This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File: mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier: AxojG9TusFOzZNVcE4BcwoK+gp+DjG93Cp9zGPdVVIQ=
Subject key identifier: 3D:FC:93:12:96:E0:9B:DF:DF:2C:D6:B1:B0:BE:97:FA:C4:0A:7E:69
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer: /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial: 019C42EB6C8270B56AD92EA8788FF9D3E9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number: 120B
Signing time: Mon 09 Feb 2026 15:00:50 +0000
Manifest this update: Mon 09 Feb 2026 15:00:50 +0000
Manifest next update: Tue 10 Feb 2026 15:00:50 +0000
Files and hashes: 1: jlRHoOU7VBuZG0NtlGgpYUcQg1w.roa (hash: a/dGRje2qaYpZSj1y2Z3z/E4zsUb68R588aViHKfTm8=)
2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: CzzVW0elf4rVR/qQjeuMkGVzeo2A/FW53MP8g1kcCKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:6c:82:70:b5:6a:d9:2e:a8:78:8f:f9:d3:e9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Validity
Not Before: Feb 9 15:00:50 2026 GMT
Not After : Feb 10 15:00:50 2026 GMT
Subject: CN=3dfc931296e09bdfdf2cd6b1b0be97fac40a7e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:39:e4:c2:f9:59:02:74:1a:06:27:da:e0:59:
57:d1:15:9c:06:63:86:c8:e1:77:0e:06:5c:55:d7:
34:65:5f:84:1f:d4:45:41:55:d3:57:e9:22:07:e9:
d9:99:00:c1:e1:85:6e:80:a1:f7:cc:aa:c4:d6:05:
46:96:ee:33:2a:bb:5d:4d:bd:dc:b1:2a:de:f3:bd:
2b:44:51:30:93:1d:f5:83:da:2f:57:49:61:4d:c6:
76:dc:fb:ba:36:fa:43:28:01:01:23:7c:b4:96:82:
94:4e:bc:61:9a:3e:61:6e:2b:a3:ea:7a:e8:68:8e:
b3:ea:96:4a:2e:68:29:79:9f:c6:a9:bd:e3:dd:d2:
3e:7f:87:ad:7d:ab:70:d8:7e:bd:f9:b3:28:67:29:
1c:79:ac:60:07:de:21:da:e2:c9:01:28:0d:fd:14:
08:bf:f9:70:00:67:68:37:da:88:9f:ba:b0:92:ab:
a0:5a:77:95:98:70:40:46:c5:06:7d:27:a9:83:6d:
c8:d0:e1:92:46:2b:b1:45:eb:fd:35:8a:6a:be:92:
80:37:ac:8c:fe:51:28:1c:ee:4b:e6:e3:5f:48:ec:
76:9b:50:d6:ea:df:0c:73:4d:0b:8e:e4:73:18:63:
01:a0:b1:62:4d:99:31:3e:5b:11:ce:9a:ae:ac:7f:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FC:93:12:96:E0:9B:DF:DF:2C:D6:B1:B0:BE:97:FA:C4:0A:7E:69
X509v3 Authority Key Identifier:
keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:27:87:07:a5:65:e5:9b:c9:49:23:d0:5c:b5:6e:5f:09:92:
04:83:17:51:9c:41:fd:99:b6:3c:10:d0:ab:e7:9a:62:0c:8e:
19:6d:f7:46:68:27:4e:57:83:c6:97:8b:62:b5:43:2c:e4:8f:
24:ab:4e:1e:f8:ba:6d:e9:28:f3:53:4f:92:60:24:2b:f3:83:
9e:51:a8:00:05:4a:53:99:82:91:3b:a8:52:02:2b:88:23:42:
74:cc:f7:c5:97:d1:09:23:8d:c9:82:3b:02:0f:81:26:b0:08:
3e:7c:e4:de:4d:ff:70:92:0c:06:c8:1e:df:20:77:93:1f:65:
38:37:02:39:f0:e4:39:b8:ab:e4:fe:69:73:52:df:41:98:8b:
09:0c:9a:1a:68:26:af:be:db:48:f8:21:19:b6:1d:d7:32:9b:
2c:c2:27:7e:83:a4:1c:b7:79:8e:16:df:90:b4:f5:1a:56:9a:
41:10:11:2f:08:41:fc:65:36:03:86:49:0f:e0:59:bd:22:22:
51:ff:76:cd:56:49:19:0e:ff:05:38:7c:2c:78:d6:aa:22:24:
6e:9d:9e:9a:ea:1a:bf:6d:cd:6a:e0:d9:fc:7c:54:93:b7:06:
33:e6:3d:65:46:81:75:c4:fe:12:18:2e:3f:b1:e7:1a:c1:15:
b3:cc:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:42 2026 by rpki-client