This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: Jeycfu+MHCoRxgSS4Af1TQ3ii/MNSsDNW9A92zCG978=
Subject key identifier: F1:5A:FB:1D:13:E7:77:3D:CE:40:6A:FB:C1:D8:16:B6:1C:55:CA:28
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 019BF4D0287AAA75A53034EBEE003B3C181D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 079F
Signing time: Sun 25 Jan 2026 11:00:41 +0000
Manifest this update: Sun 25 Jan 2026 11:00:41 +0000
Manifest next update: Mon 26 Jan 2026 11:00:41 +0000
Files and hashes: 1: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: y2+U4B63H6s4sBMlqH0ix6kQoPtLAb03ZmP2YUv/pYo=)
2: Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa (hash: llVgeSirYRMnxHxg+jow3ZLNY2RJpGEBaB4uInwuLpg=)
3: q7LASc7RAdvhKI2lD0l4EEgjIM4.roa (hash: Nr2UUQFi//KxEpaf+hC6t8vMKhEd7i+ElopwPR5ej6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:d0:28:7a:aa:75:a5:30:34:eb:ee:00:3b:3c:18:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Jan 25 11:00:41 2026 GMT
Not After : Jan 26 11:00:41 2026 GMT
Subject: CN=f15afb1d13e7773dce406afbc1d816b61c55ca28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:d1:d4:bf:52:27:8f:95:91:58:d3:8b:16:
f7:38:89:ac:02:03:04:b3:9c:d6:f7:88:56:2f:36:
8c:46:d2:77:eb:d0:c8:64:0c:64:f0:95:d2:aa:bc:
8a:d2:3a:68:70:f8:f6:17:94:98:16:28:62:49:e7:
d2:60:42:16:ae:12:e7:e7:ab:62:d0:57:53:eb:d0:
6b:83:c7:4a:68:a8:cb:7b:51:46:be:8f:c7:65:c7:
08:c6:26:e2:52:16:af:0a:6e:c5:d1:e3:a9:11:dd:
b2:d8:02:f7:92:c4:a8:36:a5:57:57:97:43:4a:aa:
de:46:aa:a5:a8:06:d3:09:a4:06:32:ad:a1:c4:a1:
f7:b7:ac:6b:3d:20:fd:17:14:dc:ec:b4:4a:a4:f8:
24:6d:c2:9b:f8:a1:7f:77:02:3a:2f:47:06:5c:54:
d7:05:fe:c9:72:00:6e:09:68:51:d8:8a:2a:0d:9e:
a6:67:56:42:0c:b5:ee:69:86:4f:45:44:77:39:79:
ac:8a:51:0d:f7:b5:f0:ca:03:4e:a8:9a:72:6e:80:
23:35:b9:b8:aa:69:0f:21:73:b7:95:d7:f3:4e:9c:
f2:40:a6:a5:aa:a2:70:db:25:e4:d9:85:78:d0:b8:
90:07:30:85:eb:89:a9:e1:75:3c:ce:5c:77:4d:06:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5A:FB:1D:13:E7:77:3D:CE:40:6A:FB:C1:D8:16:B6:1C:55:CA:28
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3e:2f:8d:4d:a9:7c:c7:c3:36:77:ee:f1:23:d1:64:fd:b3:
06:57:e2:f4:bf:66:d2:e3:38:9e:94:2d:39:73:c8:59:e8:f7:
60:e5:60:7c:36:b8:cc:eb:2b:b5:fd:98:e0:23:f5:f2:22:44:
52:f4:10:82:0e:9a:b1:9d:2f:aa:5b:1c:be:04:ed:9a:58:96:
94:82:43:d5:98:5a:43:b0:7e:e3:14:8e:67:c7:a9:f2:1b:64:
88:47:be:8a:00:e3:30:62:0e:b2:76:73:af:80:7a:a1:8a:f6:
e4:f6:12:7b:8d:b6:37:49:ea:27:9b:a0:59:27:c3:5e:07:1d:
fd:2a:43:4c:49:2a:e5:ff:c8:45:fa:dc:99:2d:f1:85:d4:f6:
c0:ab:e6:67:dc:fd:fe:97:de:59:ca:c9:73:47:ec:8a:24:08:
b1:dc:ac:51:03:7d:c7:37:7a:cc:d2:64:fa:05:4c:f3:ba:7e:
73:30:c6:a6:77:7d:29:45:c2:5e:e4:fb:5d:9b:6d:d2:41:40:
c3:e4:57:a1:e2:37:ab:1b:4a:9d:bd:9c:88:95:a3:72:be:af:
ac:03:e2:1d:18:e5:3d:42:9d:4d:96:70:61:d0:07:54:0d:01:
63:8c:f9:ae:b9:75:49:6e:56:08:e8:1f:92:b2:60:fb:58:7a:
7e:f2:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:51 2026 by rpki-client