This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: hJSgLnpZ0+xAw699+Ve5m6sKsr7MjurL4+z9VFTuBKo=
Subject key identifier: 81:30:56:73:58:AD:C8:7D:A0:E9:1B:D2:C2:27:E8:2A:50:6A:30:19
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 019C41D85E1FBA81D94F7DD66A03929FB0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: 04BB
Signing time: Mon 09 Feb 2026 10:00:24 +0000
Manifest this update: Mon 09 Feb 2026 10:00:24 +0000
Manifest next update: Tue 10 Feb 2026 10:00:24 +0000
Files and hashes: 1: Dpnv4EUcYX-n8qPbHdIk5R_FJW4.roa (hash: 358iegoNsmqH7oFOcFPF51BllDNQ4FiGmVnnkcdD73M=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: ZM5HeCWSiQtO4aPvTa5LqqcbwR3cp48Ltqo08qx8DMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:5e:1f:ba:81:d9:4f:7d:d6:6a:03:92:9f:b0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Feb 9 10:00:24 2026 GMT
Not After : Feb 10 10:00:24 2026 GMT
Subject: CN=8130567358adc87da0e91bd2c227e82a506a3019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:12:2e:29:03:3c:30:2d:6a:d9:3a:70:e7:
78:2a:6c:db:0a:84:30:45:04:d4:0b:48:4e:c3:f4:
b6:28:ac:42:34:73:0c:24:d1:dd:d2:a8:8a:34:9d:
1d:12:a4:cb:32:35:67:95:22:c5:29:99:c0:a5:13:
65:06:95:cb:6d:37:6f:6f:7b:cd:df:4b:0b:a6:cb:
62:22:4b:76:a8:c2:3f:ab:8c:1c:69:0b:eb:5b:ca:
82:af:20:42:94:b6:cf:9e:de:86:8e:a7:d2:45:7a:
e1:5e:67:2f:c9:f3:fc:06:fa:64:6d:ad:c4:64:c4:
94:53:ce:4b:34:20:22:17:66:f8:0d:68:1d:11:3a:
2c:16:b5:7c:e8:be:0b:a4:7b:5b:5b:8b:83:1e:3f:
26:d8:44:6e:4c:de:14:f8:17:f5:b5:f1:9a:8c:af:
e4:07:a7:c9:55:28:93:7a:f4:60:be:42:81:a8:56:
5b:df:0b:14:85:e5:e8:bd:33:01:22:27:4e:26:c6:
67:11:a6:d9:d2:fe:e2:03:56:0e:9e:16:5d:b9:4f:
85:c9:f4:2b:b3:c3:b1:ef:34:c9:59:8e:ba:70:77:
db:ea:6f:51:db:bf:02:92:2e:ef:33:af:d3:90:c6:
25:97:0c:99:dc:23:04:ff:8d:d6:53:d7:85:b3:46:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:30:56:73:58:AD:C8:7D:A0:E9:1B:D2:C2:27:E8:2A:50:6A:30:19
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:01:5f:4c:c6:4f:36:c1:d9:db:a7:40:fd:40:05:83:2f:4e:
ff:4c:c2:5e:b5:f0:97:87:8e:0f:c9:0c:48:ec:61:16:40:8b:
03:89:18:12:8f:c4:cd:cd:78:f4:af:56:cf:35:0d:82:2d:be:
f5:0d:97:9c:74:26:35:f5:ec:ac:b5:5f:33:e3:0e:24:0f:15:
3d:fe:f1:18:ca:76:82:68:b1:1f:2a:8e:60:43:e0:4e:13:e2:
35:12:da:83:cb:99:13:8d:47:47:0d:f7:ba:bd:60:76:a2:c2:
bc:8a:f2:c9:7b:0c:b8:f4:9c:cb:8d:2a:44:f1:59:5b:c2:82:
dd:81:ab:bc:0a:c7:78:50:25:3e:89:d6:16:60:76:8c:f8:21:
2a:a8:dd:98:27:c4:40:67:b8:01:ee:3f:b0:6e:3a:cf:6a:7c:
fc:72:12:49:d7:7b:06:ee:25:33:a7:77:2b:f2:a3:70:6a:c1:
77:6a:ca:fc:07:c9:38:82:17:e4:0a:91:77:6b:81:3e:17:9a:
f5:4b:f8:d2:b7:40:99:80:4f:0f:b5:57:ff:0f:ed:04:ca:02:
4c:8e:08:23:21:1f:bd:6a:04:ad:de:d2:5c:80:1a:3d:32:b2:
b4:bb:31:f8:39:45:c6:5f:b8:3e:57:cb:2d:a1:7a:9b:7b:75:
ec:4e:07:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:57 2026 by rpki-client