This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
File: MbXwrK42UqU8caB0ojR6tvF_0_g.mft (raw, json)
Hash identifier: aCbMY1xWHbC+cshpli2vZMwbZwR4qMIS3CMJycgOiKI=
Subject key identifier: CF:71:A4:11:79:BC:AB:5F:3D:AE:D3:67:EC:6F:7A:73:20:D4:66:E5
Authority key identifier: 31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
Certificate issuer: /CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Certificate serial: 019C44A27AD87BBEA9869934C08E488F3C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
Manifest number: 179D
Signing time: Mon 09 Feb 2026 23:00:24 +0000
Manifest this update: Mon 09 Feb 2026 23:00:24 +0000
Manifest next update: Tue 10 Feb 2026 23:00:24 +0000
Files and hashes: 1: MbXwrK42UqU8caB0ojR6tvF_0_g.crl (hash: zD/d+c0Zn3WQlA6nSKTQ7Sw14h6mgHxHP1FAXcu/FyU=)
2: uxqr4pXts4xy5a6OjUClvVb5wfM.roa (hash: u+ym4gcEkuNqTVrCKc1aNJHEoQQrZPOjBPzjIMagESo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:7a:d8:7b:be:a9:86:99:34:c0:8e:48:8f:3c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Validity
Not Before: Feb 9 23:00:24 2026 GMT
Not After : Feb 10 23:00:24 2026 GMT
Subject: CN=cf71a41179bcab5f3daed367ec6f7a7320d466e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:ae:2a:7b:ae:62:b2:5e:b7:e4:23:57:04:
5a:1c:70:f1:df:86:c9:9a:1b:7a:24:78:94:b0:b6:
1b:83:5d:56:48:ed:52:9d:db:c1:ca:e8:f3:eb:e6:
5d:dd:25:36:f9:0f:01:80:57:13:58:81:a2:ad:3a:
51:af:d6:13:16:96:b9:2e:3a:8a:2e:9b:3a:68:4d:
e7:22:42:6b:5d:3a:fa:7a:b9:f3:09:35:16:01:53:
5a:66:87:49:ce:c7:0c:c7:2a:97:71:8d:d0:8b:0e:
d1:fe:44:76:54:17:14:e2:f9:d7:54:85:02:46:a0:
16:5e:df:9d:97:e4:66:94:ba:72:5b:47:64:f8:db:
91:09:be:cb:98:f7:17:a4:48:0b:50:91:2f:0c:45:
b6:97:e8:8a:49:c2:0b:f5:d1:e2:d1:34:48:83:2b:
b1:38:5c:27:c9:3a:e1:53:6d:8d:5c:af:6b:4a:c0:
ba:fa:97:66:df:38:fe:5b:e5:14:0d:e1:ca:63:12:
a5:80:9e:c5:98:f3:35:35:a9:67:3b:bc:8d:57:0a:
96:57:03:79:cb:21:f7:e5:9c:c9:96:d3:eb:0e:bd:
96:a2:e7:d1:7d:6d:96:bf:59:eb:8f:94:9e:cf:cd:
be:1b:9d:44:1b:12:3b:62:91:6e:01:86:c0:c0:36:
6a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:71:A4:11:79:BC:AB:5F:3D:AE:D3:67:EC:6F:7A:73:20:D4:66:E5
X509v3 Authority Key Identifier:
keyid:31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a6:3b:f5:d9:92:48:9d:7d:35:4a:05:69:29:11:09:db:d4:
e9:d0:33:00:24:af:10:a6:10:30:99:19:84:2e:49:4e:5b:63:
83:93:97:60:ed:8f:bf:1c:50:46:95:77:42:94:7d:9b:7c:9b:
e8:4f:cb:1a:b3:87:ab:5f:58:50:65:c1:a6:8d:cb:ed:0d:99:
bb:3e:5e:6e:82:26:74:57:e5:f5:ad:6a:2f:7a:b6:1b:fd:40:
5b:a6:6c:12:b6:f7:c0:99:a4:14:d4:49:2d:c6:8c:60:52:b5:
66:24:c1:1e:a5:e4:09:5e:34:4a:37:96:18:c2:b2:95:72:d3:
27:c0:c6:f1:ce:e2:53:cb:92:bb:ca:ef:4e:4a:5f:06:e2:0e:
e0:ed:69:7a:4d:12:8e:4d:6d:9f:ff:7f:8e:8e:b5:38:82:a3:
ba:92:ba:21:b5:f3:5f:1e:3d:a9:c1:e7:4b:b3:77:c5:2e:1c:
2d:06:2d:91:86:e7:e4:65:02:84:0d:87:6c:31:e1:c5:05:18:
b1:3b:50:e2:0b:83:87:90:0f:a6:d6:79:82:17:0a:5a:b1:79:
0c:64:e6:47:31:d5:1e:5c:4b:3f:0a:78:cc:42:32:4d:95:a7:
eb:26:1b:20:7d:42:33:c1:27:69:f0:14:d1:0e:3e:6d:35:8d:
c6:96:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:53 2026 by rpki-client