This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
File: cub9InHd4QiG2X_xRwPlgaIEtl4.mft (raw, json)
Hash identifier: 8Jzn6CPoJTqAqlihTDX/oEDony/HtMOFS+LwEg6JTrI=
Subject key identifier: 1B:D2:D8:77:70:94:25:49:DB:73:18:F9:BF:83:94:35:27:9B:77:49
Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e
Certificate serial: 019C4321E16B88FA35FBEBBDEE5B17449C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
Manifest number: 07E6
Signing time: Mon 09 Feb 2026 16:00:19 +0000
Manifest this update: Mon 09 Feb 2026 16:00:19 +0000
Manifest next update: Tue 10 Feb 2026 16:00:19 +0000
Files and hashes: 1: aMBkxohgXCBHlVf4cqZehB-dZl8.roa (hash: 52GsVdhZ9s3mGch2GNyJmZC5fofL+PlpDWV6v2/k90g=)
2: cub9InHd4QiG2X_xRwPlgaIEtl4.crl (hash: YbHbcwacPVDEuJNAIZkfMRho01GY3i0Bm2fdeYF1Gc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:e1:6b:88:fa:35:fb:eb:bd:ee:5b:17:44:9c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e
Validity
Not Before: Feb 9 16:00:19 2026 GMT
Not After : Feb 10 16:00:19 2026 GMT
Subject: CN=1bd2d87770942549db7318f9bf839435279b7749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4f:88:24:3d:ce:37:64:d3:c1:06:2e:10:86:
d8:ca:43:4a:8b:3d:ee:eb:ed:47:50:27:93:e8:8f:
e6:13:81:a2:51:a8:95:0e:36:f2:be:88:a5:a6:d8:
5c:d1:14:92:a8:aa:0e:5e:02:12:b7:4c:d0:20:d2:
87:47:ec:a5:9c:40:9f:a7:2d:96:0c:bf:5a:f7:63:
b0:09:bc:2b:17:ee:4f:33:14:2d:29:2a:69:f4:77:
33:7e:8a:a3:94:db:92:a6:91:5e:53:56:55:0f:f0:
f2:d0:28:9d:d0:15:e8:9b:57:3f:53:b8:b2:46:ae:
4c:b1:a0:1e:2e:2b:ef:02:60:da:16:76:d2:e4:a2:
5b:b7:6f:6f:69:e3:08:f3:28:2c:51:d8:6d:79:e7:
9b:22:74:0d:05:d1:d8:81:43:81:24:cb:fb:52:27:
99:fe:85:bd:1b:11:c8:bb:b0:d5:63:09:d1:00:af:
37:d3:ff:c4:6d:80:8f:63:e9:6a:40:c8:85:76:1f:
9c:6a:17:8b:67:63:a7:28:8c:fc:ef:b1:46:15:c0:
2a:7a:83:73:38:e3:b9:ad:e3:82:c9:28:a2:19:82:
74:44:84:e7:25:ca:b9:a6:ab:da:c6:a4:4e:8c:77:
06:57:a6:e4:c0:ec:da:e4:ad:dd:c8:fd:5c:5d:e2:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:D8:77:70:94:25:49:DB:73:18:F9:BF:83:94:35:27:9B:77:49
X509v3 Authority Key Identifier:
keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:21:ec:8d:6d:63:04:0f:6b:07:1b:da:bc:25:3d:0f:5e:98:
6c:f6:85:20:37:85:04:05:6f:13:b6:4b:8b:1a:0b:05:51:4d:
f6:43:7a:34:de:99:6b:63:34:85:7b:7d:f0:af:34:1e:82:75:
f9:2b:5e:db:3d:a1:0e:1b:0b:9e:be:bf:f6:c9:86:44:d6:3b:
bb:c8:b2:bc:bd:fd:e8:4f:3b:f8:3f:d8:99:e9:43:bd:8f:a4:
d8:ae:1e:73:f8:6c:d0:e3:3f:ab:22:5c:0e:fb:36:50:fa:f7:
9b:f8:8f:0d:f1:a1:0c:8c:eb:a3:ba:03:51:c2:ee:40:b9:fd:
4a:79:f6:ca:74:5a:e4:df:3a:b0:35:ca:40:7b:68:89:10:e3:
a0:ce:66:8e:c6:e9:bf:de:96:88:d0:ca:35:80:55:8a:d9:ac:
76:69:e4:40:78:66:ef:85:0d:ce:35:02:c3:d5:fd:76:87:7e:
2f:6f:7a:ce:d5:70:b5:f1:84:21:f7:4a:5b:3a:23:7d:ce:8b:
b4:41:18:73:41:b3:78:40:3a:ea:7e:6a:e5:b5:c9:b8:82:ac:
3b:b2:8a:71:11:d5:9e:be:dc:ba:40:60:c1:a2:4e:04:df:c1:
03:4d:2f:38:f5:e0:6a:6b:2d:2e:cc:19:6f:81:34:79:d5:32:
21:6e:82:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:46 2026 by rpki-client