This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier: Gmw2IMLZbfU5zJDII7zTdwa0HYdqHRGQpaWeGABp0Cs=
Subject key identifier: C1:45:D8:FF:4B:6D:E6:5B:1B:5F:12:D3:D9:B5:70:94:DB:B5:78:63
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial: 019C427D5E13115542049E8B06C12FB2083B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 13:00:38 +0000
Manifest this update: Mon 09 Feb 2026 13:00:38 +0000
Manifest next update: Tue 10 Feb 2026 13:00:38 +0000
Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: xoBOIBh9xC1v9+N5/e3FDbPxMJmSppKic9/YD6TLZxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:5e:13:11:55:42:04:9e:8b:06:c1:2f:b2:08:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Validity
Not Before: Feb 9 13:00:38 2026 GMT
Not After : Feb 10 13:00:38 2026 GMT
Subject: CN=c145d8ff4b6de65b1b5f12d3d9b57094dbb57863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:a7:98:5e:42:ee:0a:b5:01:e6:ed:8d:5d:
79:65:a5:e2:77:13:3a:23:2f:2e:a0:fe:ba:12:9b:
4c:fd:d5:21:de:a8:6d:dc:cf:a3:f8:74:39:3c:a3:
ac:ec:bf:99:a8:d3:55:a3:c1:29:f5:3c:24:f9:0c:
9f:a0:4d:a5:0c:87:74:2b:96:fd:a1:59:77:49:88:
38:90:3e:e6:49:1c:bc:af:1d:ed:6c:03:ad:e8:b8:
49:39:f1:83:f2:57:8d:0d:ac:e8:67:e4:49:69:24:
32:0a:66:d6:56:19:f4:4d:1c:3b:aa:5e:d4:d3:45:
c2:bc:b4:b8:4b:bc:79:00:17:48:a7:b9:bf:17:24:
86:75:f5:7b:3a:83:48:ac:89:ac:8c:09:4b:14:eb:
1c:5b:4a:f9:d7:e9:4c:94:b3:d9:15:6e:4c:2b:47:
db:1c:37:06:88:1c:54:e0:c1:99:3b:a4:47:b9:93:
0e:60:9d:01:f3:dc:b2:a7:53:29:ea:30:d3:82:ba:
c1:8e:bb:9b:13:3f:20:21:56:b0:c0:8b:80:07:0b:
1d:12:34:04:a5:75:1b:5e:ad:88:8e:21:6d:57:98:
29:2c:4e:4a:44:f9:5c:41:6d:69:f0:3c:34:0f:32:
bb:03:39:5c:2f:af:eb:8b:d0:63:a1:7d:55:fd:2b:
3b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:45:D8:FF:4B:6D:E6:5B:1B:5F:12:D3:D9:B5:70:94:DB:B5:78:63
X509v3 Authority Key Identifier:
keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1a:d1:88:40:32:51:54:ba:7e:87:aa:02:15:67:cb:7d:d8:
d1:c8:b6:c6:a2:ce:bc:07:b2:55:03:44:09:82:38:e0:d7:88:
0d:66:5b:ef:21:4b:23:97:aa:68:63:60:a8:a8:f6:d7:28:19:
77:ec:03:84:ef:a7:7f:a8:0e:ac:c8:bf:27:7f:4c:69:9b:0d:
62:f0:0b:0b:f9:2d:56:dd:62:07:8a:ba:be:b2:47:56:28:4a:
0d:28:f4:b9:6d:aa:78:dd:6d:c6:97:01:0b:ec:46:2b:b0:1c:
ac:7f:1c:e6:f5:c1:d1:e7:7e:2a:f9:cd:01:11:cd:95:5e:82:
fd:3e:1a:57:16:7b:55:69:8c:4a:e1:df:45:ce:b2:cc:46:80:
ab:80:39:7e:e3:7c:bf:ed:8e:5e:2c:8a:48:5f:df:4f:46:28:
8b:b2:14:f8:18:5f:76:f9:e2:28:db:d7:5d:08:ee:21:c3:7f:
40:40:94:c0:9a:54:d1:8c:66:6f:f2:19:01:ad:ee:f8:ea:7d:
b9:95:8f:65:9c:f4:fe:d3:7a:66:fb:92:c8:4d:7a:6f:b8:c2:
e7:4c:33:eb:94:35:1b:b5:e4:df:9c:7c:58:2a:1b:38:92:76:
df:76:58:36:69:94:f7:ed:2a:63:df:f7:ee:56:d8:8d:c4:ef:
03:38:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:39 2026 by rpki-client