This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: +GODGP+OiuAsxBIyD0dBFtPK4riTx6zLFJuCt4BBpMA=
Subject key identifier: 98:4F:AC:1D:81:D5:13:28:C1:21:7D:2B:EC:7A:D4:3B:8C:46:17:72
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 019C43594ABC263DC1BF3B74E499E24D33B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 0CC4
Signing time: Mon 09 Feb 2026 17:00:51 +0000
Manifest this update: Mon 09 Feb 2026 17:00:51 +0000
Manifest next update: Tue 10 Feb 2026 17:00:51 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: 6H679BCxX2jRIQxZfzxY80EIos8t/MXb+NzmEM+rBVA=)
2: ptikDTRhjTNxZI8dkI54eJbGFTA.roa (hash: 3SdSmJMo+FOvr1IMdnku5tDe7K6GsQTnPIBl17tgA08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:4a:bc:26:3d:c1:bf:3b:74:e4:99:e2:4d:33:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Feb 9 17:00:51 2026 GMT
Not After : Feb 10 17:00:51 2026 GMT
Subject: CN=984fac1d81d51328c1217d2bec7ad43b8c461772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:da:93:94:46:03:b3:b7:8c:cd:c6:ae:09:
a3:bb:35:69:7b:40:4c:5f:8d:11:f6:3f:50:68:23:
74:eb:1e:61:21:15:38:63:a5:a1:73:21:09:57:b9:
9c:78:10:f9:ad:69:1a:4b:38:00:cb:2d:f0:0d:9f:
28:12:25:8f:4a:6b:65:f9:d4:a3:f3:50:fb:30:0b:
13:80:ed:7d:82:68:cd:89:a2:14:2b:d0:f2:bb:31:
11:f0:4f:27:8d:ed:91:ed:9f:97:10:e0:8d:03:1f:
ec:1a:00:ea:2b:9e:6b:59:56:de:0b:3a:56:3c:83:
db:69:66:00:d8:51:7b:26:23:c7:c3:7c:0e:06:bb:
52:b9:af:a9:5f:74:b8:42:3d:9f:26:ec:38:55:f1:
56:4f:14:c0:27:a2:10:16:03:e7:1f:48:08:bb:53:
65:f7:a7:13:3a:b0:eb:f6:cf:8d:89:45:3e:b2:f6:
80:99:99:f2:f1:9d:e2:9f:a8:0d:0b:a9:61:97:19:
7e:bb:33:d4:06:aa:a3:7c:57:a9:e2:98:f6:63:04:
fe:a4:95:f3:cb:90:33:7f:11:47:84:16:de:b5:9c:
9e:d3:20:15:83:5f:a9:cd:1c:7c:eb:0a:56:9a:d1:
7e:bc:86:f7:21:1c:a0:8a:95:8d:f4:3c:18:e4:01:
71:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4F:AC:1D:81:D5:13:28:C1:21:7D:2B:EC:7A:D4:3B:8C:46:17:72
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:77:5c:71:35:05:7d:a5:eb:a4:5c:03:5f:46:90:c4:78:59:
09:13:20:8d:32:69:5c:94:44:0d:42:02:7d:fe:8a:d8:52:be:
1d:9c:e1:2d:e9:3a:75:c4:5c:d8:61:a0:d9:33:14:ed:11:88:
c2:04:e2:7f:e6:5b:a7:32:cc:f8:66:fa:0b:5e:be:12:ac:a4:
68:7c:36:ca:00:17:64:2a:c0:ea:6f:a0:dc:ea:1c:21:28:18:
ed:84:be:c8:86:82:08:ad:0b:d9:71:b4:28:5c:bd:39:21:e4:
3c:9a:95:db:c4:7c:ef:f1:e7:0a:24:66:f3:8d:ed:e0:41:38:
cf:bd:05:f3:51:ee:72:d7:c6:43:e3:90:13:b5:df:3e:c4:b7:
9a:4d:23:70:6d:0b:7c:5b:b7:e2:6e:9f:c0:6b:12:88:e4:d5:
ea:c4:d7:8b:24:2a:5a:42:e8:9f:e8:2b:1f:88:f1:08:7f:12:
ae:f2:89:03:96:95:64:7f:ee:ec:75:0e:31:df:ae:c3:4f:16:
c3:7f:75:cf:90:f8:8f:f3:71:4e:ca:38:e9:10:7a:53:01:9e:
11:74:9b:3f:e9:fa:31:a0:09:5e:67:0e:e5:63:09:2f:c0:fe:
dd:d8:31:1c:3a:cc:29:41:b8:3f:c8:44:a0:a8:1d:68:2f:15:
5d:bf:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:54 2026 by rpki-client