This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: TSQJvUP+kmWZhdhDW5dKgwYoVs+smiDHjcGRMpysVUU=
Subject key identifier: 9B:E5:B3:54:22:CB:2C:88:9C:7C:6C:5F:C5:10:65:FC:39:8B:58:A7
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 019BF34F7CF711E27C788A0A844265A76A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 1534
Signing time: Sun 25 Jan 2026 04:00:31 +0000
Manifest this update: Sun 25 Jan 2026 04:00:31 +0000
Manifest next update: Mon 26 Jan 2026 04:00:31 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: HoVtKcBL8wvDc7Gs7l087mTIyIAN2Eoio3n3pe5UUYo=)
2: GwHZp-kEEMMSmgcidpvuauk-EA0.roa (hash: Xjp5Kh43d0lOVK+MDX99KJIgb/gfu211S8//K3ogwuU=)
3: X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa (hash: I3o7rUH/RKJK5k980x+148YLL5ZlqYblJvTvhEFHuDU=)
4: g9skLhoTngKF84leEtNBNhGZn9Q.roa (hash: hqQ3HiFBUbLIXn6t3JB+mw0UlnMpWW49qnJ3ApgTu0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:4f:7c:f7:11:e2:7c:78:8a:0a:84:42:65:a7:6a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Jan 25 04:00:31 2026 GMT
Not After : Jan 26 04:00:31 2026 GMT
Subject: CN=9be5b35422cb2c889c7c6c5fc51065fc398b58a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:a6:ba:a6:b7:d0:4a:7b:6a:b6:66:92:28:
37:b5:e6:cf:4d:d7:04:68:37:55:c4:15:df:f1:6e:
35:bf:c9:cb:3b:5f:2d:72:d8:65:c9:fe:fb:98:78:
fa:1d:ac:c0:23:2c:df:6f:ac:39:98:63:d5:e4:13:
2f:d6:99:27:b3:af:ef:b5:b8:f3:a9:fe:ac:b6:bd:
fd:cc:bf:f2:21:d5:23:68:7c:38:bf:32:d1:44:d4:
87:e4:bc:49:1a:8d:25:a0:fa:c0:b3:c9:21:e5:a6:
55:45:35:ea:ed:55:df:74:96:78:62:d2:bd:6e:45:
50:9a:be:92:b9:ae:fb:11:9b:ec:dc:63:b7:35:cd:
82:c6:b1:fc:ab:e1:b4:b9:fc:48:57:c3:76:8f:50:
63:72:0e:b6:1a:f8:a8:5d:7b:57:66:08:81:7c:3f:
d2:d3:56:e1:98:3b:cd:21:1c:18:6c:c2:13:f8:6d:
3b:b0:81:8f:e9:4d:04:f0:c3:5c:50:f1:fd:9a:55:
0d:cc:bf:c9:5a:83:54:4f:0e:50:ba:31:1b:36:d5:
f8:de:a4:91:b7:b5:28:92:0a:b8:12:04:c0:c1:f4:
1a:ee:ec:91:91:5d:70:da:ef:dc:bd:7b:1d:ae:e4:
9c:c1:cb:b4:bd:5a:19:21:71:d7:fc:06:b7:92:5d:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E5:B3:54:22:CB:2C:88:9C:7C:6C:5F:C5:10:65:FC:39:8B:58:A7
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fc:8c:31:6e:98:fd:14:61:e0:b7:4b:9b:77:ea:27:d1:a5:
5c:5e:8c:ba:4b:e9:38:b2:42:10:81:39:f6:6b:c8:d4:f6:0f:
47:72:e0:0d:e6:10:39:67:ef:3f:32:38:3d:7d:ef:c1:54:6f:
80:19:28:45:b8:24:62:1a:59:3a:25:50:e8:26:5c:40:53:ed:
2c:04:c3:84:d7:fd:f5:e6:ce:03:ea:48:27:2f:ed:54:19:b5:
e3:1b:a4:f2:1a:80:6a:d7:11:5d:7d:ac:00:4c:28:af:9e:29:
a7:20:2e:45:6c:55:99:db:dd:70:6e:ba:f7:b3:3d:50:71:58:
19:55:c4:ca:f5:de:a4:bf:f9:e1:f2:36:71:72:60:c1:9c:11:
fd:2e:f3:a4:11:f3:d4:f8:c2:0d:8b:bb:53:66:a0:06:d4:be:
63:85:03:4b:5b:23:a4:e4:b4:87:cf:3a:77:2a:2b:5e:c9:cf:
65:e2:87:30:19:be:df:14:76:ae:d5:31:15:b3:7c:67:39:fe:
54:71:2b:c6:13:b5:f2:a1:31:99:5d:55:ef:3e:57:2f:9a:85:
16:0a:0a:c2:4c:32:85:fc:41:e1:2e:bc:67:3f:d3:68:bd:48:
9f:d2:8f:59:28:f1:4f:b9:11:86:93:c8:0b:6f:03:34:c2:f7:
96:fc:f7:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzT3z3EeJ8eIoKhEJlp2qXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDFjZDQ3YTUzZWY1N2ViYjU2N2JjODgyYWQyOTg2ZmFh
YzVmMGQwHhcNMjYwMTI1MDQwMDMxWhcNMjYwMTI2MDQwMDMxWjAzMTEwLwYDVQQD
Eyg5YmU1YjM1NDIyY2IyYzg4OWM3YzZjNWZjNTEwNjVmYzM5OGI1OGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyqmuqa30Ep7arZmkig3tebPTdcE
aDdVxBXf8W41v8nLO18tcthlyf77mHj6HazAIyzfb6w5mGPV5BMv1pkns6/vtbjz
qf6str39zL/yIdUjaHw4vzLRRNSH5LxJGo0loPrAs8kh5aZVRTXq7VXfdJZ4YtK9
bkVQmr6Sua77EZvs3GO3Nc2CxrH8q+G0ufxIV8N2j1Bjcg62GvioXXtXZgiBfD/S
01bhmDvNIRwYbMIT+G07sIGP6U0E8MNcUPH9mlUNzL/JWoNUTw5QujEbNtX43qSR
t7Uokgq4EgTAwfQa7uyRkV1w2u/cvXsdruScwcu0vVoZIXHX/Aa3kl20FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvls1QiyyyInHxsX8UQZfw5i1inMB8GA1UdIwQY
MBaAFNXRzUelPvV+u1Z7yIKtKYb6rF8NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYt
ZjRkMDcxZjUwZjFkLzEvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84NjE5NTMtNWY2NS00NDY1LTkwNDYtZjRkMDcxZjUwZjFk
LzEvMWRITlI2VS05WDY3Vm52SWdxMHBodnFzWHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfyMMW6Y
/RRh4LdLm3fqJ9GlXF6MukvpOLJCEIE59mvI1PYPR3LgDeYQOWfvPzI4PX3vwVRv
gBkoRbgkYhpZOiVQ6CZcQFPtLATDhNf99ebOA+pIJy/tVBm14xuk8hqAatcRXX2s
AEwor54ppyAuRWxVmdvdcG6697M9UHFYGVXEyvXepL/54fI2cXJgwZwR/S7zpBHz
1PjCDYu7U2agBtS+Y4UDS1sjpOS0h886dyorXsnPZeKHMBm+3xR2rtUxFbN8Zzn+
VHErxhO18qExmV1V7z5XL5qFFgoKwkwyhfxB4S68Zz/TaL1In9KPWSjxT7kRhpPI
C28DNML3lvz3Vg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:05:52 2026 by rpki-client