This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json)
Hash identifier: SgR0rRFZBsuCvPKCqud8qzW3UFHQ5b1vMWukxnFFjz0=
Subject key identifier: C3:D8:6B:42:CC:6C:58:24:B9:39:E3:BC:8E:FF:78:C5:B8:E2:AD:17
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 019BF53E20A56E4D1226035CCEB9FD17E633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
Manifest number: 1800
Signing time: Sun 25 Jan 2026 13:00:48 +0000
Manifest this update: Sun 25 Jan 2026 13:00:48 +0000
Manifest next update: Mon 26 Jan 2026 13:00:48 +0000
Files and hashes: 1: 1N2eBsiKVFg4yqjCj4qrDM-I7hg.roa (hash: YWmW+qHhsLN+csw32WYbNSaULT6cEK/L9LG3DcTcfQU=)
2: 2J_enL0mq_HbBFj1p_d_qyIXNks.roa (hash: VBLGjSkxg5gn4s0UWv4znpc4mtgeavbmnZnDA3LFAO4=)
3: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: IYWn/xrvDWIy1CO1b/8Vkal/SLlRknEuedlLqPdtoTk=)
4: MBDtMQDSqawqojb2FhK68rWmuLk.roa (hash: uLmuIf7vktZfQTA7fei9mu9bLdrRfmkbjGPhAoxKdLQ=)
5: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (hash: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8=)
6: hhmzN128wuDiRBwUCjO9oZf28Hc.roa (hash: qKwy9aO/5eDeYbjJqOLC4283+7+rAN2JwgIHL3S+j7c=)
7: wRiMz6n-wmWUoLFkxFSSP8HrU5E.roa (hash: gQ8uNZeHK/kIii6trEwXDL6+4QDEEh4ElPmKWLgPx14=)
8: wpCDaZ8CmRmp29ikyeMppBLQrkw.roa (hash: Mky9v4umrVvEcx+IGCTXn8o9SgJSH+g15pwUCUI4mwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:20:a5:6e:4d:12:26:03:5c:ce:b9:fd:17:e6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jan 25 13:00:48 2026 GMT
Not After : Jan 26 13:00:48 2026 GMT
Subject: CN=c3d86b42cc6c5824b939e3bc8eff78c5b8e2ad17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:42:ed:b4:b5:73:c1:31:81:02:6c:4f:f2:de:
0c:65:67:67:5e:9c:37:d0:76:5e:fb:71:1c:4b:ae:
b9:9d:4b:8c:14:d7:cb:8e:4b:fd:cb:b2:17:db:bb:
31:95:de:ca:0e:1a:fc:51:2a:65:71:84:1c:4c:7f:
dd:f7:45:e1:4e:18:36:a1:ba:4f:fa:3c:d5:19:38:
d0:20:f2:a1:66:1a:36:9f:80:e9:96:33:30:b3:c2:
49:8c:30:2e:63:d7:79:1f:6f:dc:fc:f9:89:56:29:
92:8e:d0:b6:b5:f2:95:68:2e:e6:66:45:1c:bf:80:
95:89:4b:e9:35:b3:bb:72:33:e1:64:b2:4f:ea:6a:
ba:44:df:ac:82:4c:fb:79:0c:8e:f2:0e:62:4d:05:
9f:9c:cd:57:f7:c6:54:59:1e:95:cc:92:b7:a7:2f:
f3:05:99:77:b1:ff:80:f8:e9:c9:cc:12:59:18:ce:
44:0a:c6:e1:5d:c5:91:00:bf:f3:bf:53:f2:27:db:
41:8d:db:27:06:8b:ed:18:d2:2f:2e:fc:1c:36:02:
e1:50:63:40:0b:d3:3d:74:13:bd:e0:b3:11:49:e4:
84:f1:99:4f:39:54:ce:81:f3:a0:c0:13:57:6c:0f:
