This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: U6nh1Q6+xoo4lp7Q64DrEDN81suah/TN7Bs/5CvRd+8=
Subject key identifier: 62:64:2F:5C:8A:83:C3:10:DA:1B:EB:4D:33:25:3D:B5:63:17:83:05
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 019C439010CF70329027923FE40998432C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 18:00:40 +0000
Manifest this update: Mon 09 Feb 2026 18:00:40 +0000
Manifest next update: Tue 10 Feb 2026 18:00:40 +0000
Files and hashes: 1: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: ftXvfYSCPjatmuUgX70QvG1k78hGWiiW5WVm+bKzZH8=)
2: q1MdFgrztAHRD55dweODJfa4RK4.roa (hash: aZ5l1yMm02BT+qNFooS+z/TzrtnqLkZdfbJDBupopYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:10:cf:70:32:90:27:92:3f:e4:09:98:43:2c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Feb 9 18:00:40 2026 GMT
Not After : Feb 10 18:00:40 2026 GMT
Subject: CN=62642f5c8a83c310da1beb4d33253db563178305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:79:4c:e2:2a:8f:a9:57:e5:4c:84:b7:59:
d2:b5:5b:7a:0d:cd:82:33:f2:e0:5a:aa:fe:9e:3b:
c3:d7:ff:60:12:fe:f7:64:91:7e:9b:75:51:c4:4a:
1c:49:28:12:4f:a0:c3:2d:3b:8d:8b:35:69:5d:73:
fd:d5:8c:9c:50:71:5b:5d:2a:5f:b5:75:3d:11:f7:
f5:77:2e:79:ba:b9:ad:3b:12:b2:bf:b5:d7:59:61:
fc:62:06:a1:00:bc:1c:70:38:88:71:3b:19:e2:d1:
35:69:8b:76:f1:cb:2c:35:77:74:d8:b2:1b:7d:eb:
90:03:17:5b:c0:14:01:f3:47:24:8c:83:9b:05:d2:
c8:37:49:1e:05:43:7c:91:24:70:d6:ac:43:f0:8d:
4d:e8:28:d9:59:fe:3d:e1:e8:be:05:ed:d9:6e:6a:
6a:a1:74:34:36:76:6b:19:aa:26:a8:05:8b:9d:61:
4c:03:ca:29:55:55:50:89:2c:31:ba:e9:8b:b4:2b:
2f:15:07:00:4d:3b:85:48:fb:2d:ac:8c:32:7c:df:
6a:48:e6:d3:43:5c:d9:3b:0b:f4:48:e2:be:6f:4f:
5c:75:b4:05:3e:c6:dc:73:86:3b:3d:a6:b1:37:77:
f4:c9:68:2f:5f:80:e7:71:df:5b:29:bf:05:bb:eb:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:2F:5C:8A:83:C3:10:DA:1B:EB:4D:33:25:3D:B5:63:17:83:05
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a1:4d:ab:cf:f7:2c:23:59:3d:1c:35:6f:15:c7:02:29:25:
a5:0d:8b:4a:8d:83:a2:fb:8d:9a:ea:4c:65:cf:2f:8b:ea:52:
35:a3:f9:4d:d6:08:3d:96:0e:4f:b2:f9:c2:5f:74:eb:c4:4b:
bb:c0:31:6a:62:72:e7:f7:fe:e5:1d:a2:06:e7:13:1b:dc:f9:
a1:50:49:b1:42:eb:a7:c5:0d:f8:55:06:71:8a:98:0b:2f:37:
b3:3a:81:74:c1:40:06:da:5e:37:e3:a0:81:3b:60:0f:ea:2a:
6c:16:cc:28:7b:26:cf:6d:8b:b5:ac:9c:d8:03:d5:69:85:be:
e2:28:bd:72:16:c0:15:f7:94:4f:40:f4:96:87:55:14:97:6b:
db:5e:0a:8f:f2:9f:37:0d:8f:38:35:6f:cc:0e:6e:f6:1b:31:
a4:c5:73:71:15:c1:e8:b4:dd:3e:69:53:e6:73:26:4f:10:1b:
e5:f3:fe:b6:6d:3f:52:a9:a9:96:1e:8b:b8:50:39:67:22:27:
b5:ec:8f:70:51:be:fc:da:21:94:e8:85:52:6b:e5:be:09:88:
21:6d:17:da:a0:20:d3:99:ad:17:61:4c:f1:74:68:dc:22:10:
89:ae:48:94:3c:01:15:53:16:34:e2:5e:f6:06:04:19:d6:fe:
7e:3a:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:38 2026 by rpki-client