This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: YC0nhXPdKxRFKodX3DVGlQs6zF2aC2zP8bp5XOfy+9E=
Subject key identifier: 5B:5C:0A:B7:EE:24:02:A0:26:13:3E:D7:C0:9A:91:78:52:5F:41:65
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 019C41A22E6CCE5B7684FECC07BB1F867D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 09:01:13 +0000
Manifest this update: Mon 09 Feb 2026 09:01:13 +0000
Manifest next update: Tue 10 Feb 2026 09:01:13 +0000
Files and hashes: 1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: sUTXoFIKoQzXzXYG/Yg3A0bngkdDm6L22w3jiez8jnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:2e:6c:ce:5b:76:84:fe:cc:07:bb:1f:86:7d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Feb 9 09:01:13 2026 GMT
Not After : Feb 10 09:01:13 2026 GMT
Subject: CN=5b5c0ab7ee2402a026133ed7c09a9178525f4165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:98:89:b4:45:7a:07:21:89:2a:02:53:e5:
b8:42:d1:fc:11:64:65:12:c2:73:1e:30:9a:22:99:
4d:fc:b4:58:a8:da:0b:4f:be:37:fc:9c:7b:fc:72:
39:8b:d8:92:b0:f4:45:2d:e2:69:83:09:32:15:80:
bd:d5:95:15:23:90:ba:9c:fd:24:ab:d0:40:56:bb:
52:df:70:73:6a:83:53:79:b9:54:b6:a5:dc:e8:6c:
47:d1:d5:4b:42:d2:ac:e0:dd:f5:81:51:97:2b:aa:
71:c2:1d:4a:0f:af:1e:4c:13:04:5f:60:5a:23:a6:
f9:16:47:1f:44:43:98:2b:58:98:22:61:a8:e2:44:
5d:6e:d4:86:39:1e:25:a2:d2:0e:11:b7:42:59:9b:
22:10:8f:f0:62:1a:49:16:dd:f4:2a:64:cc:21:c3:
0d:f7:f4:87:db:13:df:ea:cf:84:15:e5:94:e5:04:
0e:4e:47:d5:72:04:23:15:d8:a4:b8:7b:c6:34:90:
2b:f8:f2:82:cb:67:bc:ad:5c:56:14:52:db:51:33:
33:6b:20:da:4a:c3:80:57:00:05:c0:b0:4f:6b:31:
71:54:89:a5:fa:f1:7a:42:bc:d0:25:05:ac:4b:36:
1c:d6:55:c4:bf:75:17:77:e3:82:26:0f:f5:0a:34:
35:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5C:0A:B7:EE:24:02:A0:26:13:3E:D7:C0:9A:91:78:52:5F:41:65
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f7:c0:73:cb:03:13:b7:15:fc:9a:1b:19:11:55:25:a8:18:
9e:44:44:fc:06:d3:22:8d:60:e8:08:8f:0a:f1:55:7a:46:33:
87:cc:5e:ec:31:a4:c3:52:e6:b1:06:0e:28:7e:eb:82:ca:82:
37:37:81:60:0d:10:45:50:73:db:5b:a1:9f:47:76:1f:92:a2:
98:02:15:02:6a:ad:7f:be:ba:1a:9f:40:0c:0b:f0:dd:d1:54:
6e:3a:1b:ea:68:22:ed:69:43:d6:2f:b5:6c:12:e5:e6:00:2d:
a7:35:70:4b:11:69:0f:82:f1:0e:eb:ea:d7:b3:41:ac:53:f6:
5c:ea:46:60:2f:3c:21:9a:c9:74:ae:8d:66:3a:35:5d:f7:99:
d3:2c:39:0b:3a:dc:f6:b9:57:01:53:24:03:37:9c:28:2c:99:
ec:9b:5e:3b:d3:60:24:07:ea:a5:98:e4:31:03:f8:3b:65:42:
20:a2:74:aa:e4:5d:9f:93:a9:10:7a:e0:1b:10:94:a1:77:c5:
4a:f4:03:f6:1e:dd:f6:b1:68:89:04:2f:b8:99:d6:3b:45:6e:
ec:2e:a0:16:02:29:3c:2e:d8:d4:95:dc:20:04:4b:e6:b6:3e:
f8:09:49:99:fb:16:15:09:42:7e:05:57:fe:50:d8:15:68:81:
22:20:be:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:05 2026 by rpki-client