This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
File: cHSIc9gyAihk-skAZdUdjie0Pl0.mft (raw, json)
Hash identifier: 9B6u9Vx2kFDFS9P2H8ztv8RmTxnv54gYKsd3+nflCCc=
Subject key identifier: 03:9C:26:50:76:24:D2:8C:66:05:EC:A1:66:75:07:F4:16:AC:33:A2
Authority key identifier: 70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D
Certificate issuer: /CN=70748873d832022864fac90065d51d8e27b43e5d
Certificate serial: 019C427D999F1DAFE5191F0478237C0E0C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 13:00:53 +0000
Manifest this update: Mon 09 Feb 2026 13:00:53 +0000
Manifest next update: Tue 10 Feb 2026 13:00:53 +0000
Files and hashes: 1: O-DHQ-d3mfAOgq3yuIWV4iVv_x8.roa (hash: dSSiaDVSWahBigya5YVNu9L0fcAePIWgFzlkT6f9BmA=)
2: cHSIc9gyAihk-skAZdUdjie0Pl0.crl (hash: ohKe23ZASxj8aEU3bHjN+3DgaKgObsTRzFGg3o/JRsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:99:9f:1d:af:e5:19:1f:04:78:23:7c:0e:0c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70748873d832022864fac90065d51d8e27b43e5d
Validity
Not Before: Feb 9 13:00:53 2026 GMT
Not After : Feb 10 13:00:53 2026 GMT
Subject: CN=039c26507624d28c6605eca1667507f416ac33a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:9d:6f:ec:c4:eb:cf:2e:b8:d0:78:02:cf:7f:
e4:be:e5:d7:68:cf:67:fa:5d:dc:34:49:4d:09:e0:
e2:98:b6:99:7d:8c:c4:fd:61:8d:44:8e:7b:b8:3d:
89:1d:f7:66:09:89:4c:7e:c6:46:d9:15:3d:c1:b3:
83:cc:f8:52:07:26:49:90:ae:20:bb:34:10:da:63:
2d:e8:cb:4f:42:03:03:4f:45:89:21:df:c9:07:49:
ba:2e:67:2c:ad:d7:3a:ba:11:2d:1f:f8:2e:96:08:
1b:75:0f:79:38:35:b4:8d:7d:67:04:95:e7:59:d9:
91:23:85:5a:9c:bd:b5:a6:c2:ad:32:03:97:8c:5d:
bf:92:2f:49:5e:d7:66:34:18:06:df:3b:0d:34:cc:
f3:27:29:5f:75:87:ad:2d:2a:3a:6d:d1:16:6b:9e:
e0:11:69:8e:e7:16:eb:81:cb:5f:ad:f5:a1:9f:5a:
11:93:8a:d1:e8:bd:17:b3:cd:e3:d0:53:90:f7:8a:
8d:03:cc:3d:d7:66:82:62:69:a1:36:08:3d:8a:35:
f7:8d:2b:f1:9c:51:b5:4e:c0:98:3a:25:46:04:a4:
da:fb:b5:9d:38:6c:f7:01:df:64:8f:16:3f:49:18:
e5:de:43:b8:37:e1:b5:dc:9a:4d:8a:f6:ae:5a:50:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9C:26:50:76:24:D2:8C:66:05:EC:A1:66:75:07:F4:16:AC:33:A2
X509v3 Authority Key Identifier:
keyid:70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b1:b5:72:78:b9:40:34:3b:b9:29:23:23:52:f9:2f:52:05:
ad:92:94:2a:95:6d:6d:e9:a8:90:e5:d9:cd:ae:92:c6:7e:e8:
2e:c3:b0:b9:c7:26:3a:a4:43:f6:75:59:73:19:f5:39:d8:15:
13:73:51:c1:4b:d8:43:03:0a:41:af:a5:84:c9:48:ce:7a:d1:
b9:74:29:46:8e:07:42:0f:d9:97:40:e7:21:b1:e9:a0:c3:91:
0f:e6:d4:74:8f:78:6e:dd:5d:c1:51:dc:e1:55:10:88:ef:7a:
e6:01:14:aa:30:84:a2:d7:fe:21:1a:4c:87:d8:c6:db:be:cc:
ae:ca:2a:24:ba:4a:88:b0:19:7d:16:cc:4c:42:54:b9:26:09:
0e:14:42:00:47:a5:d1:09:73:e1:84:85:26:73:f3:76:84:4f:
db:d8:3d:7d:aa:f5:26:3a:d4:7a:4a:72:74:b2:6d:de:3e:82:
5e:fe:99:a0:d4:72:7c:eb:63:9f:7c:a9:f6:99:77:a3:95:bc:
26:ae:4e:1b:9d:d5:bd:4a:9e:45:ca:a0:f2:10:1b:3a:45:8b:
50:4b:3a:e6:7c:03:03:e5:60:6a:50:bf:71:a1:62:2d:20:90:
2d:10:bb:83:5c:9b:08:33:34:8e:9d:70:d4:c1:14:4b:1d:37:
0c:fc:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:04 2026 by rpki-client