eb:6a:5a:e4:e2:38:13:fd:bf:5f:e5:90:9a:7a:13:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:6B:42:CC:6C:58:24:B9:39:E3:BC:8E:FF:78:C5:B8:E2:AD:17
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7e:c7:2f:47:c8:82:44:9e:e8:f5:61:54:66:92:b9:81:fe:
7f:08:a7:02:58:d7:6e:55:bd:7c:ea:d2:e7:12:8a:74:31:61:
1b:7e:72:5c:d1:21:b3:d0:3b:86:ca:5d:e9:3d:e1:b4:1f:d2:
9a:20:66:ba:db:a1:64:1a:4e:5c:86:42:86:3d:97:36:d1:46:
bc:63:a2:b4:72:a3:71:f7:3e:e2:84:ec:62:ae:e1:84:72:04:
33:76:79:54:be:0f:90:a0:a9:c6:0b:b8:ce:6f:19:8b:48:7f:
e4:01:4f:08:a5:1e:0f:2e:7c:f3:96:47:ef:5f:97:b1:4b:a5:
58:0c:47:56:d9:c4:f7:3d:38:fe:50:5a:9e:2d:5c:bc:a4:e2:
5c:ce:50:f1:9f:97:8d:0a:66:2f:33:3f:f5:bf:42:5b:2c:db:
96:4f:99:6b:4d:f1:3a:0a:5c:28:61:42:ff:5d:d4:76:40:3e:
1a:3a:c6:3a:52:36:2f:c9:55:d0:f2:03:d0:e9:6d:6d:1a:04:
25:9a:09:be:43:4f:1e:63:34:3d:85:f3:34:a2:75:40:f8:8f:
22:10:10:f8:22:95:99:84:2d:a3:fe:81:4b:f4:ba:ea:b6:94:
76:3a:d4:42:7a:3b:eb:1f:37:0c:bb:f5:ff:dc:3d:7d:eb:74:
22:83:cd:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PiClbk0SJgNczrn9F+YzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx
ZGFjODIwHhcNMjYwMTI1MTMwMDQ4WhcNMjYwMTI2MTMwMDQ4WjAzMTEwLwYDVQQD
EyhjM2Q4NmI0MmNjNmM1ODI0YjkzOWUzYmM4ZWZmNzhjNWI4ZTJhZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjELttLVzwTGBAmxP8t4MZWdnXpw3
0HZe+3EcS665nUuMFNfLjkv9y7IX27sxld7KDhr8USplcYQcTH/d90XhThg2obpP
+jzVGTjQIPKhZho2n4DpljMws8JJjDAuY9d5H2/c/PmJVimSjtC2tfKVaC7mZkUc
v4CViUvpNbO7cjPhZLJP6mq6RN+sgkz7eQyO8g5iTQWfnM1X98ZUWR6VzJK3py/z
BZl3sf+A+OnJzBJZGM5ECsbhXcWRAL/zv1PyJ9tBjdsnBovtGNIvLvwcNgLhUGNA
C9M9dBO94LMRSeSE8ZlPOVTOgfOgwBNXbA/ralrk4jgT/b9f5ZCaehOehwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPYa0LMbFgkuTnjvI7/eMW44q0XMB8GA1UdIwQY
MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt
ZTlhYzJiMDAzMTZhLzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh
LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr37HL0fI
gkSe6PVhVGaSuYH+fwinAljXblW9fOrS5xKKdDFhG35yXNEhs9A7hspd6T3htB/S
miBmutuhZBpOXIZChj2XNtFGvGOitHKjcfc+4oTsYq7hhHIEM3Z5VL4PkKCpxgu4
zm8Zi0h/5AFPCKUeDy5885ZH71+XsUulWAxHVtnE9z04/lBani1cvKTiXM5Q8Z+X
jQpmLzM/9b9CWyzblk+Za03xOgpcKGFC/13UdkA+GjrGOlI2L8lV0PID0OltbRoE
JZoJvkNPHmM0PYXzNKJ1QPiPIhAQ+CKVmYQto/6BS/S66raUdjrUQno76x83DLv1
/9w9fet0IoPN9w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:40 2026 by rpki-client