This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: jImicnExni5jibgWVRyVevKIuSfR8+Z5UkDq6LR5lDQ=
Subject key identifier: B6:6B:F9:21:7D:77:64:6D:59:14:00:02:98:36:81:B3:9E:11:7A:A5
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 019C43FE1F6E13C2F723461ED10389ACF3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 20:00:53 +0000
Manifest this update: Mon 09 Feb 2026 20:00:53 +0000
Manifest next update: Tue 10 Feb 2026 20:00:53 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: kTk6w75TGvQnI0AAc/O4eMVcQK+UuEvQbCyOKdqnfMQ=)
2: mGKvGN6mzAi9Xi9OgEnQnIpovsQ.roa (hash: AZAga0gvOyoyk29F5YS9oe0dyqX933PqnZoBR7aFkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:1f:6e:13:c2:f7:23:46:1e:d1:03:89:ac:f3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Feb 9 20:00:53 2026 GMT
Not After : Feb 10 20:00:53 2026 GMT
Subject: CN=b66bf9217d77646d59140002983681b39e117aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:16:bd:5d:b6:df:7d:a5:04:9d:e2:53:41:45:
5c:7f:c5:a0:c9:4d:62:2c:a7:10:91:d2:98:6a:e5:
03:6a:1f:fa:c0:d2:fe:f4:a4:96:ed:50:47:bb:9c:
68:39:1c:db:83:28:3b:d1:47:3e:07:4c:ef:3f:c8:
18:d0:71:96:c6:ce:84:48:4b:b7:28:fd:6d:bb:60:
58:bc:67:97:25:6f:a4:64:c4:45:13:49:be:15:74:
14:37:e0:c4:c9:af:30:76:2f:90:e4:b3:7e:ab:4d:
86:d6:56:bb:c3:36:f2:a0:7a:07:67:fa:36:1e:ed:
84:22:5f:09:92:f3:74:28:27:dc:70:84:c8:fa:29:
e8:5d:ca:4b:09:af:cd:12:ab:2b:50:f6:95:07:95:
1a:4d:b4:6f:d2:80:79:23:da:7b:45:ce:52:8e:a9:
5f:b7:39:a4:92:08:ea:33:cd:07:d4:84:8a:12:3d:
23:2b:04:4c:0e:04:82:2a:b8:cd:97:41:b1:cd:63:
9f:76:f0:14:05:6c:9c:4c:96:ae:b0:bc:68:b7:15:
16:15:bf:32:fd:74:ab:49:dc:87:cf:2d:5a:a8:e3:
09:45:02:d7:1e:72:29:0e:63:14:83:18:b3:50:fa:
90:db:fb:55:03:60:f6:9a:75:9d:f6:84:e7:1d:fe:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6B:F9:21:7D:77:64:6D:59:14:00:02:98:36:81:B3:9E:11:7A:A5
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e7:9d:4e:96:54:94:41:4a:1c:e4:0a:bc:e0:e5:90:cc:42:
57:6e:36:ca:ec:2a:53:ea:91:95:66:2e:82:a4:23:bf:8f:38:
a6:83:1e:40:9f:25:cc:dd:71:ad:4d:e4:21:ee:1c:04:0f:44:
a2:1b:49:38:b7:b0:2c:37:4b:65:70:0f:0c:a1:e1:86:bc:a1:
f2:52:cf:34:44:63:2c:e5:fb:9b:80:ec:17:ed:da:c5:ab:7f:
d1:df:a7:7a:dd:dd:b7:23:bf:b6:0d:96:69:2b:92:c8:8f:11:
b0:e2:0f:5d:d4:4e:6a:c5:f2:cb:d4:38:9e:43:a3:5e:65:fc:
26:ee:4e:86:cc:c6:ce:1e:cc:9d:70:cf:08:af:3f:46:bd:09:
2c:94:be:ec:d8:c7:35:29:c3:cd:6a:f2:e7:b9:f7:76:18:a2:
57:c0:ee:35:d4:e3:0d:71:79:9f:63:a2:d0:94:e5:b8:fa:79:
93:03:d9:25:78:70:fc:95:73:51:73:5b:83:2b:d5:50:25:ed:
ac:b4:5d:6b:a1:e3:00:96:19:84:09:66:3c:17:b0:0b:b4:d9:
3a:8f:d0:29:92:76:6a:7e:0c:c4:d3:b6:05:0d:04:d2:c1:c6:
55:87:f2:ac:c2:bf:7b:47:d3:3f:3b:c9:2a:0d:0d:14:cb:81:
a9:2a:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:16 2026 by rpki-client