This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier: jlG2hbunh3LzVAYwJHU5OqgTpP/urQR8iL64a/fNbl0=
Subject key identifier: 9D:D2:2E:02:43:FD:9D:12:CC:E3:A4:1F:63:4B:5A:C2:B0:7F:0C:D8
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer: /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial: 019C4246B3D742EE06BE915C9E8EEB30A2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number: 133C
Signing time: Mon 09 Feb 2026 12:00:55 +0000
Manifest this update: Mon 09 Feb 2026 12:00:55 +0000
Manifest next update: Tue 10 Feb 2026 12:00:55 +0000
Files and hashes: 1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: DjDZ41jlK/wWfxMGZR1O/vMzcnxWpW4wymKIUppJ+RE=)
2: _vTGMoMd2OUixFc93cU4_AKUok0.roa (hash: 8AD33t0BoeAy789bxPf6MIdbPtyMKTJZlywsC+bTttg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:b3:d7:42:ee:06:be:91:5c:9e:8e:eb:30:a2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
Validity
Not Before: Feb 9 12:00:55 2026 GMT
Not After : Feb 10 12:00:55 2026 GMT
Subject: CN=9dd22e0243fd9d12cce3a41f634b5ac2b07f0cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:cf:5b:fc:28:7a:7e:56:56:f4:d2:38:25:
7a:ed:c1:29:36:af:81:b7:f5:66:3d:1f:27:0f:64:
96:7d:92:ce:0b:fc:71:9f:06:fd:0e:f4:7d:a0:56:
8c:c8:01:7a:12:d9:d7:57:99:7f:62:51:7f:1e:50:
83:b7:c6:26:08:2b:a3:e5:6d:3d:30:72:9a:c2:16:
86:f2:c2:27:86:36:b0:f9:f1:07:47:9a:76:36:71:
b0:b3:05:53:9d:37:81:61:91:44:26:dd:40:e8:f9:
60:58:8e:1d:47:12:4b:8f:ad:4a:a8:3c:30:df:c7:
1f:28:db:a4:f2:03:f6:a8:fc:35:2a:57:97:02:ee:
c8:47:fc:d0:e9:ce:4f:b5:43:f4:56:f9:09:f9:2a:
c1:b3:a0:3b:da:b1:b3:14:4a:85:96:50:c9:60:b0:
47:1b:32:67:5d:26:c6:43:0c:d8:cc:46:99:95:88:
39:ca:e6:a9:47:5f:d9:ca:f0:d1:92:3b:1c:36:78:
67:8b:1a:ea:18:f2:40:44:bb:9a:f2:31:9c:15:a8:
df:2e:a3:a6:d6:3d:71:d1:dc:c5:ea:f6:f5:e9:c6:
d6:2a:dd:16:ea:14:f3:55:5b:4c:41:33:0d:34:6a:
5b:a2:83:33:3b:bf:1c:92:02:bc:07:fe:b7:ce:4d:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D2:2E:02:43:FD:9D:12:CC:E3:A4:1F:63:4B:5A:C2:B0:7F:0C:D8
X509v3 Authority Key Identifier:
keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bf:9b:48:7d:87:15:45:65:cc:68:57:ce:10:c0:19:9e:91:
13:da:fb:06:1b:64:79:38:40:41:b2:5a:f0:e5:9a:81:cc:91:
0b:78:19:74:d4:70:44:92:fa:83:de:7a:e9:67:c0:70:ff:ab:
53:de:ff:51:b8:62:4b:83:1a:3e:de:31:00:06:c8:9f:7f:2f:
4e:5f:61:a9:4b:3e:5d:8c:31:7e:dd:fa:5a:3f:aa:4c:8c:58:
5e:b6:b5:b8:42:c8:1c:4d:53:49:a7:f7:32:2a:fd:96:e2:ec:
98:78:3c:5c:ce:b2:5a:55:e3:d4:2e:cf:0b:d3:f9:00:0e:88:
0c:ba:20:20:e5:80:1c:d0:12:3b:df:00:42:94:ae:ab:5b:be:
e8:a7:ae:21:64:79:6b:9c:9f:0f:3b:2d:30:41:d2:bf:b1:83:
7e:00:cf:90:cc:ce:17:22:40:3d:5e:1c:31:de:50:d9:a5:05:
94:66:31:33:59:ee:1c:6b:b9:b6:3d:25:77:f1:f0:c7:a8:db:
95:33:31:23:a7:dd:3a:b0:fc:a8:33:21:f0:b0:c5:87:92:ec:
a6:78:26:fe:14:81:40:8c:33:94:c6:43:f5:fa:0b:87:7d:b1:
b4:98:a3:b0:59:23:f3:ee:dc:51:b4:14:2f:4e:1b:72:d1:e6:
13:2a:71:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRrPXQu4GvpFcno7rMKLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOThlOTA3YzYzNDU3ZTZjYTYyODFkZmUyOTdkOTcyYmZm
ZGE4MDUwHhcNMjYwMjA5MTIwMDU1WhcNMjYwMjEwMTIwMDU1WjAzMTEwLwYDVQQD
Eyg5ZGQyMmUwMjQzZmQ5ZDEyY2NlM2E0MWY2MzRiNWFjMmIwN2YwY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA287PW/woen5WVvTSOCV67cEpNq+B
t/VmPR8nD2SWfZLOC/xxnwb9DvR9oFaMyAF6EtnXV5l/YlF/HlCDt8YmCCuj5W09
MHKawhaG8sInhjaw+fEHR5p2NnGwswVTnTeBYZFEJt1A6PlgWI4dRxJLj61KqDww
38cfKNuk8gP2qPw1KleXAu7IR/zQ6c5PtUP0VvkJ+SrBs6A72rGzFEqFllDJYLBH
GzJnXSbGQwzYzEaZlYg5yuapR1/ZyvDRkjscNnhnixrqGPJARLua8jGcFajfLqOm
1j1x0dzF6vb16cbWKt0W6hTzVVtMQTMNNGpbooMzO78ckgK8B/63zk2rGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3SLgJD/Z0SzOOkH2NLWsKwfwzYMB8GA1UdIwQY
MBaAFNCY6QfGNFfmymKB3+KX2XK//agFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2Mt
MTBlMTNkNDNmMGRkLzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2MtMTBlMTNkNDNmMGRk
LzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7+bSH2H
FUVlzGhXzhDAGZ6RE9r7BhtkeThAQbJa8OWagcyRC3gZdNRwRJL6g9566WfAcP+r
U97/UbhiS4MaPt4xAAbIn38vTl9hqUs+XYwxft36Wj+qTIxYXra1uELIHE1TSaf3
Mir9luLsmHg8XM6yWlXj1C7PC9P5AA6IDLogIOWAHNASO98AQpSuq1u+6KeuIWR5
a5yfDzstMEHSv7GDfgDPkMzOFyJAPV4cMd5Q2aUFlGYxM1nuHGu5tj0ld/Hwx6jb
lTMxI6fdOrD8qDMh8LDFh5Lspngm/hSBQIwzlMZD9foLh32xtJijsFkj8+7cUbQU
L04bctHmEypxbw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:36 2026 by rpki-client