This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
File: 9g8GwTqb9lKcSmvQ3uBVggVgz78.mft (raw, json)
Hash identifier: aWEWUe+3hyvRKd/40tBljx7fUw4cQdOh9wH0RBB6Y5E=
Subject key identifier: 13:C4:40:C5:43:C0:60:DE:1A:F2:FA:39:E8:93:D9:80:DA:26:0A:22
Authority key identifier: F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
Certificate issuer: /CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Certificate serial: 019C41342D7EEF6702D0C7827E5D293D33E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
Manifest number: 02E8
Signing time: Mon 09 Feb 2026 07:01:04 +0000
Manifest this update: Mon 09 Feb 2026 07:01:04 +0000
Manifest next update: Tue 10 Feb 2026 07:01:04 +0000
Files and hashes: 1: 9g8GwTqb9lKcSmvQ3uBVggVgz78.crl (hash: 2EAB/raGgGNPXZvVVyOOylg3pw1WYml0odwDY//c43A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:2d:7e:ef:67:02:d0:c7:82:7e:5d:29:3d:33:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf
Validity
Not Before: Feb 9 07:01:04 2026 GMT
Not After : Feb 10 07:01:04 2026 GMT
Subject: CN=13c440c543c060de1af2fa39e893d980da260a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:54:5a:a3:a2:4c:5d:28:bc:71:9b:a3:1b:
93:60:a9:41:99:ae:23:1d:cc:6e:d4:3b:2f:f7:ed:
ab:06:03:f2:95:40:99:58:ff:51:ab:53:4d:52:8b:
9c:cd:14:7e:ba:b4:f4:ec:a3:25:1c:11:1c:9b:29:
f8:ca:7f:ac:37:89:33:3f:3c:24:16:9e:b3:a7:ff:
33:47:26:bf:8a:8f:51:a3:04:9e:61:fb:9d:86:ad:
67:f5:66:7f:de:bc:73:fa:e3:64:d6:23:f7:8a:bc:
9f:e3:8a:86:5f:5f:4d:77:3d:54:ab:9b:73:94:9a:
05:39:e1:97:2d:88:1d:bb:b4:50:8a:a7:80:7a:44:
65:95:94:83:50:d7:6f:90:c7:5a:56:b3:a7:84:58:
61:10:1b:b1:82:d9:28:c9:8b:c0:c9:6b:e8:9a:73:
08:41:a7:c9:c6:fe:e6:27:51:4e:32:fa:2e:51:4c:
35:fa:dc:31:1f:52:fe:12:a6:4c:8f:5e:44:05:a5:
9c:74:c9:00:d2:d9:63:b7:a5:7f:5b:2e:ef:46:e2:
bf:dc:bb:8c:ba:d1:ba:29:24:9c:08:63:8b:36:87:
80:63:15:0b:54:31:0f:d8:b4:bd:2a:75:9e:39:25:
4f:47:80:2e:7c:42:53:a6:65:e1:04:18:a1:93:f5:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C4:40:C5:43:C0:60:DE:1A:F2:FA:39:E8:93:D9:80:DA:26:0A:22
X509v3 Authority Key Identifier:
keyid:F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4f:a6:69:30:54:94:e5:3d:47:0a:6a:94:89:b0:1c:38:48:
46:28:19:3d:1f:df:60:0d:9b:1f:07:97:a7:8f:e6:dc:6d:3c:
85:8e:43:1d:15:97:c9:e2:20:1c:40:b1:e7:71:f6:b4:31:1c:
d8:2a:5f:4a:57:5f:a3:a1:5c:b4:44:bd:3e:de:0a:1a:b6:20:
de:6a:e2:d0:aa:56:7e:7d:3f:b0:9f:fd:ba:4f:d2:34:cc:4d:
0a:5b:dd:3e:13:f8:22:14:be:41:b6:00:04:c2:bf:d7:91:4b:
9f:76:81:39:8f:dc:51:7e:bb:8b:5f:67:32:e2:05:d4:9c:d6:
11:d4:11:2a:ce:d8:95:8f:93:82:4d:02:52:59:04:c3:c3:42:
57:75:31:54:2d:7a:2b:a6:8f:55:c1:6f:77:8d:2e:c3:e8:9d:
fe:dc:22:6d:62:cb:53:e8:a6:e9:50:e1:7a:09:47:f0:93:10:
86:9a:2f:cb:fa:99:ce:a0:d6:a9:5f:66:69:a8:d1:64:fc:df:
76:c4:36:de:36:9c:df:20:e5:c1:5d:24:b3:db:20:31:0f:4a:
72:2a:66:b9:a5:ca:de:31:19:8d:1d:f1:41:9c:77:ab:ab:49:
fb:ae:83:70:6a:e2:1e:3f:08:c3:33:7c:dc:3f:7a:d3:c0:ec:
b6:03:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:17 2026 by rpki-client