This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier: c0SdCZGUQX0bLVC15mTYfjpEWuRJingwY5JAtDlvAYA=
Subject key identifier: DB:FC:4A:91:47:5B:75:33:4E:8A:2F:B8:77:AD:90:DC:71:59:CE:52
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 019C4434A10C6B13A6D0B3732C000FFD2207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 21:00:25 +0000
Manifest this update: Mon 09 Feb 2026 21:00:25 +0000
Manifest next update: Tue 10 Feb 2026 21:00:25 +0000
Files and hashes: 1: 3dXQNTeYEXwgMvCj--w5pPENAJU.roa (hash: 3G9QvRM4k9jqWeSWNLfEsowBkk0Z8XBxLLqfEHkaBDM=)
2: b9cInp7Or1qBr9PuhesAeLquPqQ.roa (hash: 4GENDH+hUgF++1KALJEHVMXlXhH/iPfvsuAOj33raco=)
3: hS7RgT3aGNpjDg2o5zlqkEAGb90.roa (hash: ruxCN88xcOgn5K5hz1rXwR19nQEArZ1nYrpc6XCrIWE=)
4: pUeHHF4pC4-zIRXO_grSASp1OfM.roa (hash: kn9V/PD8fwcG7V/Q9LK/O7MAEpNrkEsY4bQFNUkSntc=)
5: tm-0BywjpYQ_JdG102XSdl2PwkI.roa (hash: DKW7dfG1+ENLwCJlJJ+O62vn9P7SrAjIIPIC1AGnTVc=)
6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: yNl5pcAViEE3JjFlyEVkwKQGCcACeL9PVzKgJHVBYrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:34:a1:0c:6b:13:a6:d0:b3:73:2c:00:0f:fd:22:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Feb 9 21:00:25 2026 GMT
Not After : Feb 10 21:00:25 2026 GMT
Subject: CN=dbfc4a91475b75334e8a2fb877ad90dc7159ce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:14:c2:c4:4d:ce:a2:5e:a2:e6:89:70:b3:4b:
19:69:9a:88:32:ce:48:ae:2c:17:64:8b:06:1a:ac:
8a:22:f2:93:0f:9c:ce:fa:2b:8e:a4:46:12:92:ab:
50:4c:49:50:ad:3d:13:37:f8:1c:4e:cc:a0:91:e9:
f2:1f:34:11:ee:c7:80:28:05:3d:cd:2e:a0:24:48:
fe:49:38:7e:79:c9:2d:59:a0:3b:a1:5a:4c:61:29:
7d:d0:d3:f6:1f:5d:a1:3a:04:36:c8:04:05:61:d5:
1a:70:85:0c:3e:32:aa:eb:53:91:68:75:81:8f:80:
2f:64:7c:ec:91:8c:9b:3c:66:dc:e8:af:57:69:72:
a2:a0:43:cb:5c:05:c8:96:78:11:96:2c:c4:f8:37:
8a:bd:02:0f:b2:b6:d4:b6:f4:91:b4:ea:10:ba:78:
4e:f3:e2:13:97:2c:90:77:01:46:4e:54:3a:51:f4:
f1:9f:67:34:29:cc:fc:1e:00:b5:f3:b2:9b:23:89:
91:d1:0d:c0:2a:bf:23:9e:cb:48:a4:bc:be:8f:e8:
9f:bc:d9:1c:be:e1:fe:64:01:c3:0a:77:31:be:8d:
15:cd:15:92:95:86:b3:a3:5a:25:8b:a6:34:f0:8f:
e4:8f:fc:76:9f:d6:5f:b6:42:ba:e0:82:f7:5a:37:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FC:4A:91:47:5B:75:33:4E:8A:2F:B8:77:AD:90:DC:71:59:CE:52
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c9:cb:c5:48:46:46:5c:b4:65:08:f6:6e:1b:6b:91:c9:4e:
a7:cb:0d:35:75:52:d4:84:ae:6b:ec:f4:1d:35:8b:1a:7a:16:
a8:ed:ab:a1:f9:b6:ba:b5:70:78:61:eb:74:b4:77:05:e0:c0:
9f:ef:88:8d:77:4c:97:42:2e:5d:4a:15:cb:11:26:7a:35:27:
5f:85:e6:55:3a:34:f2:72:f1:db:8d:95:e3:32:05:b4:ad:14:
75:cd:0a:50:94:76:e5:aa:47:f9:ac:cb:70:42:50:71:a4:22:
aa:27:c9:b3:24:33:4e:f3:37:2e:dc:9b:69:4e:c4:5b:ec:7f:
bb:f7:92:74:b9:c7:fc:11:39:54:aa:b4:06:86:65:21:0e:3e:
91:e8:92:0b:ca:fc:d9:0a:db:e5:5a:53:13:9e:67:f5:d1:6c:
eb:c6:ef:bb:6b:51:0f:92:16:99:8d:dc:02:51:7c:73:60:55:
93:72:cb:2f:c7:47:51:3d:79:c7:7a:d0:83:bd:aa:e6:b3:3f:
c4:97:5a:9a:1c:96:f3:09:2c:48:80:a4:0a:97:02:7b:94:0d:
5a:c6:81:6c:22:4f:b6:b8:6c:76:c8:6a:60:d4:6a:5c:c9:a2:
2d:c2:ee:79:1b:39:61:86:3a:df:46:45:f3:79:e4:94:b8:ae:
0e:d1:06:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:19:42 2026 by rpki-client