This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
File: iyH_rekwvR_S4XiM_0B9nTQTThc.mft (raw, json)
Hash identifier: uH2QtKL6SVUyYHYUrqWocKBzXM6QWGu+ByAIItgXR8s=
Subject key identifier: 50:AF:DB:A3:E4:78:CB:1D:6C:AB:2C:0B:0F:9C:FA:41:88:0B:6C:2A
Authority key identifier: 8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
Certificate issuer: /CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Certificate serial: 019C424638E3381369EAB92BF21C31AE1EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
Manifest number: 1444
Signing time: Mon 09 Feb 2026 12:00:24 +0000
Manifest this update: Mon 09 Feb 2026 12:00:24 +0000
Manifest next update: Tue 10 Feb 2026 12:00:24 +0000
Files and hashes: 1: 0POn4eiSe4D7lLX8DICoyCNVffg.roa (hash: IuTOIfnYnKgQ1QMnujowbH+xUlcXahzENOK89qB7q6Y=)
2: iyH_rekwvR_S4XiM_0B9nTQTThc.crl (hash: hVEURzIMvgJ6GMQ0UVYXWqYoTeVJ7KQAUpI5i6pHyaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:38:e3:38:13:69:ea:b9:2b:f2:1c:31:ae:1e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Validity
Not Before: Feb 9 12:00:24 2026 GMT
Not After : Feb 10 12:00:24 2026 GMT
Subject: CN=50afdba3e478cb1d6cab2c0b0f9cfa41880b6c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:54:31:84:96:2e:1b:65:de:3c:4c:a6:f9:
6d:7c:c7:14:09:df:d4:76:6e:b8:41:f4:bf:0f:f5:
df:22:05:1b:07:63:a8:73:9a:04:44:30:8d:b8:d7:
84:3b:d2:a4:dd:30:bd:ef:4c:64:14:a1:40:01:4a:
c4:50:07:a3:70:25:57:7a:f5:f5:81:9c:8c:80:3c:
6e:cb:8b:d6:f9:29:02:87:df:17:89:ed:cf:48:1a:
41:5d:3e:52:b0:aa:0e:ff:f4:bf:cf:4f:2e:38:4d:
52:f8:67:0e:24:37:60:50:39:df:45:d0:06:af:97:
e0:82:ed:f2:9d:ab:d7:98:2a:7e:c2:25:ef:e0:cc:
72:f5:f7:8a:fe:eb:1e:74:3f:9c:c4:84:59:09:ae:
12:1d:a9:1c:2e:79:22:19:28:80:1d:21:30:cf:62:
e5:b0:0f:09:1d:84:dc:68:5a:26:87:8a:40:01:47:
13:db:af:be:45:8c:24:66:08:01:4d:33:85:59:8c:
c8:b7:7e:89:a7:a9:51:de:03:64:1c:90:6d:45:7f:
9c:0a:13:d7:05:00:60:dd:70:0d:b4:f5:d4:59:54:
e3:29:4f:f2:44:76:15:90:63:73:a5:b2:52:b2:a3:
53:42:91:cc:cf:3b:75:95:a2:66:17:a7:d1:cf:fe:
20:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AF:DB:A3:E4:78:CB:1D:6C:AB:2C:0B:0F:9C:FA:41:88:0B:6C:2A
X509v3 Authority Key Identifier:
keyid:8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ee:19:ab:54:bc:d2:cb:9a:27:ee:38:5b:e7:11:6e:b8:2f:
f4:24:4d:fd:a5:a3:80:85:1c:33:2e:09:9c:23:16:0c:bf:2c:
49:cf:be:60:5e:48:f0:ad:1b:ff:65:96:13:6e:84:08:4b:e3:
99:fc:08:26:e7:0d:48:94:a9:36:62:bf:e1:93:23:84:d2:f5:
17:93:9d:84:7d:95:1c:c4:f6:0f:61:e5:31:8a:3d:6c:6c:78:
e7:3c:bf:1a:94:fe:bc:8c:10:ca:55:89:75:21:8e:27:98:0e:
94:d4:85:f7:96:0b:ba:d9:a1:e0:56:14:a3:61:3c:d5:b1:71:
79:4c:4f:79:c9:66:53:91:27:ac:7a:b8:7a:e9:39:7d:b0:a9:
c2:c8:ef:f6:0a:5b:81:17:bb:68:ed:01:28:87:e2:79:df:3c:
cc:df:41:37:66:e3:ad:29:2e:ac:e7:f3:d9:3c:6e:6f:ef:4d:
1a:c7:45:b4:e4:53:7b:03:b5:57:0a:ec:62:66:71:37:73:60:
64:4d:2c:3c:48:cc:85:fe:ae:e5:62:b2:48:fc:4d:a1:4d:03:
18:d9:0c:18:0f:14:6e:c8:8e:c8:a0:7d:83:3f:a0:7f:12:ce:
ec:aa:fc:39:f5:cf:a8:9e:19:2b:78:5d:09:e5:d8:46:35:75:
77:fa:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:38 2026 by rpki-client