This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
File: I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json)
Hash identifier: D6LhsfQC1sKpzNrWxJF9JaknK5ROAN+b551jAE9MEps=
Subject key identifier: 23:2E:4B:E3:70:FB:72:73:7B:3C:BD:00:5C:32:5A:B5:3B:91:8A:9E
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 019C42EB0FCF9E789F22AB78D46296819DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
Manifest number: 169A
Signing time: Mon 09 Feb 2026 15:00:27 +0000
Manifest this update: Mon 09 Feb 2026 15:00:27 +0000
Manifest next update: Tue 10 Feb 2026 15:00:27 +0000
Files and hashes: 1: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: CuKGd3HiN/N11k7Upz1nFab2KkZ87hKXql69lpujrco=)
2: Oe-SeoCCIXN5ycDnQlV6M_dI1XI.roa (hash: D3QDtFMR0sLy/F2jguYpH4IAE7IC8B7SWcgluJtwmKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:0f:cf:9e:78:9f:22:ab:78:d4:62:96:81:9d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Feb 9 15:00:27 2026 GMT
Not After : Feb 10 15:00:27 2026 GMT
Subject: CN=232e4be370fb72737b3cbd005c325ab53b918a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:f2:8a:d2:6b:0f:32:f6:c4:44:ed:08:39:
fd:55:01:73:a5:dd:e8:78:e5:fe:30:ed:83:1e:78:
3e:06:60:1e:e3:51:62:80:64:4b:53:1b:5f:6d:7a:
d1:23:c3:0f:a9:a2:fc:d4:7a:9d:16:21:99:11:10:
e8:b0:f6:88:a9:64:3c:7e:4f:7a:12:e0:e8:f2:6e:
9a:c5:2d:3d:90:80:ed:2e:3e:1e:b2:52:32:09:c0:
26:a7:22:be:62:6e:26:85:e6:75:9a:2f:6a:f1:9b:
5b:9c:52:03:ab:c4:c5:15:4f:e6:8b:0d:35:b3:e7:
14:e1:29:ae:aa:f3:0f:9e:3c:0c:29:32:35:4a:d9:
6c:3b:8f:ee:be:56:19:d2:85:92:f8:39:99:33:81:
94:07:6b:e9:42:92:82:1c:dd:63:b3:9c:31:60:f2:
77:80:7f:0d:f0:b6:0c:89:d2:05:22:c2:79:17:5c:
65:05:57:37:f8:ba:21:2d:1f:2c:bb:87:99:40:53:
84:81:e3:38:e5:a1:d5:db:31:d2:b7:82:50:51:35:
7e:12:f8:6c:5f:15:d0:0d:8d:bf:5c:61:91:99:0d:
81:ec:f0:0f:53:99:a0:a6:ca:78:a3:3b:48:90:46:
6e:64:aa:d9:5e:c2:2a:9e:49:62:e5:d0:0b:b2:c0:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2E:4B:E3:70:FB:72:73:7B:3C:BD:00:5C:32:5A:B5:3B:91:8A:9E
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b6:d1:b4:91:94:e5:4d:62:b7:36:d2:29:64:b4:dc:ee:fc:
34:e3:86:ba:e3:59:56:6d:ec:a4:48:c4:69:55:07:11:d6:3d:
2a:d5:64:36:12:71:29:b7:92:99:0c:34:e7:d6:ea:b2:48:f2:
81:e2:d0:f5:9c:15:15:ed:e2:38:77:32:b4:9e:58:3d:d8:fa:
86:5d:38:41:e1:16:8b:50:f6:28:21:15:4e:42:0d:a9:cc:fc:
c0:78:41:e7:20:49:49:b7:c0:00:40:d9:f2:50:44:40:02:11:
57:ac:98:1e:3d:3e:9f:11:96:a9:96:28:36:9d:33:4f:40:93:
23:68:36:a4:f6:e2:53:da:c0:2c:87:0f:fe:ec:d7:40:12:0e:
9a:3c:d7:81:f3:e0:16:5c:2b:3d:39:b8:91:93:8a:98:8f:78:
c6:b2:41:7e:25:8a:f8:56:9f:22:62:84:95:77:6f:17:29:33:
c1:30:f0:05:18:69:af:ff:61:cf:a2:7e:8e:dd:e3:62:0d:a1:
dc:74:be:d2:45:d1:3e:cd:c3:ed:1e:bb:1a:57:99:83:cb:4f:
1c:3c:85:fa:48:a0:80:de:38:8d:3a:29:e2:bf:94:88:ae:5c:
2c:7e:91:e1:63:91:61:08:8f:3b:58:22:53:90:8a:e2:99:2e:
18:51:a4:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6w/PnnifIqt41GKWgZ25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDQ4MGIwNzk1NjE3ZTJlMjZlNmUxODI2NDM3N2U3YTk2
Yzc4ZjMwHhcNMjYwMjA5MTUwMDI3WhcNMjYwMjEwMTUwMDI3WjAzMTEwLwYDVQQD
EygyMzJlNGJlMzcwZmI3MjczN2IzY2JkMDA1YzMyNWFiNTNiOTE4YTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8XyitJrDzL2xETtCDn9VQFzpd3o
eOX+MO2DHng+BmAe41FigGRLUxtfbXrRI8MPqaL81HqdFiGZERDosPaIqWQ8fk96
EuDo8m6axS09kIDtLj4eslIyCcAmpyK+Ym4mheZ1mi9q8ZtbnFIDq8TFFU/miw01
s+cU4SmuqvMPnjwMKTI1StlsO4/uvlYZ0oWS+DmZM4GUB2vpQpKCHN1js5wxYPJ3
gH8N8LYMidIFIsJ5F1xlBVc3+LohLR8su4eZQFOEgeM45aHV2zHSt4JQUTV+Evhs
XxXQDY2/XGGRmQ2B7PAPU5mgpsp4oztIkEZuZKrZXsIqnkli5dALssCybwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMuS+Nw+3Jzezy9AFwyWrU7kYqeMB8GA1UdIwQY
MBaAFCPUgLB5Vhfi4m5uGCZDd+epbHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82NjRjYWItYmE5YS00YzQwLTk3ZjQt
YWY5OGU0OWYxMWFlLzEvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82NjRjYWItYmE5YS00YzQwLTk3ZjQtYWY5OGU0OWYxMWFl
LzEvSTlTQXNIbFdGLUxpYm00WUprTjM1NmxzZVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbbRtJGU
5U1itzbSKWS03O78NOOGuuNZVm3spEjEaVUHEdY9KtVkNhJxKbeSmQw059bqskjy
geLQ9ZwVFe3iOHcytJ5YPdj6hl04QeEWi1D2KCEVTkINqcz8wHhB5yBJSbfAAEDZ
8lBEQAIRV6yYHj0+nxGWqZYoNp0zT0CTI2g2pPbiU9rALIcP/uzXQBIOmjzXgfPg
FlwrPTm4kZOKmI94xrJBfiWK+FafImKElXdvFykzwTDwBRhpr/9hz6J+jt3jYg2h
3HS+0kXRPs3D7R67GleZg8tPHDyF+kiggN44jTop4r+UiK5cLH6R4WORYQiPO1gi
U5CK4pkuGFGkCA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:10 2026 by rpki-client