This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: WYXJGajU/sXMs6XwqEN/C/YuuG16bOGxdBqjzlL6qt4=
Subject key identifier: ED:E6:9A:83:C7:90:BE:54:DE:EF:07:16:65:D8:79:06:C4:15:CC:BB
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 019C4358F59A4384C5034FEDB80884F1375A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 0F99
Signing time: Mon 09 Feb 2026 17:00:29 +0000
Manifest this update: Mon 09 Feb 2026 17:00:29 +0000
Manifest next update: Tue 10 Feb 2026 17:00:29 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: q4dADdgpaK7zONPGkBMpAxRxV6Sa6NPn8OI0TxSvYdo=)
2: KFS9AT9Dh5IYqtvylPcHNAxeD1Q.roa (hash: aPsZ9SwAfwr9bP1Lvnapo0qJgXtXh+rAUimtLCb9z5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:f5:9a:43:84:c5:03:4f:ed:b8:08:84:f1:37:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Feb 9 17:00:29 2026 GMT
Not After : Feb 10 17:00:29 2026 GMT
Subject: CN=ede69a83c790be54deef071665d87906c415ccbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:27:36:b2:25:9e:7b:99:a1:59:0a:19:0c:1c:
1d:ea:4c:c0:c9:45:44:47:75:0a:f6:14:6c:9d:2c:
b0:c8:b8:c1:70:76:2b:b8:02:0f:bd:2a:ba:18:59:
30:d1:19:47:5b:cb:60:6b:7c:16:f1:17:70:62:49:
ad:bd:17:f4:ee:1d:b6:bb:23:c5:c2:c6:de:b1:f4:
b0:ea:77:85:55:49:0b:1d:04:d6:57:48:2a:b7:32:
63:6f:c8:50:c8:9a:27:46:b7:3e:6f:6f:df:4e:0c:
80:a6:7a:f2:48:32:07:e8:d2:a2:35:20:a7:c3:55:
b1:5b:03:cf:2a:16:75:3b:ee:ce:97:2c:c9:8f:3d:
0c:bf:d1:f4:cc:05:c9:94:a2:9c:6d:70:f6:26:5e:
ad:52:1f:12:7f:b4:c9:41:9e:78:d3:71:ee:8a:d6:
e7:f9:dd:42:c3:9b:1c:10:a7:fd:97:af:d0:94:66:
57:60:82:d8:59:ff:0b:53:b2:b1:99:10:ce:d0:f7:
e2:d9:08:b4:8d:4b:b0:8f:92:5b:e2:c1:1d:eb:7d:
a6:6f:9a:04:11:bc:86:f1:a3:87:cd:6e:b0:ed:27:
c6:aa:c4:f2:e4:3b:0e:a1:e8:66:b3:75:3f:2a:7f:
be:0f:a7:cc:a2:2d:67:61:32:ed:da:dd:e0:5f:17:
cc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E6:9A:83:C7:90:BE:54:DE:EF:07:16:65:D8:79:06:C4:15:CC:BB
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:35:23:75:c8:32:fe:74:c8:aa:15:2e:1c:55:f1:7a:9b:82:
f8:51:4a:00:e8:90:00:1d:a5:6f:bf:51:f0:cd:5a:91:0b:25:
57:d7:75:54:a4:6a:bf:c6:4e:32:e4:72:fb:4b:c8:29:62:ed:
f3:3f:7a:7f:c4:49:9f:04:a7:81:81:f8:11:66:fa:7e:35:65:
94:25:b4:da:af:a0:46:c5:62:95:23:0e:1b:d8:3b:6b:00:11:
ba:36:eb:8c:88:0f:49:7c:6e:56:64:06:85:11:23:ff:30:03:
c1:6c:a7:c5:a0:37:98:19:40:e8:8f:bf:af:0f:b4:39:a5:67:
3f:dd:52:f1:01:09:9a:c4:ce:01:d8:90:78:cb:c6:99:e3:5f:
0e:72:41:48:8b:3d:65:8f:45:d3:49:03:4c:2d:da:88:1d:3f:
aa:68:b8:92:50:8f:b6:0f:58:99:4f:d5:7c:15:09:68:7b:f6:
8e:fb:c1:5b:3b:50:d6:d6:f9:c7:18:24:8b:8b:71:f6:aa:89:
52:8a:db:25:e7:6c:4b:4e:87:fd:54:4d:2b:3b:a7:6a:75:6f:
40:6a:fe:ea:8f:48:2c:c6:60:28:21:88:28:1a:eb:a8:2c:79:
bc:31:37:c0:cc:05:b6:02:1e:d3:c0:df:5a:1b:74:bf:26:41:
53:7b:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:15 2026 by rpki-client