This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: 2PlvOKtUzJvMxOUGtVqAtSD4AWaf654Euph4OEywjOc=
Subject key identifier: EB:6B:92:F1:D8:C8:B4:63:B5:80:C8:B1:69:E6:E8:6D:F2:6A:AB:1A
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 019C43FE7669D8133D3C2554A337AC30FA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 20:01:15 +0000
Manifest this update: Mon 09 Feb 2026 20:01:15 +0000
Manifest next update: Tue 10 Feb 2026 20:01:15 +0000
Files and hashes: 1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: Lby6QtLsYilrZ1Mq2j/M3rzZoapHOKezFiPBc71+hXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:76:69:d8:13:3d:3c:25:54:a3:37:ac:30:fa:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Feb 9 20:01:15 2026 GMT
Not After : Feb 10 20:01:15 2026 GMT
Subject: CN=eb6b92f1d8c8b463b580c8b169e6e86df26aab1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:a7:49:48:64:da:29:71:ab:c6:36:06:3c:
a4:9e:c6:e1:c1:38:74:bb:cf:99:ab:cc:22:65:63:
56:e8:63:e5:b8:21:dd:4a:b7:e9:e7:06:b0:76:87:
74:f3:8b:b3:67:00:17:f9:fd:e6:78:fb:8a:6b:2c:
93:4e:13:52:16:9f:77:50:dc:60:7d:2c:e7:bd:b2:
ae:24:7c:a3:cf:52:6a:17:98:ab:61:72:c1:46:12:
fe:1f:8e:84:93:b1:64:1d:64:7a:90:25:ba:05:a3:
d2:7b:dd:90:ff:c6:32:a2:42:fa:59:7e:5e:93:60:
36:dd:28:83:6c:5a:0b:e5:79:52:56:01:b1:27:5c:
00:67:9a:04:20:7a:2f:3f:c8:60:ed:ce:88:8c:16:
76:10:2a:55:d6:7a:24:26:82:8c:50:77:b0:48:dc:
59:86:cb:b2:da:d7:20:2f:d1:2d:f7:3e:2d:f9:0a:
a6:31:16:c6:7f:8c:23:5a:91:f3:9a:1d:74:e4:52:
50:95:96:9c:8b:ff:ad:18:f7:33:3b:5f:1f:d2:7f:
18:09:3c:c0:84:d2:eb:30:bb:fb:00:b4:e3:61:69:
4a:63:de:79:44:31:0f:65:85:a8:07:a7:76:e2:88:
c0:53:36:52:b2:54:99:02:10:d5:ae:29:98:6d:78:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:92:F1:D8:C8:B4:63:B5:80:C8:B1:69:E6:E8:6D:F2:6A:AB:1A
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:83:66:e1:a1:01:91:b9:f3:59:bc:69:e4:bb:69:99:ed:c1:
24:2b:e9:47:32:7a:04:57:5b:81:a1:c4:ec:cd:8f:e7:ee:9c:
4f:42:de:83:31:13:68:30:b3:99:ef:2b:2b:42:53:d7:23:7f:
27:b2:d5:df:ad:22:0f:ab:db:cd:f1:58:0e:31:68:22:4b:d4:
00:a1:7e:ab:33:cb:89:62:ab:50:cf:ce:9f:61:ca:bc:b2:ed:
65:65:98:51:dc:b5:f2:59:71:2c:8e:39:b9:79:54:ab:15:fb:
22:f1:0b:05:e8:27:03:31:2a:45:2b:26:db:b4:90:f7:b5:5e:
31:11:dd:72:ee:03:69:0b:09:b1:db:59:d3:d6:c0:30:a9:bb:
cd:79:8f:fb:ce:13:e5:73:f6:2b:b8:a4:55:ee:77:db:47:53:
6a:d1:ba:0c:7e:95:6a:dc:29:b1:77:fb:db:35:70:ba:6a:b3:
de:1a:49:f3:d1:0b:41:6a:8b:d7:da:8a:22:e8:4f:6d:a6:27:
1b:bf:d8:d3:1e:98:cb:76:2c:fd:a9:68:d7:02:0b:bb:6d:be:
be:0e:68:5f:fe:e4:2f:e5:d8:a7:b7:86:dc:2a:65:29:15:0f:
30:33:4c:d4:13:6e:87:6e:5b:ad:0c:2e:b1:ee:48:59:50:fb:
73:3f:11:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/nZp2BM9PCVUozesMPqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGE4MmU4Nzc5MzNkOWMyYzk1MmNiMzc2YzkzYWFhMzM3
ZGQ3ZDIwHhcNMjYwMjA5MjAwMTE1WhcNMjYwMjEwMjAwMTE1WjAzMTEwLwYDVQQD
EyhlYjZiOTJmMWQ4YzhiNDYzYjU4MGM4YjE2OWU2ZTg2ZGYyNmFhYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxamnSUhk2ilxq8Y2BjyknsbhwTh0
u8+Zq8wiZWNW6GPluCHdSrfp5wawdod084uzZwAX+f3mePuKayyTThNSFp93UNxg
fSznvbKuJHyjz1JqF5irYXLBRhL+H46Ek7FkHWR6kCW6BaPSe92Q/8YyokL6WX5e
k2A23SiDbFoL5XlSVgGxJ1wAZ5oEIHovP8hg7c6IjBZ2ECpV1nokJoKMUHewSNxZ
hsuy2tcgL9Et9z4t+QqmMRbGf4wjWpHzmh105FJQlZaci/+tGPczO18f0n8YCTzA
hNLrMLv7ALTjYWlKY955RDEPZYWoB6d24ojAUzZSslSZAhDVrimYbXh0UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtrkvHYyLRjtYDIsWnm6G3yaqsaMB8GA1UdIwQY
MBaAFMfaguh3kz2cLJUss3bJOqozfdfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2Mt
ZWFlNGY2ZDMzY2E2LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2MtZWFlNGY2ZDMzY2E2
LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYNm4aEB
kbnzWbxp5Ltpme3BJCvpRzJ6BFdbgaHE7M2P5+6cT0LegzETaDCzme8rK0JT1yN/
J7LV360iD6vbzfFYDjFoIkvUAKF+qzPLiWKrUM/On2HKvLLtZWWYUdy18llxLI45
uXlUqxX7IvELBegnAzEqRSsm27SQ97VeMRHdcu4DaQsJsdtZ09bAMKm7zXmP+84T
5XP2K7ikVe5320dTatG6DH6VatwpsXf72zVwumqz3hpJ89ELQWqL19qKIuhPbaYn
G7/Y0x6Yy3Ys/alo1wILu22+vg5oX/7kL+XYp7eG3CplKRUPMDNM1BNuh25brQwu
se5IWVD7cz8R6w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:46 2026 by rpki-client