This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
File: my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json)
Hash identifier: NFBQygUwLlHehHHwTutDSnitG2AHRPSMFpl9t8oLWeU=
Subject key identifier: DB:84:C6:4E:23:B8:4D:17:E1:0E:C8:4F:68:A3:9B:4C:C2:FD:7B:02
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial: 019C446B7AB4F5A9A8C705BF1D2C9618F3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
Manifest number: 09AC
Signing time: Mon 09 Feb 2026 22:00:20 +0000
Manifest this update: Mon 09 Feb 2026 22:00:20 +0000
Manifest next update: Tue 10 Feb 2026 22:00:20 +0000
Files and hashes: 1: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: tb2nU3cSpVgCbKqibrvpyj/u/UBGovr4MANEyBmFx60=)
2: qi2McZp71fHBoWBI2ZHbtQCvE4o.roa (hash: i0mtBmOyDYgRrM3+GxWl4R2NJ84ChiPy81fprThNQJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:7a:b4:f5:a9:a8:c7:05:bf:1d:2c:96:18:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Validity
Not Before: Feb 9 22:00:20 2026 GMT
Not After : Feb 10 22:00:20 2026 GMT
Subject: CN=db84c64e23b84d17e10ec84f68a39b4cc2fd7b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:09:7a:73:f1:3c:a7:c4:90:2f:3e:5a:65:
b3:cd:d1:46:15:61:10:3e:e8:77:5f:01:be:6c:e1:
cc:b1:12:98:c0:c5:1a:65:ac:e7:82:68:26:08:9e:
f8:29:6e:12:81:fb:ce:94:f3:fe:6b:03:db:3c:56:
b1:49:c8:57:4b:73:3b:27:28:21:b7:f3:66:79:b7:
f8:6e:b7:ff:1b:e9:64:be:d8:bf:22:16:7f:ed:ad:
69:38:a8:d3:b6:45:8a:1e:b3:4d:a5:b2:4d:d0:56:
9a:e0:c7:00:e7:a5:51:da:80:e8:5a:c8:f4:91:86:
11:a0:0e:a2:bc:0f:f4:36:e9:18:17:75:82:7b:e6:
06:c0:13:f1:f0:65:c8:e7:c4:4f:c1:7e:9c:e7:3c:
40:a6:cf:81:85:8e:e7:14:d4:78:da:6b:02:a2:81:
5e:ad:cf:00:6d:dd:de:89:8b:00:46:41:c0:99:9a:
fa:1b:92:78:df:a2:84:4b:f4:62:f3:90:34:33:c7:
0d:c1:93:fe:e0:6b:3a:95:b5:f5:19:cb:06:5b:f6:
8b:a9:b7:91:47:35:9e:60:c8:dc:36:d5:c7:04:ab:
0c:66:71:df:6f:5b:a0:0a:77:0d:a6:cf:d9:1d:ba:
1d:4d:de:fe:84:8c:aa:5b:cd:04:44:d5:e0:64:16:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:84:C6:4E:23:B8:4D:17:E1:0E:C8:4F:68:A3:9B:4C:C2:FD:7B:02
X509v3 Authority Key Identifier:
keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:36:86:f5:43:7e:4e:30:f8:60:39:ad:15:de:f0:0d:34:bf:
87:ae:99:f5:a1:1c:e0:0f:90:55:3b:ac:e3:bf:ea:65:1d:91:
82:ad:7e:1c:ec:e9:0a:ba:8e:ad:0d:41:10:a0:b5:bd:57:f6:
0e:7d:03:74:7b:c3:f6:7c:ea:3b:48:f0:cb:72:4d:f0:08:d3:
4f:5e:61:88:0c:c2:be:b7:c5:79:21:f3:c8:96:68:95:7b:9c:
30:45:69:e6:b4:4e:de:df:64:c0:af:91:43:40:d9:c6:8b:da:
c1:35:29:19:84:f0:c3:30:5b:91:49:ca:36:83:01:e5:8d:f8:
87:32:8a:5c:ff:c0:8f:9b:3d:c2:9f:c3:3e:bf:2d:e0:ab:6d:
df:b1:08:39:48:96:56:50:82:b9:14:8e:1b:72:ed:30:81:a9:
30:40:69:52:21:4d:a1:c0:f0:0c:33:81:88:0f:37:b1:e8:66:
9c:aa:df:d2:74:6c:84:21:73:dd:90:44:ba:37:c7:04:ad:ca:
2c:41:2a:e1:5b:53:ce:db:eb:24:c8:91:de:5a:1b:b8:1a:d2:
70:ac:8d:32:c4:75:5a:4b:a0:54:a4:54:89:23:27:5b:18:a2:
82:3f:87:93:c4:05:37:45:0f:0b:07:1c:87:d2:21:76:6b:f8:
0d:09:b6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:45 2026 by rpki-client