This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
File: M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft (raw, json)
Hash identifier: dDPV4RIjIKoBPA4rXZ0vnikehPArSUdEOK2RydAyzpM=
Subject key identifier: EB:64:17:E5:92:CB:A4:CF:B7:FE:C5:30:63:13:DA:01:D2:F8:EB:CA
Authority key identifier: 33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
Certificate issuer: /CN=33d2d885477d0280264e458eb071f45d91691520
Certificate serial: 019C42EB8292727D5DA2E58DB85F023EFB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
Manifest number: 1776
Signing time: Mon 09 Feb 2026 15:00:56 +0000
Manifest this update: Mon 09 Feb 2026 15:00:56 +0000
Manifest next update: Tue 10 Feb 2026 15:00:56 +0000
Files and hashes: 1: M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl (hash: fIHE0AmRZiFVS1lc+xICU4gjZkq6Lpzjr5AYm51JZas=)
2: oY8wzqxSZtFw6pVYs4NFV60daUg.roa (hash: DFgw9sxWQdsrNBj4RrkibFIZhSj9mHDN7Zn+MkePlLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:82:92:72:7d:5d:a2:e5:8d:b8:5f:02:3e:fb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33d2d885477d0280264e458eb071f45d91691520
Validity
Not Before: Feb 9 15:00:56 2026 GMT
Not After : Feb 10 15:00:56 2026 GMT
Subject: CN=eb6417e592cba4cfb7fec5306313da01d2f8ebca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:6a:6b:85:cc:6b:7f:f6:70:a3:10:27:b5:
ea:bd:8a:79:b7:ae:a9:a6:1c:35:6c:b5:51:06:21:
39:6f:7a:c0:fe:36:ca:be:cd:6e:2b:a9:69:8d:c0:
48:4b:95:db:1a:3d:72:ed:b2:75:ee:0e:8b:28:93:
b5:1f:d1:cf:36:c2:5d:43:0d:58:c9:78:69:82:ae:
09:d1:cf:17:6f:50:97:22:b4:cb:d1:ea:dc:c5:b3:
78:57:e2:65:f1:a3:1e:41:78:b9:82:9c:4d:b3:81:
53:7f:58:5b:0f:18:a6:75:4c:37:cd:14:52:18:99:
f5:53:db:80:b8:5f:cd:c0:4f:16:9a:44:3c:f8:ca:
e5:0a:f0:27:2d:7e:37:0f:1a:de:f8:44:36:c3:b0:
14:f6:c0:39:5c:bf:22:63:ac:81:12:f4:04:e7:c9:
7a:90:d4:bb:e5:23:31:80:71:d8:32:5c:e2:85:0f:
01:2d:80:9a:ec:16:00:66:8b:8c:db:36:aa:e4:b0:
ee:f9:a3:f3:d7:4d:59:52:ce:f1:01:2f:3f:97:4c:
e3:69:42:5a:2e:9e:71:72:2e:52:e7:e0:1d:81:02:
ad:33:ba:4a:e9:e3:f2:19:f5:20:f2:f3:5a:ec:22:
9a:a1:a7:09:21:f8:4f:81:47:67:29:ac:93:6f:5c:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:64:17:E5:92:CB:A4:CF:B7:FE:C5:30:63:13:DA:01:D2:F8:EB:CA
X509v3 Authority Key Identifier:
keyid:33:D2:D8:85:47:7D:02:80:26:4E:45:8E:B0:71:F4:5D:91:69:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9LYhUd9AoAmTkWOsHH0XZFpFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7159eb-dd37-44ad-83e2-b26412aeb3ae/1/M9LYhUd9AoAmTkWOsHH0XZFpFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e6:f3:cd:8c:4f:25:35:71:1b:24:e9:2f:15:71:9f:7f:de:
7e:e5:8c:30:0f:f7:dd:ec:5c:29:5d:1b:d4:8b:6f:5c:0a:42:
2a:31:7a:1b:74:51:87:0e:9c:54:e9:c6:5d:1c:41:96:51:01:
2a:7f:9c:b8:07:d2:4e:2b:b3:0a:3e:3b:f3:4f:d4:7f:31:c3:
54:9a:44:e4:34:8a:9d:1b:73:ef:53:b2:d0:72:80:71:20:fb:
49:c4:2f:4a:49:69:0a:fd:89:82:17:b9:b5:1d:7e:d4:ab:4d:
d9:4f:21:8b:14:d0:0e:17:73:c7:a0:82:ed:eb:f3:74:5e:86:
03:da:72:ec:69:26:e4:7e:42:cd:83:f7:93:b5:7c:2d:cf:b9:
c1:5b:0a:9d:f1:15:2f:a3:79:7c:35:58:a8:83:c7:d4:0b:e3:
e3:a0:ff:01:03:02:86:d3:58:f9:0d:34:80:8a:58:99:93:00:
5b:cd:a9:ea:1f:06:fe:6a:eb:87:c5:39:0e:32:2b:2e:f7:a3:
4c:8a:f7:44:ad:a2:16:8f:5b:1c:d2:4b:18:fe:b4:52:8b:85:
b3:69:81:70:65:a9:ce:d3:1a:1d:3a:f2:37:da:ad:f4:c2:9e:
8a:2e:c1:d1:ad:b2:c5:86:4b:4c:62:37:ab:d4:4b:b4:50:15:
a5:0a:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:34 2026 by rpki-client