This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
File: m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft (raw, json)
Hash identifier: ywy5VZTFQu6RPfjiEBV+gU6Pi7Xuuyv2bvyp0FxGEIs=
Subject key identifier: 70:BC:85:B4:0E:FB:ED:B0:83:A6:42:19:A6:CD:35:29:F8:F7:48:F4
Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Certificate issuer: /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Certificate serial: 019C43226F94D280711D0CBB640555AD8ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 16:00:56 +0000
Manifest this update: Mon 09 Feb 2026 16:00:56 +0000
Manifest next update: Tue 10 Feb 2026 16:00:56 +0000
Files and hashes: 1: ePJZJNhpApp5V_50Q_hot0iS_wU.roa (hash: QR4bO1N17271c13+CycjZX16iUUkNqGxGT5DNiVyLsU=)
2: m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl (hash: xcVfcGOR9eciB06i159FfBC9SWSG1+5/lmHGphFcu1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:6f:94:d2:80:71:1d:0c:bb:64:05:55:ad:8a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Validity
Not Before: Feb 9 16:00:56 2026 GMT
Not After : Feb 10 16:00:56 2026 GMT
Subject: CN=70bc85b40efbedb083a64219a6cd3529f8f748f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:8b:8a:86:37:dc:3d:4b:99:8d:fc:8b:f2:
46:5a:1f:8c:8f:0f:93:95:7b:be:7f:45:d0:c3:15:
9d:73:74:41:2c:4e:35:73:fe:7e:a9:da:8e:be:bb:
4b:82:fa:4d:b5:4a:d7:fb:8b:4c:f7:2e:19:cf:44:
b5:6f:ac:44:44:47:ff:46:5f:b6:52:29:fc:3f:e3:
3a:66:7c:9b:b5:b0:91:c6:46:42:4f:2a:69:28:53:
73:2f:62:68:6c:c2:c9:7e:77:1c:07:da:02:c5:b6:
e1:4e:90:3f:1f:55:41:83:2f:ae:14:9b:87:18:fa:
c7:5e:39:5d:a3:8c:fa:85:b1:a6:af:01:ed:ac:b8:
27:6c:ee:8a:1e:6b:93:74:6c:a0:40:cd:29:23:04:
93:46:a6:5a:db:6a:02:d3:27:e3:1d:10:3e:35:33:
26:59:73:d2:6b:f4:72:35:10:f8:21:22:4a:0b:99:
32:c2:a0:30:df:f8:99:a0:28:45:10:e1:79:d1:9e:
8a:46:b6:1f:2d:dd:8a:c8:4c:60:82:f9:0c:c3:cf:
d8:bb:f3:b7:e7:64:f5:32:56:e7:be:b6:74:96:57:
3c:24:aa:f4:b0:cb:c4:16:14:a9:d6:42:b9:07:65:
07:4b:e2:a4:be:8b:3d:5f:c7:35:37:4d:ee:d5:11:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:85:B4:0E:FB:ED:B0:83:A6:42:19:A6:CD:35:29:F8:F7:48:F4
X509v3 Authority Key Identifier:
keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:89:9f:56:d1:ae:ff:86:d1:60:99:3c:60:47:cc:47:2c:2c:
f0:a1:a9:f1:7e:cc:c0:d2:2d:ec:f2:84:54:03:68:6b:97:b9:
4e:09:29:5a:fe:85:f5:df:c0:53:70:ee:c3:4a:17:2e:7e:d4:
15:33:b8:d9:cd:ed:41:73:be:a5:49:b2:b4:4a:4b:0d:8a:07:
12:27:55:52:81:92:e4:76:a6:f7:54:c6:a8:6b:27:87:8b:6f:
00:00:92:2b:78:f3:66:7a:84:96:83:a2:b7:ee:a8:2d:1d:4b:
41:4c:3d:54:ef:7b:f7:a6:c0:79:8a:a2:b5:8a:6c:70:76:03:
d0:42:f0:0a:be:9e:c9:6d:0f:06:d4:fd:c9:63:27:de:fe:9d:
30:80:9a:18:af:af:6e:8b:fa:c1:1e:49:9c:30:e9:2b:08:b7:
78:2f:61:3e:55:a7:2a:f6:60:22:b1:45:f0:1e:cb:a9:f8:98:
a2:22:15:40:02:71:2f:93:c4:ad:8f:e1:c5:97:5b:2e:95:10:
03:9f:88:b7:53:81:5e:06:b3:65:0d:6a:8f:df:65:50:15:61:
c4:7e:ce:32:19:4d:b4:97:13:4d:15:7d:5b:bc:37:99:1e:d8:
02:ae:26:61:0b:f4:0a:9b:12:a0:d7:e3:bb:59:ac:33:02:5a:
6d:2f:54:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:33 2026 by rpki-client