This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier: 5iVs5+fv/eBMrS6gCh928YfxEpkOe04q/VL9PlL8y6Y=
Subject key identifier: 7D:C9:3A:E3:81:82:6A:35:53:82:5B:80:D5:B3:B8:F8:1D:6F:75:85
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 019BF687C48495E49A638B780052B5B1ADE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number: 07CD
Signing time: Sun 25 Jan 2026 19:00:51 +0000
Manifest this update: Sun 25 Jan 2026 19:00:51 +0000
Manifest next update: Mon 26 Jan 2026 19:00:51 +0000
Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: TgYi3idlxPDV0ILvRLfALW/Akzvi9M41CCRoX6n2QFo=)
2: rHQdQwrAVRUi1O-wNwGNXoOAwg0.roa (hash: 99E6Pbyu+albbhKOZ1Sk3PoNSHlEGTIbABGjf0VzSBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:87:c4:84:95:e4:9a:63:8b:78:00:52:b5:b1:ad:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Jan 25 19:00:51 2026 GMT
Not After : Jan 26 19:00:51 2026 GMT
Subject: CN=7dc93ae381826a3553825b80d5b3b8f81d6f7585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c8:8d:28:c3:74:8b:6c:1a:26:dc:4f:52:89:
22:8d:36:18:ce:30:d5:0f:57:ca:84:e4:d8:62:32:
cf:4f:98:ad:95:aa:7f:61:f2:cd:bf:5a:a0:60:d8:
5f:cf:33:ae:71:3e:75:18:c2:19:84:df:b8:9a:fc:
fb:5c:38:9e:fd:df:bd:dd:52:e8:3f:1b:5c:11:b6:
60:9a:68:7d:7a:db:af:7d:48:df:92:1c:7c:21:b9:
2f:65:03:4d:cc:be:1c:fb:b0:d7:9b:cd:30:02:94:
f5:50:ba:78:06:06:bf:ca:c9:fb:ea:73:4a:16:69:
08:bb:bc:e8:07:68:31:1f:57:4b:f4:44:8c:b3:7a:
14:b6:a7:08:60:81:e3:5f:35:48:1a:c8:d0:86:a6:
ac:f2:07:fa:df:1f:55:29:19:f1:3b:ad:29:66:f5:
d9:e6:af:27:3f:d5:f9:66:0a:d8:29:13:67:51:3c:
01:49:75:6b:0a:92:01:c0:60:94:f2:86:f8:74:45:
65:b8:c3:94:a1:ed:0c:59:de:e0:ce:7c:5a:e9:b8:
c4:16:81:8d:4c:79:31:bd:fc:ea:26:ce:6a:6c:d6:
5e:0f:fe:9f:f4:8c:ab:14:81:0f:f2:b3:92:9d:0c:
8f:c3:a7:01:7d:81:1b:ce:25:af:70:ae:1d:37:3b:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C9:3A:E3:81:82:6A:35:53:82:5B:80:D5:B3:B8:F8:1D:6F:75:85
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e7:0b:04:6a:e9:05:5e:16:6d:9a:54:62:eb:9b:8e:fe:b5:
88:20:d2:b5:08:af:b2:c7:6e:67:e9:76:21:60:ee:b7:22:a4:
cc:6e:43:c7:e9:da:9f:66:3b:b2:04:89:68:33:59:0d:c1:55:
a4:88:92:8c:4d:87:5e:ce:57:04:9d:db:29:8a:2b:04:79:94:
5c:f4:1a:34:19:b6:79:79:81:f3:f2:31:a0:a9:f8:99:55:66:
f2:df:7d:bd:1a:c4:f8:58:cf:3b:b0:cc:e4:3d:b4:2a:d9:cc:
bd:c7:2c:e4:a3:00:46:50:ea:f9:b8:03:42:25:0d:ee:32:73:
f4:23:8f:d0:2c:b4:95:b8:b9:4f:c9:0c:c6:1a:42:5c:75:af:
0a:5d:ee:f1:19:97:8b:4c:70:1b:13:ae:79:63:be:4a:aa:89:
e7:24:eb:60:fb:3d:80:b6:ab:ce:ec:af:33:09:60:d7:a5:d3:
87:fe:83:e6:be:46:85:0a:eb:38:66:d3:6c:26:ac:82:c3:37:
a0:6d:8a:9b:d7:43:f1:2c:6f:2b:4a:fb:10:72:5b:79:a2:74:
09:e2:0a:93:92:2a:ec:6c:2d:bc:5e:eb:c4:dc:01:87:59:b7:
d6:8b:b4:76:d6:92:43:18:db:36:c1:12:99:49:b8:60:60:51:
e2:85:0a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:13:25 2026 by rpki-client