This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: tIX7JJcpxbOhQ7zv3EPmGDpa149Ofp8XPefuLzQXnzQ=
Subject key identifier: 6A:F4:38:A6:82:B3:7E:03:C0:5E:44:94:3F:38:32:D8:00:5A:96:8F
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 019C4390B6A5AEA60176B8AA1ED36309E9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 063F
Signing time: Mon 09 Feb 2026 18:01:23 +0000
Manifest this update: Mon 09 Feb 2026 18:01:23 +0000
Manifest next update: Tue 10 Feb 2026 18:01:23 +0000
Files and hashes: 1: ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa (hash: ufYZ4Au1+4D7CL0qz6B/FUig9GN1b/FI0Eb2tprJPcI=)
2: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: 2jDaUvGmmuPqj00iIvawWDLWiAVN71tJXG5QojT0HuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:b6:a5:ae:a6:01:76:b8:aa:1e:d3:63:09:e9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Feb 9 18:01:23 2026 GMT
Not After : Feb 10 18:01:23 2026 GMT
Subject: CN=6af438a682b37e03c05e44943f3832d8005a968f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:1f:23:23:e8:10:a5:aa:9a:d1:c9:13:6e:
5d:55:96:ce:00:74:18:72:45:1f:55:ab:29:74:e8:
f0:10:53:34:d0:c7:a8:f0:9b:de:7a:b9:59:2d:4e:
86:96:43:d4:64:42:a8:4f:47:7f:ba:d0:a0:cf:49:
e8:05:e8:08:af:8c:0e:34:34:51:82:08:b9:ab:78:
15:56:ac:58:54:cb:15:bc:30:e5:54:26:4e:14:2e:
80:8a:40:d0:3d:35:c1:e0:eb:91:48:60:0f:e8:6d:
a9:c3:b9:d7:d6:21:25:e5:1d:ab:54:8a:a9:59:80:
3f:f1:f7:b3:67:7f:f3:27:51:6d:d5:4a:94:e5:74:
a9:62:72:eb:5b:dc:65:db:ce:b3:f1:80:59:da:ad:
a8:08:d1:f6:7d:9c:61:f3:0e:1a:37:c0:6b:1a:8d:
06:6a:ea:ca:7e:2e:33:27:be:cd:6e:ba:1d:f2:5e:
b6:92:ee:84:68:02:ed:b9:65:6d:94:09:3e:f8:0c:
88:c4:94:36:43:17:09:2c:b3:5f:82:1e:07:ae:82:
6e:88:e0:6b:84:42:5d:a7:0f:22:f0:b1:60:2c:5b:
55:a2:ab:3d:10:e5:00:8e:4f:0e:06:fd:45:a4:f2:
17:65:77:0f:0f:a4:65:09:81:55:f5:c6:06:8c:02:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F4:38:A6:82:B3:7E:03:C0:5E:44:94:3F:38:32:D8:00:5A:96:8F
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:48:37:55:cb:fe:0e:52:aa:59:5f:6b:2d:b3:fa:d6:99:19:
e0:da:ed:d3:63:ef:b5:d1:86:77:3c:bb:b1:76:0e:d5:4a:64:
6d:cf:8d:3a:0b:3b:68:56:d2:81:0e:48:6a:e2:07:88:9a:30:
ac:3d:07:c1:37:19:ee:ce:dc:a0:4f:a7:15:cf:30:28:79:83:
ea:70:44:42:91:2b:db:15:1a:d2:f8:85:f7:40:3a:ec:25:d9:
fe:69:7a:c7:a8:e7:78:0f:ce:4e:49:b1:c7:4e:a9:27:53:25:
db:86:c1:59:35:da:ef:c9:35:08:dc:a5:4b:39:28:80:cd:69:
9e:d6:5e:d1:9b:f6:63:1d:c1:b2:eb:2a:c7:71:f3:71:2b:72:
cc:16:a7:ef:b7:48:8b:59:a3:56:54:c2:92:da:48:d4:48:dd:
ed:1b:33:80:a6:55:e6:65:bc:59:67:b1:39:8c:5b:fe:88:66:
f5:7e:41:6f:9f:2d:d3:06:b4:0a:4f:11:26:3d:c5:2c:e3:e3:
17:5c:72:bc:ef:c6:8d:d4:a6:3f:63:d0:0a:34:02:e1:2c:ec:
01:b5:c5:8a:9b:a5:d9:15:a0:17:3b:0d:a3:cc:a8:58:f0:1d:
e2:06:d7:9d:36:78:dc:5e:3a:bf:92:d1:18:a0:af:c5:b2:d9:
32:17:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:19 2026 by rpki-client