This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
File: I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json)
Hash identifier: 2bGC7nOe6eWY1sF1JGG/O+FOB2I2DjmHhCcU3YI+rKc=
Subject key identifier: 93:EC:B7:F2:A6:E1:A2:01:C5:77:B0:91:72:F2:59:88:1F:6C:62:D7
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial: 019C4246C9F74C3CA3FAE443849BA4BFB3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 12:01:01 +0000
Manifest this update: Mon 09 Feb 2026 12:01:01 +0000
Manifest next update: Tue 10 Feb 2026 12:01:01 +0000
Files and hashes: 1: 8TcJH-qO38Nnc49nDFhjl3i6q20.roa (hash: HYqFnkRnK7UVCZ7277kZ3SagdWM8Y+qSNG/b1PHhvmw=)
2: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: Ps+xNaq7xYmsEIEsiFqtny/Bal7pGn8yAI3bQKbK7UI=)
3: XcluKI5GK94xvt-2VsfsH9YAxas.roa (hash: aMUQPT04n27GjqpL1CyIzBfeTJro8TREHvy5Fo/qxZs=)
4: ppVBATzjCDPLKHQd3o4jFf9lhxY.roa (hash: 4QaAZx/54RVk/xsTNzwOX4eDHF+9k00rM5X1Yd0pNtY=)
5: xkK7Kbvhg6ccWQLBKOWEjOj8dIs.roa (hash: hSxWOh+4pOoJgqKHeBLOsvvNqhI/bRq5ZNPWvaG7HYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:c9:f7:4c:3c:a3:fa:e4:43:84:9b:a4:bf:b3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Validity
Not Before: Feb 9 12:01:01 2026 GMT
Not After : Feb 10 12:01:01 2026 GMT
Subject: CN=93ecb7f2a6e1a201c577b09172f259881f6c62d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:25:e1:8f:81:f5:42:14:fb:c7:35:c8:8f:
b1:b7:17:a3:b6:47:1d:fc:c4:a9:03:10:9f:d0:f0:
d9:d5:85:a8:d3:9c:78:9e:8a:d5:7b:e2:a2:b3:b6:
3b:20:ab:1d:f8:a0:e3:58:4e:da:e0:2e:c4:43:b8:
d3:15:22:d4:cc:ea:e8:3b:ac:d8:dd:c1:55:e5:9d:
8c:9f:bb:6a:63:e8:74:e6:f0:d5:94:f0:ab:5c:f0:
28:3d:cf:c0:8f:da:de:d8:ea:37:5f:5c:45:6f:3a:
f8:b5:f6:a5:f5:79:13:a6:9f:27:45:ab:aa:bb:43:
5b:9b:69:8d:2f:8c:e4:9a:fe:a4:62:7d:da:4f:f4:
31:ba:e6:9d:71:ef:04:cf:96:60:36:49:26:c6:52:
0d:d7:9c:60:c3:8a:af:73:6d:91:d5:14:2f:2c:3b:
a1:6f:c1:ff:ce:25:6b:71:70:54:8f:fd:4b:4c:86:
ac:66:ae:dd:f5:3a:5a:bf:64:91:c7:ce:89:20:2c:
1a:d0:a2:91:d7:3e:0b:ad:74:b2:f2:b9:40:15:68:
3a:bf:eb:e6:a2:84:69:4c:ac:81:6a:50:67:83:9a:
be:49:15:0f:07:28:55:fe:d0:9b:17:d8:cc:87:cf:
ac:25:00:52:ef:3c:83:53:68:c3:00:25:76:86:3f:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EC:B7:F2:A6:E1:A2:01:C5:77:B0:91:72:F2:59:88:1F:6C:62:D7
X509v3 Authority Key Identifier:
keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:25:cf:be:01:a1:64:4c:d8:31:38:0c:ab:36:3b:4a:bf:b0:
87:8c:ff:14:61:10:30:4d:a0:ba:a7:9f:2e:98:8c:cf:39:e0:
c2:b2:02:47:20:98:c6:93:7d:50:bb:16:e9:af:7a:b5:2c:2a:
29:b6:fe:6a:73:96:c5:85:8e:79:2a:b8:fc:78:5c:64:41:2f:
01:c8:16:14:67:77:32:f9:67:c2:6d:a1:ac:bc:ae:b0:4c:80:
18:58:23:92:bc:0a:e6:9f:80:ae:a8:c5:a0:73:94:ef:c8:07:
34:f0:a9:cd:0d:53:83:97:e3:9e:db:65:a9:75:76:3d:b8:6d:
81:fd:1c:22:08:ab:f4:b6:5d:f8:05:d6:42:f8:04:9d:52:b2:
6e:97:56:68:65:f5:8b:7f:84:f8:7b:36:6c:e7:47:0f:97:af:
e4:6f:02:47:82:3a:d6:84:ee:e9:33:fe:14:1a:67:97:57:7d:
44:b3:71:df:98:8e:30:4e:32:ea:fe:23:de:9f:99:47:4c:f4:
a2:7a:3c:5d:53:49:13:1d:e0:0f:2b:52:48:b5:19:fe:f0:ac:
6b:be:34:93:89:6c:52:4b:18:40:80:99:8a:52:77:98:cb:18:
ce:95:7a:24:5f:73:13:17:d9:ad:02:6e:4e:ae:ef:3d:0d:34:
7d:31:d3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:09 2026 by rpki-client