This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
File: m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json)
Hash identifier: Ozab3lg4kZA5nyNMNx42mJuihjcWM57+D+UQnXkHQR8=
Subject key identifier: B2:51:AF:30:25:B0:35:3B:5C:77:27:5A:6B:61:A0:C9:06:B3:AC:FA
Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
Certificate issuer: /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Certificate serial: 019C42B4839372EE6E03D454FC5047820507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
Manifest number: 02A1
Signing time: Mon 09 Feb 2026 14:00:52 +0000
Manifest this update: Mon 09 Feb 2026 14:00:52 +0000
Manifest next update: Tue 10 Feb 2026 14:00:52 +0000
Files and hashes: 1: eRcv9H0kj-nbfOiGSSrJz38IxLU.roa (hash: DewykMuWLgPE2A0H2gavCxDnLQ8/NmjjeAOgscMAs70=)
2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: eEMTROXxkMWiBwa3U3WtE9tOKUdABmhltxej6kxOqwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:83:93:72:ee:6e:03:d4:54:fc:50:47:82:05:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Validity
Not Before: Feb 9 14:00:52 2026 GMT
Not After : Feb 10 14:00:52 2026 GMT
Subject: CN=b251af3025b0353b5c77275a6b61a0c906b3acfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:da:93:b3:31:c9:07:02:5a:bc:50:6e:a9:
67:6f:ee:7c:6b:31:51:d3:77:fa:66:ee:c2:50:2d:
e8:60:87:9f:09:e6:35:70:40:8a:fe:0d:93:ee:87:
74:50:e1:e7:d0:58:28:15:50:05:b8:1d:e8:a0:87:
17:b0:43:43:08:14:20:77:6c:f8:97:9d:16:1e:33:
0b:67:fe:7a:11:c3:60:cd:31:56:2c:12:a0:09:cf:
54:e0:b0:0c:d9:eb:3a:9e:0b:6c:c2:d2:9b:98:41:
ad:4c:e2:e4:cc:17:72:a0:cb:69:e6:2d:be:b4:fa:
ff:c7:96:0b:ab:4a:8b:20:e6:eb:7b:0f:38:6a:a5:
67:20:5b:d6:e8:9e:b8:e9:d9:fa:30:00:27:96:1f:
db:ed:12:fb:19:d7:24:d8:e8:b8:73:8a:89:83:6b:
c9:96:bf:03:63:04:e5:9a:d2:4a:8c:c5:23:41:76:
40:c2:68:b5:89:f4:70:91:51:f8:d6:e2:49:a5:d8:
72:8b:77:fb:58:8b:47:6b:14:4d:4a:19:cd:d9:0c:
c4:d8:20:2a:d8:b3:52:47:b3:80:82:c0:dd:ec:1a:
92:69:b6:71:a3:cd:2c:5f:0d:b2:83:ce:0c:a2:74:
7c:b3:16:f5:2a:10:05:c2:a3:8d:c1:a2:21:47:87:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:AF:30:25:B0:35:3B:5C:77:27:5A:6B:61:A0:C9:06:B3:AC:FA
X509v3 Authority Key Identifier:
keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:13:b5:b3:cc:97:2f:50:6e:f3:29:17:07:db:b2:bf:a7:65:
90:06:84:c3:96:88:80:02:d2:35:f1:ff:37:b1:1f:1e:0b:8c:
47:9b:fd:6f:3c:81:5d:93:28:fc:42:9c:ef:93:53:26:de:ff:
66:c8:c9:25:5b:76:8e:53:0b:52:13:41:5b:3e:ac:b4:f5:2b:
55:63:5a:5d:5f:35:bc:2b:c4:fb:ea:48:01:e1:a5:bd:f0:84:
b6:56:07:f0:96:ef:06:a2:96:3a:36:33:56:82:72:70:68:5e:
2d:48:b2:ac:c7:4c:43:61:1a:ba:b2:a8:45:af:62:23:17:14:
39:99:c0:a1:fc:b4:73:38:e1:32:3a:85:90:97:4d:b5:dd:f7:
bd:36:4d:3d:d5:dd:19:ac:5c:fb:65:43:f1:b7:c1:24:93:36:
42:9e:94:54:03:7f:5a:f7:f8:01:86:ed:7d:9e:e0:f0:a1:d7:
d0:14:47:9a:e2:e3:66:cb:04:8f:64:ac:cf:9a:c1:72:06:23:
9f:07:2d:b8:8d:41:0a:c3:b4:fe:6c:41:27:af:62:ba:bc:77:
af:6a:dd:df:8b:f3:2d:18:58:a3:6b:0b:4a:ff:44:b4:23:69:
31:00:fc:dd:6f:98:6d:a8:28:23:8e:be:88:b2:18:0e:6e:eb:
73:8e:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:31 2026 by rpki-client