This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
File: moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json)
Hash identifier: HhhUVHAQEUgOY6ho06FSyR8h3uLQQCa+FcefZxeAsQ0=
Subject key identifier: F1:EE:39:8E:6F:CB:41:36:BB:8D:C3:4D:36:0F:C8:4E:CA:71:A7:E1
Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
Certificate issuer: /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Certificate serial: 019C43900B493F2FD27284AA33F11CA1F1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
Manifest number: 0848
Signing time: Mon 09 Feb 2026 18:00:39 +0000
Manifest this update: Mon 09 Feb 2026 18:00:39 +0000
Manifest next update: Tue 10 Feb 2026 18:00:39 +0000
Files and hashes: 1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: 9M5xrwXALRgdxSGirAijQmH9OFsF04ex2R8qNQTe1kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:0b:49:3f:2f:d2:72:84:aa:33:f1:1c:a1:f1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Validity
Not Before: Feb 9 18:00:39 2026 GMT
Not After : Feb 10 18:00:39 2026 GMT
Subject: CN=f1ee398e6fcb4136bb8dc34d360fc84eca71a7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:aa:54:1a:eb:bd:b5:db:ab:24:d5:1a:6c:
b9:9d:fd:1a:32:e9:2c:fa:d6:9b:26:fb:09:43:fd:
60:54:03:8c:56:8e:c6:13:6f:d5:a0:06:f3:e5:a6:
da:19:7f:ba:52:02:55:e8:0e:60:27:4d:3d:a5:60:
4f:08:0c:b6:29:7e:03:c7:62:df:97:8d:10:a4:1c:
fa:a1:58:7a:b0:79:16:fd:0a:19:bb:49:80:af:f5:
f7:1d:d3:56:6f:8d:a5:92:fa:44:07:d3:ed:27:0e:
e5:f9:a4:7e:b2:28:88:32:01:41:52:40:7c:56:b5:
56:e4:06:63:52:7a:63:bd:52:4e:eb:21:6f:16:00:
3f:3d:37:e5:00:f7:08:41:6f:4c:00:cc:5e:fc:df:
30:7e:9c:a6:e4:f1:e1:98:12:37:9a:97:9a:21:8c:
fc:44:05:97:62:8a:e0:bf:01:3f:f1:30:66:75:e6:
5b:81:b1:df:b6:6c:25:d5:71:1a:f9:18:25:48:dd:
e3:16:06:be:77:bc:b1:98:72:b7:b2:23:1d:9c:27:
b4:c9:9c:9e:89:c1:17:95:0f:52:73:ac:b8:4d:82:
66:cf:56:78:76:c0:10:40:c2:1c:e8:b5:11:68:69:
5a:88:3c:32:bb:62:95:7b:97:5c:f2:8a:1e:1f:32:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EE:39:8E:6F:CB:41:36:BB:8D:C3:4D:36:0F:C8:4E:CA:71:A7:E1
X509v3 Authority Key Identifier:
keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:12:fb:aa:8e:77:a7:f9:fd:14:4c:7f:81:1b:df:ea:15:9c:
43:6e:3b:ca:f8:a6:10:9e:ff:12:df:cd:b8:f9:2f:79:ef:da:
04:bd:33:77:e5:03:c4:6c:7f:be:dd:65:59:ee:96:83:b0:65:
17:97:9f:b8:8d:0d:0b:b0:61:2d:8c:f6:d6:42:7b:e8:0e:80:
6a:6a:f6:b5:2b:e9:83:ef:c8:b6:c8:00:17:ab:b6:ba:2c:c7:
d5:17:5d:f4:a1:01:30:d8:a9:b1:bf:79:c4:76:e7:1a:4e:5e:
6e:b4:fb:50:73:36:7d:5e:9f:1a:fe:61:98:71:c4:bf:5c:8d:
68:b7:5c:5b:14:bd:1b:34:8e:ee:88:6c:c0:3d:51:3e:77:17:
4f:6f:e2:da:0a:7c:8c:15:26:02:26:bb:7f:e9:85:06:5c:c7:
4f:f6:4a:52:51:62:07:12:fd:10:52:29:cf:87:83:3c:95:1a:
ce:c8:7c:e1:55:51:33:93:60:2c:e9:04:ea:4e:74:e8:e5:24:
24:6a:f0:b1:20:68:39:13:47:f8:f0:ce:e2:e5:98:ea:fe:73:
30:26:6e:d6:4c:b8:6f:e1:65:62:fb:55:bb:0c:8d:f7:54:5c:
4f:8e:62:28:30:c1:72:31:fe:f4:87:1c:42:76:15:6a:c1:64:
5a:94:8a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:55 2026 by rpki-client