This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
File: X9-gmGf3f6_At75-PE3iDirEN3A.mft (raw, json)
Hash identifier: IycbrWer70S02qawm2BihjsYDr6P1vUAzWXo5YI6aEg=
Subject key identifier: 18:90:EC:E4:AB:C1:F7:8B:D7:C7:00:F1:02:7C:83:FC:39:93:14:A8
Authority key identifier: 5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70
Certificate issuer: /CN=5fdfa09867f77fafc0b7be7e3c4de20e2ac43770
Certificate serial: 019C43C733A2C357642A284C98B0B8463C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
Manifest number: 0129
Signing time: Mon 09 Feb 2026 19:00:54 +0000
Manifest this update: Mon 09 Feb 2026 19:00:54 +0000
Manifest next update: Tue 10 Feb 2026 19:00:54 +0000
Files and hashes: 1: X9-gmGf3f6_At75-PE3iDirEN3A.crl (hash: 1eL7zUaKdLgkFy5yEsQmBJW5EyZyD/1xQy13ZMO60Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:33:a2:c3:57:64:2a:28:4c:98:b0:b8:46:3c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdfa09867f77fafc0b7be7e3c4de20e2ac43770
Validity
Not Before: Feb 9 19:00:54 2026 GMT
Not After : Feb 10 19:00:54 2026 GMT
Subject: CN=1890ece4abc1f78bd7c700f1027c83fc399314a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:5a:5b:79:15:39:de:f2:a8:f9:41:6d:7c:
4c:e8:f0:27:61:dd:51:c1:59:65:ff:6c:c4:e6:4e:
23:cd:2f:be:2f:5f:86:8d:7d:a6:69:35:d7:ad:48:
de:10:17:47:b1:90:44:3b:ec:be:5e:e5:00:ce:0d:
37:24:8b:a5:33:2f:9f:39:34:ca:5c:70:f0:b6:7b:
22:af:fa:4f:1f:54:fa:52:8a:ce:4d:61:aa:d0:36:
00:f6:50:4c:67:86:62:4a:cf:80:8a:8b:8b:93:08:
75:16:02:65:5b:3b:1e:8a:de:37:27:0c:87:c9:17:
0b:06:21:9e:85:10:9e:ce:95:6b:ba:b3:9c:93:c4:
d4:e9:e7:ef:e3:89:e3:7c:2f:51:fb:ac:e9:9d:db:
0a:a2:16:38:8f:33:ec:82:14:5a:14:0b:86:46:30:
a6:54:e7:8f:6a:b2:af:a2:99:a1:f7:1b:ba:9e:72:
89:4b:75:31:92:79:c0:21:84:64:81:2a:d3:af:ea:
54:7e:58:e3:3e:bf:a3:9f:ce:e8:cb:13:d8:6c:b0:
07:34:d4:86:30:6d:3a:8d:ae:6a:27:a7:fd:01:c6:
99:42:67:26:de:24:be:bb:fe:4c:bd:fe:11:36:f1:
ee:30:f5:c7:6a:bb:c9:bd:e7:b3:5c:6b:b6:6d:4f:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:90:EC:E4:AB:C1:F7:8B:D7:C7:00:F1:02:7C:83:FC:39:93:14:A8
X509v3 Authority Key Identifier:
keyid:5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c7:6c:27:d0:33:41:bd:d3:01:6a:29:ea:83:a8:db:c8:bf:
4c:b0:40:f8:79:aa:17:a3:76:61:22:1c:78:bd:93:99:fa:23:
f5:43:94:58:29:0a:5e:4f:d9:4b:fe:a1:bb:09:99:37:42:0d:
cc:1e:49:77:c8:68:02:a0:06:3c:79:60:8e:e6:22:18:e7:0f:
21:69:87:db:b0:1d:5b:cc:c3:e8:53:36:48:92:29:e9:ca:7f:
02:eb:9a:0d:8d:1a:9f:8c:4d:26:13:89:12:da:bd:ae:49:f8:
a7:5a:5f:1a:98:66:b2:38:2f:dc:23:61:ce:cc:82:1c:11:c8:
c5:29:e7:cd:47:2f:d6:99:85:ca:78:2a:97:63:6a:b0:8a:04:
77:fc:e0:66:cc:fe:b0:fd:9c:7d:f7:ce:ba:4a:5a:15:15:3d:
03:3d:41:8f:fd:cf:3a:30:fe:73:93:1a:88:03:0e:05:55:4c:
d1:a8:45:70:3a:a8:c9:1c:4f:0e:39:af:2d:5a:82:9a:5f:ad:
9d:aa:7b:6a:12:f6:ed:fd:aa:2a:bb:99:09:57:97:0f:6d:7b:
d8:9d:d2:39:4b:93:f8:8b:fa:b3:9e:08:f4:1a:3f:70:2d:72:
bd:a4:31:7b:34:8f:8e:4e:a7:da:d5:45:b5:75:85:13:63:b6:
9a:d4:ae:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:44 2026 by rpki-client