This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: z2Wb2vGJHv+KgouLeTfx+u5v2U4hAFk/VRxO9+qO2a8=
Subject key identifier: 74:9B:81:9F:25:C1:B2:4B:0A:F1:AF:11:BB:AF:14:E3:98:FA:69:58
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 019C4133C7D2C9FC97D1160571A859024C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 0C54
Signing time: Mon 09 Feb 2026 07:00:38 +0000
Manifest this update: Mon 09 Feb 2026 07:00:38 +0000
Manifest next update: Tue 10 Feb 2026 07:00:38 +0000
Files and hashes: 1: YNGfrZvagg4O4FGkVhnBiiruLx0.roa (hash: /ltwcx7I+h2VdXqUCtGZD3WsmcEgqxtyYnfei2/3ZlQ=)
2: kVcl-lsZR6xyXsxO8aWh944dJv8.roa (hash: wO+8xB9lCvBU2gIRiYR9ejf9p/0a0RGT/tmuLIRs2LY=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: WjCEdwCdJalbWGhwQZPjziu53UYudM3fl+nOnlrkIrY=)
4: oK8DgClRz_oA4VjYTOJycO25RE8.roa (hash: HL0prlO8v1UmrZWNdBDiYE7Jz5klWeZulY7cNTFYDKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:c7:d2:c9:fc:97:d1:16:05:71:a8:59:02:4c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Feb 9 07:00:38 2026 GMT
Not After : Feb 10 07:00:38 2026 GMT
Subject: CN=749b819f25c1b24b0af1af11bbaf14e398fa6958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:9c:01:02:bd:77:e2:d3:89:59:95:22:e2:
39:46:d0:17:25:ed:b7:ef:35:0d:b0:5b:45:29:c7:
cf:5e:6e:93:11:4c:eb:21:73:c2:e4:19:89:ae:e3:
80:b0:fe:0d:8b:4e:f2:47:45:70:c2:86:88:78:bb:
54:7f:98:fd:a3:79:c2:c7:83:43:30:8e:3b:c7:fe:
b8:9c:de:fd:7f:53:47:5e:4a:6a:16:37:12:8d:97:
b1:c8:1c:99:f5:5d:3c:96:15:c7:9d:d4:d7:aa:9d:
fd:48:67:b5:25:bc:06:ef:bd:0e:fd:18:c1:be:9f:
b4:b1:8b:13:a7:5d:15:fd:7b:0e:84:51:af:c1:ae:
fd:f5:c7:dd:82:2c:e8:af:0e:3b:62:7d:90:25:b4:
c2:11:7e:c7:8e:b7:37:0d:38:11:48:5a:b6:88:b0:
69:bd:ab:82:62:81:e2:8d:db:2c:b6:bf:5b:da:d1:
18:51:8f:de:0c:8c:51:20:ae:20:a7:cc:2a:32:ae:
56:49:f9:30:90:fc:54:65:21:41:d1:1c:51:e0:5c:
35:b1:fd:8f:ad:29:b4:8c:6a:cb:d6:2b:7f:1e:e9:
fb:d3:ae:dc:6c:79:e5:a7:66:a0:16:eb:c8:1e:9e:
07:99:46:84:7d:77:1d:67:51:d5:db:3f:e8:0e:26:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9B:81:9F:25:C1:B2:4B:0A:F1:AF:11:BB:AF:14:E3:98:FA:69:58
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:af:27:72:d9:fb:41:bf:bd:30:30:8d:51:59:4d:d9:4c:dd:
8a:3c:75:5d:d7:db:50:7a:69:95:2c:ff:66:fa:06:a1:64:ec:
ec:0a:8e:03:cb:22:e7:6b:29:ab:79:fb:99:68:14:cd:df:cb:
e7:2b:ff:ad:4b:54:a1:a5:b0:f5:c5:87:9d:ea:e4:b4:96:13:
a5:d6:98:37:28:95:47:a8:7a:4d:30:c5:32:de:59:9f:01:01:
2c:0a:40:23:78:a4:39:2c:32:97:12:59:05:db:14:8a:81:9d:
b0:f9:4d:f2:bf:d1:6d:15:bf:00:18:74:09:f5:51:8a:c5:1e:
81:aa:ec:c3:c9:2e:18:d9:98:3b:01:ad:bf:7a:30:80:41:08:
37:43:af:93:c8:4c:63:41:07:29:e2:b3:7f:2f:8e:84:4f:d3:
43:3f:0f:69:51:59:db:24:b1:6b:f1:64:16:1f:12:67:4c:99:
03:31:5e:b4:9f:c6:48:bb:3f:26:5e:8a:dc:f0:81:63:8b:27:
cb:8b:9e:18:3b:81:40:5c:dd:71:00:94:0d:9a:be:6c:93:a1:
b6:92:85:e4:66:4c:43:85:f2:2b:b7:9a:46:88:fc:80:3b:be:
7b:bd:b0:2e:4c:ec:97:85:26:66:30:10:d9:5b:10:3d:78:90:
6a:68:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:42 2026 by rpki-client