This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: RQTX9eTh/zIlyg+gnmDOjUJIQEUi+s2Hv0iK9btf+IM=
Subject key identifier: 27:E6:43:13:1A:36:36:2F:47:8C:52:A1:FF:EA:6C:9A:89:23:4D:8C
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 019C424638AA35E065330AD7E358E430D9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 12:00:24 +0000
Manifest this update: Mon 09 Feb 2026 12:00:24 +0000
Manifest next update: Tue 10 Feb 2026 12:00:24 +0000
Files and hashes: 1: 5Gr2q7ZQUry_6juJo6TbPmIZ_GI.roa (hash: CLid1uYJD/tWmQGqtEiBJvjm9/bPdenK+e3VYv871Vk=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: IYh0K5GMbPh+nniaY9myOTEqbW3HY80iL5hJxJtcTNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:38:aa:35:e0:65:33:0a:d7:e3:58:e4:30:d9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Feb 9 12:00:24 2026 GMT
Not After : Feb 10 12:00:24 2026 GMT
Subject: CN=27e643131a36362f478c52a1ffea6c9a89234d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:21:a6:5d:ba:8f:6d:27:5c:25:11:02:7f:7d:
fa:cf:73:46:79:a4:ad:f8:3d:4c:6d:92:ba:c8:da:
3c:2e:fc:f5:2a:43:e9:31:ec:c3:59:22:a8:c1:65:
b8:89:c0:bb:c7:c8:51:27:1f:03:14:1e:55:c8:a3:
fd:32:0b:51:8d:d2:0e:de:50:b8:ef:8d:46:14:55:
a3:c6:96:98:f7:ff:2c:c5:c5:a5:63:b4:1b:0f:e7:
b8:eb:9e:57:88:a4:6e:b4:54:04:92:52:39:c5:c9:
70:2e:25:43:84:20:c1:b4:cb:b4:d3:ef:a4:9b:55:
d8:78:72:24:a3:e9:fd:61:33:4b:f1:fc:29:94:08:
79:ba:46:c0:80:d9:3c:00:62:7a:8d:a2:44:1c:1c:
ff:79:f8:ce:2a:6e:43:1b:56:e9:9c:ba:4b:99:e2:
57:d4:c4:a3:af:7c:0e:91:5f:a1:76:15:9c:e9:cb:
9f:45:15:26:09:f7:ec:92:61:ca:fd:b5:04:c7:b0:
cc:88:31:46:45:55:c5:37:96:90:23:9d:12:47:16:
56:99:ea:5c:54:cd:36:c4:38:f3:74:5f:df:d0:09:
30:b7:a7:de:2a:02:69:5a:70:6b:ad:c0:d4:4f:7d:
40:95:da:cd:1a:82:b6:8e:98:5e:c9:ed:5a:c8:06:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:43:13:1A:36:36:2F:47:8C:52:A1:FF:EA:6C:9A:89:23:4D:8C
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:30:55:16:4d:97:39:ce:71:36:c0:7a:9c:6a:53:8d:b4:71:
a7:df:d2:66:1e:84:dc:95:48:1f:f2:12:d4:03:e2:aa:22:b4:
f1:f4:41:62:00:3a:8d:7d:75:5e:41:9d:f1:9f:d7:29:09:38:
64:b8:73:66:86:11:da:58:75:f8:5a:3e:da:ea:a3:1b:b1:b6:
d6:da:5e:d2:56:35:2b:54:05:25:d0:10:c4:87:05:8b:bd:78:
4e:c2:19:3e:18:ed:cf:d8:8b:c7:0c:55:9d:3d:45:ab:6d:ad:
b9:04:b4:e8:42:38:b4:c9:78:6b:6e:75:43:ba:ce:07:bb:e0:
26:a6:f2:4e:95:29:7a:fc:14:e5:75:22:47:22:38:d7:2e:8b:
85:de:b6:0e:8c:7a:a7:9e:ec:87:a1:16:6c:c3:15:1a:95:07:
83:03:4c:b1:1d:78:56:82:4e:c9:59:76:32:a4:b2:5e:84:9a:
61:a2:7f:6c:d3:ec:4e:75:4d:9d:52:c2:63:e0:b5:88:7e:9d:
a2:7a:39:e4:36:90:39:4f:1d:56:b7:a8:3c:23:eb:38:0f:25:
2e:e5:ef:98:1f:c6:01:72:4f:d3:5e:15:2c:1f:b7:92:e2:51:
06:88:0d:b0:22:ef:1d:d3:d7:33:f9:33:d7:09:50:5d:3c:f8:
2b:5e:60:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRjiqNeBlMwrX41jkMNmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmY2NTI0MDg1ZmExMGU4YzA5OGFjMmI1ODI4YTFmODhj
NjkxM2MwHhcNMjYwMjA5MTIwMDI0WhcNMjYwMjEwMTIwMDI0WjAzMTEwLwYDVQQD
EygyN2U2NDMxMzFhMzYzNjJmNDc4YzUyYTFmZmVhNmM5YTg5MjM0ZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SGmXbqPbSdcJRECf336z3NGeaSt
+D1MbZK6yNo8Lvz1KkPpMezDWSKowWW4icC7x8hRJx8DFB5VyKP9MgtRjdIO3lC4
741GFFWjxpaY9/8sxcWlY7QbD+e4655XiKRutFQEklI5xclwLiVDhCDBtMu00++k
m1XYeHIko+n9YTNL8fwplAh5ukbAgNk8AGJ6jaJEHBz/efjOKm5DG1bpnLpLmeJX
1MSjr3wOkV+hdhWc6cufRRUmCffskmHK/bUEx7DMiDFGRVXFN5aQI50SRxZWmepc
VM02xDjzdF/f0Akwt6feKgJpWnBrrcDUT31AldrNGoK2jpheye1ayAawBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfmQxMaNjYvR4xSof/qbJqJI02MMB8GA1UdIwQY
MBaAFKUvZSQIX6EOjAmKwrWCih+IxpE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMt
YmZmZjUxNDIwNTNmLzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMtYmZmZjUxNDIwNTNm
LzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijBVFk2X
Oc5xNsB6nGpTjbRxp9/SZh6E3JVIH/IS1APiqiK08fRBYgA6jX11XkGd8Z/XKQk4
ZLhzZoYR2lh1+Fo+2uqjG7G21tpe0lY1K1QFJdAQxIcFi714TsIZPhjtz9iLxwxV
nT1Fq22tuQS06EI4tMl4a251Q7rOB7vgJqbyTpUpevwU5XUiRyI41y6Lhd62Dox6
p57sh6EWbMMVGpUHgwNMsR14VoJOyVl2MqSyXoSaYaJ/bNPsTnVNnVLCY+C1iH6d
ono55DaQOU8dVreoPCPrOA8lLuXvmB/GAXJP014VLB+3kuJRBogNsCLvHdPXM/kz
1wlQXTz4K15gnA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:54 2026 by rpki-client