This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File: g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier: bMk6qud5dAVbF45ZUenw2mJTZxUZ9M5/STJCgEbEufQ=
Subject key identifier: B0:59:63:C3:8C:37:E1:0C:82:70:AF:FD:4E:29:3D:2D:FB:B7:7F:FB
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 019C42466FDFAB15A13E0309AF6F91913425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number: 0CFD
Signing time: Mon 09 Feb 2026 12:00:38 +0000
Manifest this update: Mon 09 Feb 2026 12:00:38 +0000
Manifest next update: Tue 10 Feb 2026 12:00:38 +0000
Files and hashes: 1: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: +/Ih1zVI9FVQRKfiY6VMLF24SVpzfxa+VYo41XV/g10=)
2: m2ZF-74RUnpYCSRQzi58JGlu94U.roa (hash: rCyhTyXzRp0exhx6DF5SAa1YSYaN0bDG8IRLr2ntpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:6f:df:ab:15:a1:3e:03:09:af:6f:91:91:34:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Feb 9 12:00:38 2026 GMT
Not After : Feb 10 12:00:38 2026 GMT
Subject: CN=b05963c38c37e10c8270affd4e293d2dfbb77ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:25:59:5e:b3:88:05:d7:9a:f8:ed:9d:70:b1:
21:73:13:b5:a4:fa:2d:c3:a1:0e:4f:e3:37:bd:b4:
d7:19:f6:aa:20:63:5f:b3:31:85:01:95:bc:69:50:
a5:e8:56:40:b2:75:da:d9:72:7d:03:81:84:13:aa:
f7:fd:fc:25:89:61:0c:e4:83:05:bf:a1:fa:2d:75:
a5:f8:35:5a:b0:ec:9f:fa:b8:96:63:a6:5d:31:7e:
e9:f8:55:07:40:f0:0c:eb:d1:e6:79:aa:e0:a5:9f:
4f:4f:de:78:5a:e4:a4:e3:76:ee:b7:22:f3:da:74:
6b:d4:44:7f:b1:d1:9a:31:e6:94:ad:a5:71:4a:54:
2d:ea:b0:63:6a:5f:78:cc:eb:be:3e:31:2c:70:74:
d0:48:48:34:7b:16:75:04:36:8c:59:ec:cf:e9:3a:
95:4f:b6:ee:56:06:c1:ce:7d:8a:68:6d:08:ee:fb:
a3:b0:e1:aa:48:e2:96:52:d5:2f:03:15:a8:0a:bf:
71:bd:d0:f6:ce:19:88:67:b8:51:d2:3a:15:7b:bc:
a7:8d:97:89:35:70:cf:4a:ff:56:58:3c:8a:3d:0c:
c2:e9:0c:05:1d:11:f0:d2:a7:54:f4:09:82:03:dc:
e8:10:dc:31:12:95:65:a3:e8:6a:5d:d3:97:90:bb:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:59:63:C3:8C:37:E1:0C:82:70:AF:FD:4E:29:3D:2D:FB:B7:7F:FB
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ba:2d:b4:90:dc:fa:3e:77:94:bc:32:e4:d0:37:67:ca:5f:
58:8f:67:04:79:8f:de:36:19:a5:fa:4b:e4:43:51:9d:6c:16:
e4:45:d7:d5:ad:73:30:5c:67:80:a1:58:79:c7:6a:9d:a8:0c:
68:a6:59:2e:8f:de:c7:2f:4a:60:13:f6:3b:c8:fe:1b:1a:f7:
a7:03:08:76:1a:fd:16:2b:d0:7f:1e:50:29:bc:8f:9d:af:6b:
44:82:77:36:e7:69:cc:cd:eb:fe:91:bb:e5:93:cd:57:3a:0a:
c5:93:df:f9:d0:a7:64:dd:ea:57:5a:f5:19:64:5a:1d:c5:36:
91:46:96:23:99:23:c7:fd:92:38:93:50:b4:51:d1:c0:9b:dd:
1a:04:68:50:81:64:12:81:cd:c1:60:50:2e:06:3c:46:18:bc:
f1:34:17:82:da:9c:68:d1:83:35:a8:4c:e8:e1:0b:96:67:f6:
1e:2a:85:d3:b8:64:cf:90:c4:86:3f:68:0a:d1:b2:96:4e:71:
e4:72:0d:3d:10:97:72:07:5a:91:34:76:b9:90:c2:08:ac:c5:
3c:4f:e3:a7:a5:77:8e:c5:9c:ba:80:74:49:c6:65:33:f7:b9:
76:35:92:91:6f:b2:9c:0c:ee:40:a3:8c:59:ff:6f:0a:aa:21:
87:eb:5c:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRm/fqxWhPgMJr2+RkTQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZDM2ZWNiYWY1NWU0NjRlMDBiMzk4N2RhNTI2NGI2YWYy
ZGNmODgwHhcNMjYwMjA5MTIwMDM4WhcNMjYwMjEwMTIwMDM4WjAzMTEwLwYDVQQD
EyhiMDU5NjNjMzhjMzdlMTBjODI3MGFmZmQ0ZTI5M2QyZGZiYjc3ZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CVZXrOIBdea+O2dcLEhcxO1pPot
w6EOT+M3vbTXGfaqIGNfszGFAZW8aVCl6FZAsnXa2XJ9A4GEE6r3/fwliWEM5IMF
v6H6LXWl+DVasOyf+riWY6ZdMX7p+FUHQPAM69HmeargpZ9PT954WuSk43butyLz
2nRr1ER/sdGaMeaUraVxSlQt6rBjal94zOu+PjEscHTQSEg0exZ1BDaMWezP6TqV
T7buVgbBzn2KaG0I7vujsOGqSOKWUtUvAxWoCr9xvdD2zhmIZ7hR0joVe7ynjZeJ
NXDPSv9WWDyKPQzC6QwFHRHw0qdU9AmCA9zoENwxEpVlo+hqXdOXkLtFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBZY8OMN+EMgnCv/U4pPS37t3/7MB8GA1UdIwQY
MBaAFIPTbsuvVeRk4As5h9pSZLavLc+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAt
OTY1MzFkMTYzMzFiLzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAtOTY1MzFkMTYzMzFi
LzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAProttJDc
+j53lLwy5NA3Z8pfWI9nBHmP3jYZpfpL5ENRnWwW5EXX1a1zMFxngKFYecdqnagM
aKZZLo/exy9KYBP2O8j+Gxr3pwMIdhr9FivQfx5QKbyPna9rRIJ3NudpzM3r/pG7
5ZPNVzoKxZPf+dCnZN3qV1r1GWRaHcU2kUaWI5kjx/2SOJNQtFHRwJvdGgRoUIFk
EoHNwWBQLgY8Rhi88TQXgtqcaNGDNahM6OELlmf2HiqF07hkz5DEhj9oCtGylk5x
5HINPRCXcgdakTR2uZDCCKzFPE/jp6V3jsWcuoB0ScZlM/e5djWSkW+ynAzuQKOM
Wf9vCqohh+tcDg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:37 2026 by rpki-client