This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: JlShlbs6pdnA1ACuCHtHI3pcmC+4XUYlRd0IH+9qbnw=
Subject key identifier: 9E:EF:ED:2C:19:F7:2A:90:F0:5A:D6:E1:B8:2E:EA:47:27:36:6F:77
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 019C427D85CCD96EEF4D60B98800CDD2F803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 0AD4
Signing time: Mon 09 Feb 2026 13:00:48 +0000
Manifest this update: Mon 09 Feb 2026 13:00:48 +0000
Manifest next update: Tue 10 Feb 2026 13:00:48 +0000
Files and hashes: 1: Ph0J2YLOlU7YjgB24Ww0ogtAJDo.roa (hash: itSFIEdCoDExFok/Ab/usil828dE//sP90iU8HWvoSU=)
2: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: uRqV1MW4OPWbPQUizboudm/P6Lbomvn4Jsv8D8Gy/tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:85:cc:d9:6e:ef:4d:60:b9:88:00:cd:d2:f8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Feb 9 13:00:48 2026 GMT
Not After : Feb 10 13:00:48 2026 GMT
Subject: CN=9eefed2c19f72a90f05ad6e1b82eea4727366f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:3f:10:46:be:c6:5e:98:da:53:b1:17:90:
77:7f:a6:49:6c:39:8a:fe:56:50:56:de:83:52:c3:
75:90:22:7f:5a:da:bf:e1:c7:0a:4d:fa:05:eb:07:
35:68:e9:c7:06:39:42:37:2c:62:13:44:4f:df:cb:
0f:9b:eb:d8:94:05:13:6f:cb:fe:6c:42:6c:52:87:
89:18:bb:5f:e1:63:56:ab:33:86:76:a6:18:42:74:
51:bb:13:3f:2a:20:a7:83:35:72:d0:15:35:ad:ff:
2c:e0:c5:84:22:df:23:77:2f:4a:94:19:f7:5f:f3:
78:80:57:50:ce:1e:64:d5:7f:f4:25:5b:32:97:4b:
fc:8e:62:cd:26:90:11:93:6c:12:50:fd:ba:1c:63:
10:26:48:45:fa:71:3b:21:6c:50:23:61:fc:37:45:
61:18:08:72:7a:9c:4b:00:43:7a:2e:ce:d6:ae:d4:
fb:aa:a6:6e:a7:ad:f5:3b:4a:d4:0b:6e:d8:2b:39:
74:0d:34:64:24:8c:82:04:ee:d0:e8:e6:67:f1:f9:
3a:1f:05:fc:32:0e:44:f8:fb:bc:5c:d2:de:04:cf:
2e:8e:2e:0a:4d:f3:83:30:be:e3:49:c6:e7:70:b5:
5e:bd:36:2b:40:c8:bd:58:dd:fb:dd:4d:17:c7:9b:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:ED:2C:19:F7:2A:90:F0:5A:D6:E1:B8:2E:EA:47:27:36:6F:77
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b7:58:4a:46:15:b4:aa:2a:55:50:86:df:dd:8b:b1:3b:29:
d1:15:b2:6f:75:43:05:70:f9:f7:16:67:04:10:ea:5f:a8:8c:
9b:7e:1b:40:c2:14:44:e6:4d:43:71:79:5e:b0:f9:66:d3:3a:
10:62:44:b5:a8:b2:58:ec:3f:bb:1d:57:58:75:ab:72:1c:33:
2b:a9:0d:3c:1d:25:7b:71:e5:17:c7:5d:6b:1a:6e:07:73:b5:
8f:9d:83:35:61:5a:9e:2b:5e:55:a8:05:c4:ee:71:33:1d:ba:
f7:65:20:24:01:b9:d3:5c:67:33:14:ab:ae:97:5c:cf:5d:7b:
6f:13:70:3b:53:95:f8:74:e0:93:41:bb:4b:0b:6b:f6:36:b8:
c2:85:36:50:75:47:e7:d9:3c:6b:87:f1:af:2e:0e:7e:94:2b:
3d:43:3b:58:b2:57:e0:ae:d8:9a:25:c3:99:00:7a:26:d5:4b:
a0:8b:4c:00:48:c7:77:2e:55:67:40:54:9a:6b:55:61:e8:0a:
8f:66:65:15:0a:27:d4:64:00:08:4f:fc:47:10:1a:31:e5:fb:
d9:fe:63:25:40:2a:ec:b6:e9:df:c9:ed:5c:90:1e:6e:ba:fc:
1d:8e:fe:b5:f1:2e:b9:bf:61:0b:b6:b9:ed:24:44:e7:74:cc:
cc:14:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:54 2026 by rpki-client