This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: c9UuRRh9MHf6xqWSZrElul/h1aLcbeI8sijjFAQRbbI=
Subject key identifier: 64:0F:9F:EA:B5:E2:10:8B:45:B8:DE:B0:C0:9B:91:C8:41:D7:B4:DC
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 019C427D04170FFC7BCEB1E16185BF4149EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0EBD
Signing time: Mon 09 Feb 2026 13:00:14 +0000
Manifest this update: Mon 09 Feb 2026 13:00:14 +0000
Manifest next update: Tue 10 Feb 2026 13:00:14 +0000
Files and hashes: 1: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: nzNdOCwEl4yCFpilxdW7Ue3RTUsVf7nWstsZoloLI0E=)
2: o3IVsTtHp4LvNCkM3vhyjfWuFnU.roa (hash: lY2LMXKbJT6BlB/lSBYqcfLveqU3+U+eDmIrpngNEak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:04:17:0f:fc:7b:ce:b1:e1:61:85:bf:41:49:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Feb 9 13:00:14 2026 GMT
Not After : Feb 10 13:00:14 2026 GMT
Subject: CN=640f9feab5e2108b45b8deb0c09b91c841d7b4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:c0:7a:fa:9b:7d:cb:4b:b1:05:1a:0f:a2:
63:24:91:8a:16:a4:f3:12:3c:1c:c8:6d:20:45:5c:
2d:de:9f:0f:eb:88:57:78:4f:4a:e0:36:59:34:09:
0a:55:c8:55:1d:3f:72:3e:5b:b4:e1:5f:1b:f8:a4:
e2:e1:b1:4b:91:8d:6e:40:65:dc:e9:be:e6:19:7f:
6d:25:1d:c9:88:8c:4a:09:ae:d9:d1:ab:37:d8:65:
d3:9a:19:68:b4:75:c1:2d:59:12:d5:a3:40:5d:b4:
38:2c:df:77:be:7a:71:ae:d7:50:5f:6d:8a:61:3f:
2e:b6:f4:25:0f:5c:08:a3:39:0a:b7:eb:6d:7e:bc:
e2:3f:b7:c3:9e:6a:28:03:38:a6:f6:df:48:6f:30:
94:bb:73:b7:3a:39:6b:f4:2b:34:a1:df:1e:d0:cc:
43:fb:0f:ac:59:ba:87:1c:08:bf:0f:b1:91:1f:05:
3b:e6:35:5f:ad:95:09:67:57:ed:15:92:2c:06:c0:
cb:6f:6c:b4:ba:78:1a:e2:23:44:ee:2c:3c:f3:80:
87:39:2b:4f:a5:9a:e8:0c:de:b3:f8:76:1a:5b:fd:
53:19:1e:0f:11:cb:6c:42:67:97:1a:f8:00:53:8e:
87:6e:6c:91:a0:47:0f:7a:55:f8:0c:e0:11:b3:89:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0F:9F:EA:B5:E2:10:8B:45:B8:DE:B0:C0:9B:91:C8:41:D7:B4:DC
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:57:38:e3:e0:5e:66:0d:30:e9:17:38:8a:fc:21:cb:bc:6f:
33:ac:3d:12:ca:b8:27:12:b3:db:4c:95:1e:a2:a0:91:e6:90:
12:40:bc:88:d7:36:ef:a1:2c:bf:55:fa:4e:00:99:62:88:76:
a8:da:c3:c0:1e:5e:01:3d:52:6f:78:8d:ae:df:51:07:87:e2:
f2:8b:77:0b:b3:8a:54:65:49:84:00:83:22:fe:a4:98:54:3e:
f7:21:58:9f:61:fc:c7:ea:a2:30:ef:6c:51:d7:c5:fb:c5:ea:
63:d7:01:fc:05:08:54:19:51:17:3c:26:90:aa:f8:9c:aa:c8:
5a:2f:d8:81:86:29:69:3a:47:54:cf:1b:3c:58:db:45:58:98:
3e:2a:fd:ef:0f:a4:a5:b8:20:49:10:53:53:db:d0:3a:45:d1:
dd:79:ec:5f:22:47:0e:a1:7c:ff:04:e6:d9:68:2b:da:1a:39:
65:38:7f:48:aa:71:2a:f3:27:6f:ef:77:ed:19:48:23:06:5c:
91:ee:9d:78:f6:30:04:8a:25:e7:90:b3:0a:f6:29:1a:2e:bb:
33:69:98:6e:df:14:b7:b3:ca:21:3a:67:cf:7a:c1:da:f7:90:
cc:8b:8c:57:75:92:d2:22:b2:50:59:21:b2:70:90:c8:89:b6:
a7:9d:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:30 2026 by rpki-client