This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: 172EZjtb9uwQNHEHm3Fa78XH5dnXlAGXjOpwdYdQ208=
Subject key identifier: 9B:D8:2A:8C:09:59:D5:E6:77:05:C0:E3:E9:1B:AF:D8:47:54:47:B1
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 019C4390707933D1C003C7BC27B5B1814B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 18:01:05 +0000
Manifest this update: Mon 09 Feb 2026 18:01:05 +0000
Manifest next update: Tue 10 Feb 2026 18:01:05 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: rlhkpoW3f4DKgxyQeQRpR52s5jf44zpr6kq+g5ws030=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:70:79:33:d1:c0:03:c7:bc:27:b5:b1:81:4b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Feb 9 18:01:05 2026 GMT
Not After : Feb 10 18:01:05 2026 GMT
Subject: CN=9bd82a8c0959d5e67705c0e3e91bafd8475447b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:c1:9a:df:f5:3b:36:de:8b:37:a9:13:f3:
4c:78:7e:65:e5:b9:35:36:42:b0:d7:b8:22:67:2c:
7f:e0:60:24:11:a7:62:e9:54:4e:4b:4f:be:1d:c9:
b9:b0:e1:39:e6:70:46:22:0c:2d:79:df:ac:64:b7:
73:67:32:4a:b2:66:80:b2:f1:11:6f:4f:3c:c3:6e:
4e:04:7f:8a:77:47:b0:f0:ca:58:cb:30:8b:8e:89:
b6:ea:55:7a:d0:82:7a:86:4a:d3:49:35:23:42:a2:
40:19:90:78:dc:43:78:14:84:2f:e4:e4:c6:f1:50:
51:47:3d:5d:9c:fb:55:30:1e:28:2c:14:ea:84:df:
9b:98:20:6f:ab:3f:61:07:a0:7b:c2:2d:c5:c6:9f:
2d:31:a6:bb:f5:50:70:31:a0:38:f2:26:77:6b:11:
1d:12:14:2f:94:29:16:98:f3:ab:46:27:e3:b3:e8:
7a:7c:33:f6:c6:a7:07:5b:08:7c:c5:4e:3a:26:c2:
52:ef:3b:c7:53:32:1d:0f:99:71:d6:ed:46:ba:c5:
1b:d0:6d:15:74:15:d6:44:72:3b:d6:63:73:8b:a5:
9d:61:a6:40:52:a1:d0:55:16:ad:c6:5d:0e:f4:b5:
cb:e6:b7:ea:7e:2c:ec:ee:6a:7a:6e:1b:b7:47:cb:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D8:2A:8C:09:59:D5:E6:77:05:C0:E3:E9:1B:AF:D8:47:54:47:B1
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:09:8c:27:89:b6:b2:cf:71:b1:22:fb:26:1a:c0:ce:18:9e:
c4:05:97:b7:b5:ad:52:67:63:bc:df:5d:74:94:b9:16:4a:65:
24:61:4d:4a:44:e3:79:62:22:f3:63:7f:49:af:79:6e:33:17:
58:51:38:17:50:b3:b2:20:ec:43:d9:84:2e:dc:3e:5a:c1:b6:
82:97:41:b7:f2:c7:13:69:14:43:87:59:f1:ad:c4:ec:2c:d4:
82:1e:65:3a:61:09:46:0a:5c:bf:3c:0b:ce:83:65:a4:f0:17:
8d:79:f9:2f:fe:59:ae:66:ef:ce:fa:a4:ea:d8:55:05:e7:00:
fc:8c:c3:8e:25:c8:05:55:f9:c5:5f:08:86:8c:64:d3:25:62:
d6:dd:7c:88:1a:c8:7d:6f:90:90:a9:1f:a2:ec:d4:70:2a:1d:
23:61:37:c8:56:fc:de:c9:5d:bc:71:55:85:0f:9f:18:52:bd:
71:c7:0e:bb:40:27:25:9f:bd:f0:b9:ca:68:94:cf:b3:18:22:
71:5d:bc:f3:0a:3b:3a:f8:57:a0:5b:14:34:49:33:89:d7:6a:
ba:40:1c:af:ef:0d:fc:0d:e6:28:89:d2:c3:34:50:b7:0f:ab:
80:38:50:56:f4:11:61:92:84:07:da:d0:c1:c3:65:ac:18:6c:
89:c5:0f:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkHB5M9HAA8e8J7WxgUubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2I4ZjgxYjhkMzg4MmQ3ZGIxNzNhNTQ5MDA5NjYxMTU3
NDhjYmYwHhcNMjYwMjA5MTgwMTA1WhcNMjYwMjEwMTgwMTA1WjAzMTEwLwYDVQQD
Eyg5YmQ4MmE4YzA5NTlkNWU2NzcwNWMwZTNlOTFiYWZkODQ3NTQ0N2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+jBmt/1OzbeizepE/NMeH5l5bk1
NkKw17giZyx/4GAkEadi6VROS0++Hcm5sOE55nBGIgwted+sZLdzZzJKsmaAsvER
b088w25OBH+Kd0ew8MpYyzCLjom26lV60IJ6hkrTSTUjQqJAGZB43EN4FIQv5OTG
8VBRRz1dnPtVMB4oLBTqhN+bmCBvqz9hB6B7wi3Fxp8tMaa79VBwMaA48iZ3axEd
EhQvlCkWmPOrRifjs+h6fDP2xqcHWwh8xU46JsJS7zvHUzIdD5lx1u1GusUb0G0V
dBXWRHI71mNzi6WdYaZAUqHQVRatxl0O9LXL5rfqfizs7mp6bhu3R8uqZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvYKowJWdXmdwXA4+kbr9hHVEexMB8GA1UdIwQY
MBaAFNfLj4G404gtfbFzpUkAlmEVdIy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGIt
MmU4NzFjNTk3Zjk3LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wNDBkYWUtMzQzMC00MzVkLWFiZGItMmU4NzFjNTk3Zjk3
LzEvMTh1UGdialRpQzE5c1hPbFNRQ1dZUlYwakw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgmMJ4m2
ss9xsSL7JhrAzhiexAWXt7WtUmdjvN9ddJS5FkplJGFNSkTjeWIi82N/Sa95bjMX
WFE4F1CzsiDsQ9mELtw+WsG2gpdBt/LHE2kUQ4dZ8a3E7CzUgh5lOmEJRgpcvzwL
zoNlpPAXjXn5L/5Zrmbvzvqk6thVBecA/IzDjiXIBVX5xV8Ihoxk0yVi1t18iBrI
fW+QkKkfouzUcCodI2E3yFb83sldvHFVhQ+fGFK9cccOu0AnJZ+98LnKaJTPsxgi
cV288wo7OvhXoFsUNEkziddqukAcr+8N/A3mKInSwzRQtw+rgDhQVvQRYZKEB9rQ
wcNlrBhsicUP2Q==
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:56 2026 by rpki-client