This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: wXOpfspNOBfxWIMt9j4D3LyOrjC5vTF7g3aVHOmz+qc=
Subject key identifier: 89:60:04:2C:A1:5D:C4:9F:D0:11:34:4D:87:42:3A:01:10:FA:96:F5
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 019C42B439419D5353563928851D72522F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 0669
Signing time: Mon 09 Feb 2026 14:00:33 +0000
Manifest this update: Mon 09 Feb 2026 14:00:33 +0000
Manifest next update: Tue 10 Feb 2026 14:00:33 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: 5uTMHKKvY9tiS0aH+u7H8Z3LzcftkIcS+bomNdz/buw=)
2: RnVTKZtoHdvPsfS8AH4yl7Tn4u8.roa (hash: Pgpu3NuPaXsm7XOY/YOTMwi4KbLTR5P/cSiW4/B73kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:39:41:9d:53:53:56:39:28:85:1d:72:52:2f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Feb 9 14:00:33 2026 GMT
Not After : Feb 10 14:00:33 2026 GMT
Subject: CN=8960042ca15dc49fd011344d87423a0110fa96f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:80:d1:bd:50:6a:a9:17:44:85:14:53:59:
6c:ee:b9:c9:69:48:19:1a:60:32:a2:59:c8:20:b8:
e8:e0:da:3d:e0:01:84:39:3d:28:eb:63:f9:25:aa:
9f:68:3e:ae:62:b8:c0:91:ca:74:ca:be:f1:cc:dd:
e8:48:37:9f:b4:64:aa:6e:27:ca:2d:f2:a4:b3:97:
c4:d7:b2:b3:5e:a1:4b:9e:e6:8e:03:df:58:d7:87:
31:b7:b0:d9:42:87:d7:52:52:96:4a:e5:ef:ca:e1:
f4:e4:c8:00:c1:d7:c7:c1:ac:41:57:de:42:d5:84:
34:0b:eb:89:d9:12:9b:ee:00:7f:c0:35:3a:9e:de:
5d:29:ba:9c:e3:cb:b3:c7:98:1e:d7:3a:fa:c8:d2:
eb:2b:53:62:d4:67:f7:0c:ce:7b:fa:42:a6:37:9c:
d7:2e:29:69:b2:20:45:95:48:ca:05:97:94:bb:bf:
28:3c:0a:b0:02:a6:93:30:9c:45:42:fd:01:6c:bd:
f0:d1:cb:4b:5f:25:5f:5f:d9:4b:57:9f:ab:50:93:
34:94:b2:41:9e:cb:35:e1:57:a0:5f:f2:81:8d:af:
a8:08:46:2f:95:f4:dc:48:2a:fb:89:24:ed:19:9c:
4e:f9:9c:c5:1b:80:47:33:22:08:28:fe:3d:74:17:
fd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:04:2C:A1:5D:C4:9F:D0:11:34:4D:87:42:3A:01:10:FA:96:F5
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:17:34:ff:3b:be:4c:68:3c:c7:2f:f1:48:5b:b8:2b:c6:b5:
24:fc:c2:80:ac:31:bc:57:51:87:08:db:54:68:48:7e:11:a8:
33:9a:f4:3f:69:50:b8:80:f0:8a:1f:2f:79:55:c0:cf:e1:5f:
0e:ae:e2:0c:8b:01:13:95:36:05:6f:c7:0e:5c:45:70:11:6f:
5d:50:7a:e7:18:75:4d:7a:c4:97:7b:3a:9c:d9:51:6e:c4:96:
11:41:46:f3:eb:a2:77:8e:09:30:68:75:17:fd:6a:34:78:89:
22:c9:0f:8e:83:cb:69:ef:6f:71:de:a2:0a:7c:86:c3:9b:35:
86:59:05:04:ff:07:21:6d:92:ad:a6:f1:10:07:ba:41:22:5e:
a7:77:06:89:d6:4c:9b:0f:2d:5a:f7:95:8c:9a:62:ac:8d:25:
34:d2:08:a0:b5:8d:55:03:45:25:1d:28:f6:33:b9:3b:b3:d9:
65:62:30:26:52:78:6c:a6:72:9f:14:61:99:c3:31:1d:92:a2:
48:15:55:d4:77:96:60:7d:60:ee:c6:83:ce:ec:ba:0b:db:c6:
cf:01:3e:77:a7:8e:a1:c9:5a:3d:e5:6f:ff:cb:9c:d1:a3:92:
5c:48:d6:86:01:5d:e1:8a:37:3b:7d:b1:8b:ab:1c:df:2a:08:
de:29:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:25 2026 by rpki-client