE2CEEA8BD2447122D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
Manifest number: 0F18
Signing time: Mon 09 Feb 2026 13:01:25 +0000
Manifest this update: Mon 09 Feb 2026 13:01:25 +0000
Manifest next update: Tue 10 Feb 2026 13:01:25 +0000
Files and hashes: 1: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl (hash: fMAwWq+mzymeZEv4U13ykjgSOQuCELWuipRGwGNrOrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:15:4b:30:74:6f:e2:ce:ea:8b:d2:44:71:22:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Validity
Not Before: Feb 9 13:01:25 2026 GMT
Not After : Feb 10 13:01:25 2026 GMT
Subject: CN=eb1b52a81d8ddeb3c3bea89b75344f0a464e678d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:59:b1:b7:56:75:a9:2a:9c:01:f8:d6:56:
11:0c:df:62:06:24:6f:06:9f:2b:b2:3a:59:6e:3e:
62:f8:2d:2f:55:ed:2e:9d:b0:61:1a:dc:ba:cb:53:
4e:27:9b:2d:91:e5:79:94:82:2a:76:15:b9:f7:94:
44:6c:c5:61:c5:10:14:f1:bf:08:e2:c0:5f:04:30:
76:b9:73:f2:03:66:d4:c7:fb:39:a3:90:34:88:e0:
fb:1a:31:fa:c5:5a:df:da:26:ad:b9:42:22:57:5a:
bc:56:00:2d:c1:c2:3d:4a:ac:c4:e0:c6:bc:ff:db:
1a:71:18:4f:99:ed:7e:ab:92:86:21:b2:15:3f:19:
a8:12:d3:75:8f:69:fa:e0:b8:34:7b:ac:15:dd:c8:
58:81:29:6b:48:be:3e:98:62:5a:b8:92:90:c9:e2:
f2:ea:28:1f:58:1f:76:85:09:01:46:1e:96:26:c1:
fd:88:8b:ab:b1:3e:80:0f:65:49:b3:69:00:c2:6c:
47:0c:8c:f2:82:a0:9e:c5:f7:1d:72:47:37:3e:9c:
89:48:a9:b2:f6:67:cf:8b:d0:f2:1a:05:fe:6b:81:
94:e7:9a:6b:9c:11:13:72:85:37:67:e1:d1:52:d1:
f2:d7:2d:51:f0:bb:36:77:e9:c1:0b:19:29:ba:55:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:52:A8:1D:8D:DE:B3:C3:BE:A8:9B:75:34:4F:0A:46:4E:67:8D
X509v3 Authority Key Identifier:
keyid:FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cc:98:44:1b:1a:8b:68:22:54:db:df:be:eb:66:56:c4:94:
84:10:58:ec:21:37:0d:79:29:b7:8f:2e:6a:b9:2d:3b:fa:6b:
3d:f8:0e:f5:ee:0e:2f:fd:65:44:10:8b:6c:ee:49:1a:f8:3d:
a4:94:bb:13:f6:01:91:84:af:06:d6:d1:6c:77:88:49:da:aa:
76:64:2a:aa:1d:4d:c6:ac:85:da:fe:44:67:08:85:fe:57:c3:
a8:18:85:59:b6:f3:76:76:f5:96:f3:72:c3:b3:b0:38:4f:e2:
95:6d:28:e4:d7:84:89:c6:3c:b9:dd:0b:a3:0f:cf:d6:69:ef:
7d:40:5b:83:4a:84:4a:7c:e8:a6:86:27:9b:40:a6:c1:9c:a6:
7f:a9:08:bc:d9:c8:4d:34:01:f7:a7:02:c6:86:56:bd:09:2b:
ab:49:43:43:46:8e:66:3e:4b:52:8d:26:5c:9e:9e:a0:49:1a:
66:39:a2:0f:9c:02:2a:a2:1d:a9:70:99:69:22:e0:d3:b9:b0:
fc:4d:df:25:4a:2b:63:03:b9:0d:ab:fb:80:85:1a:1a:b5:e9:
b9:81:e5:be:e0:38:e5:dc:67:98:b1:7e:27:73:10:02:0b:b7:
fd:cc:e6:ae:4d:68:b5:9f:b1:59:56:c2:39:37:a4:f4:06:23:
59:73:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:46 2026 by rpki-client