This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
File: 9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json)
Hash identifier: /+QmLnmsdsi4eeVwqKYDq/5Nh36kLuj0Gcw+3W/yzgE=
Subject key identifier: A8:49:85:D4:00:58:92:FA:91:0A:8D:85:4E:35:9B:4C:69:37:86:53
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 019C42B49A76BA01F909E6EBF4B426278A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
Manifest number: 1852
Signing time: Mon 09 Feb 2026 14:00:58 +0000
Manifest this update: Mon 09 Feb 2026 14:00:58 +0000
Manifest next update: Tue 10 Feb 2026 14:00:58 +0000
Files and hashes: 1: 02rcOu2oVgYvFKogVTUuhoAU_Z8.roa (hash: t1BzKV6mreRxe6P7rrGXRTjA+HpmupGRMNWHhpbny/Y=)
2: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: 03WPoXpD4KRdZAiO1vSaog7nvUk3s3oT/ToG3GDDKkk=)
3: Ja_i6Nl_QEf84Cv0hTASmUfByDk.roa (hash: PR6zLbEuwP/MFZVDvzI0MjSOqX30Bqi1dOI8MRuCOng=)
4: Sgl0Z64OhrO11r88F-vekHDTFUg.roa (hash: wpZ6eRiAcwvnj+jMwp2huDtJevtVDAQPpwMPlgkG8Ek=)
5: VN6p_bTihNH_MdXcvCva6umc71w.roa (hash: hHXGikrxhpHM6seBQ0Nc82OHE5FrPo4aFTc47ssGOfQ=)
6: q0a8yaRXZHqDgW6t40wuVuwZGqY.roa (hash: yQdCTPHRdYGgRQtv3qZWl01v8W1TNo2W0QOatwpBfUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:9a:76:ba:01:f9:09:e6:eb:f4:b4:26:27:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Feb 9 14:00:58 2026 GMT
Not After : Feb 10 14:00:58 2026 GMT
Subject: CN=a84985d4005892fa910a8d854e359b4c69378653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:1d:16:0e:7d:05:d9:a1:b1:0e:0a:07:97:
28:fe:f0:dd:94:fa:4c:e2:a9:bd:7c:dc:fc:81:bb:
8a:e6:c3:18:4b:34:e3:7b:ff:2c:26:85:da:81:c5:
81:00:68:e2:80:d0:98:f5:7d:f2:53:37:5b:74:14:
08:13:38:f0:26:53:11:18:e3:12:0e:23:d3:78:d1:
23:bd:00:1e:ba:c9:74:83:f3:b5:a2:f3:25:98:cd:
7b:0a:25:6e:3a:41:c4:d2:a4:6a:37:a5:a7:ef:51:
8e:dc:c6:4b:fd:a0:c0:77:8b:23:34:75:57:45:f4:
16:db:f3:77:9a:6b:f4:2b:84:0b:6c:ce:27:f6:bd:
45:b5:99:f8:35:9d:10:a6:ac:6c:18:99:3f:1b:ac:
36:a1:d9:c7:0b:5c:90:69:15:e6:f7:e8:8e:30:0d:
69:f3:fa:2a:cb:ad:63:ba:49:92:23:1b:61:f1:f8:
f5:d3:70:df:67:6c:ed:88:8b:e6:f9:24:87:66:4e:
50:e1:1c:cc:05:32:b3:a7:b1:4e:5e:17:3d:79:f0:
6f:74:b5:4f:c3:a9:c3:4e:6c:7b:c0:89:54:87:cb:
1b:4c:30:f4:b4:c0:18:3e:11:87:05:cd:08:8b:35:
14:ea:fc:f8:b8:03:d7:0b:bc:cb:ca:08:5a:93:f0:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:49:85:D4:00:58:92:FA:91:0A:8D:85:4E:35:9B:4C:69:37:86:53
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7b:f5:f1:b0:50:fd:b6:53:57:0c:6f:95:3d:49:5b:ce:78:
ec:b9:f3:75:a0:f5:7c:a0:25:92:d5:c8:54:6e:8a:9c:73:7f:
33:5c:0f:bf:a9:23:31:7c:b5:a8:5c:36:c3:af:63:a1:ef:7d:
17:d3:07:dd:c3:05:67:ed:ef:38:ab:26:9b:06:bb:9a:db:1d:
b9:72:05:3a:08:42:cb:12:11:b1:63:f0:3b:cf:63:aa:75:5f:
5a:e7:7b:07:fd:9a:54:78:b7:ae:51:ed:e1:6c:af:8d:d3:09:
76:88:6a:7e:6a:83:9c:98:be:94:96:27:dd:85:85:eb:fc:6c:
3f:60:e8:c7:5d:82:c9:93:7b:48:f7:cc:a8:01:df:3d:a8:53:
8c:a6:db:d0:94:ec:c3:fb:0b:c8:75:2f:a1:ec:b1:91:30:f6:
15:6b:c2:0f:a9:8b:95:bd:26:62:93:7c:a9:b8:4c:01:5d:dc:
44:6a:1c:ac:0e:33:c6:c2:32:ac:33:5f:73:2e:55:8f:36:9d:
8d:62:f0:00:aa:52:74:8e:e9:ee:33:f6:7c:b8:e1:99:25:20:
df:ac:68:9c:30:68:8d:1d:ac:d6:47:c7:f6:32:07:ab:0c:c8:
85:ce:a6:85:28:c4:99:55:dd:48:38:c3:14:5b:04:9f:d0:cb:
c8:ef:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:52 2026 by rpki-client