This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: 3MjVcwD71BM1l4m3LNtFwtM2nOTUQE9sKoN3QbOwz5I=
Subject key identifier: C8:A3:67:C2:31:83:35:D3:7E:32:A4:D8:8B:8E:A0:94:A7:C9:AC:20
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 019BF2E2774EE0DAE3059A7BE68E95675C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 17D0
Signing time: Sun 25 Jan 2026 02:01:26 +0000
Manifest this update: Sun 25 Jan 2026 02:01:26 +0000
Manifest next update: Mon 26 Jan 2026 02:01:26 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: 2ss4C2KG+gsH2qvQIca/aVLc4y4NvM27ySD3aTYdvFw=)
2: T9rz93pJrKV5HZUDPNt-auvowcY.roa (hash: Y2TAvhfs7O4nAyyTTSyBt46eHZbCQZ13ePvrQ4ueMNo=)
3: rtoaF4eNoCfBlVaGIH3lILCxwDw.roa (hash: uP2Cltj1neggz9Zc7r+kubVviQuOHIeAbOo973WtReI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e2:77:4e:e0:da:e3:05:9a:7b:e6:8e:95:67:5c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Jan 25 02:01:26 2026 GMT
Not After : Jan 26 02:01:26 2026 GMT
Subject: CN=c8a367c2318335d37e32a4d88b8ea094a7c9ac20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:44:04:b3:63:ed:4f:a3:e6:8b:f2:0b:c9:
c2:0e:fa:d9:f4:07:de:b9:e2:70:28:60:23:b1:9c:
91:d0:5f:6f:92:84:9e:16:e3:71:09:00:64:3f:51:
1e:9e:36:d5:f7:b6:35:92:57:80:4e:8a:b0:d5:f5:
92:80:6b:97:e8:30:ca:49:1c:51:fa:81:64:6e:f4:
79:1b:03:05:d4:93:e2:c7:72:b3:e7:24:07:a7:d4:
f5:4f:5b:37:d2:75:07:ba:4f:48:05:05:55:78:b9:
51:b1:58:1b:bf:c1:c3:72:a2:07:2a:e9:b8:18:b8:
43:25:a6:89:62:9f:32:b4:24:00:84:70:f3:cb:14:
22:f3:f0:fb:bf:2e:b1:f4:2b:73:00:64:75:09:0c:
59:53:b5:0b:8b:a4:d7:3b:85:b2:60:5b:13:54:a2:
67:ba:eb:0c:9b:96:0f:2d:38:be:bd:ff:a0:1f:d2:
e5:85:4f:4a:3f:ed:99:9b:7f:95:a9:cb:64:f7:f4:
b0:39:61:bb:34:f7:cc:8f:03:c7:de:92:a7:2f:d1:
5e:e7:2c:a3:5d:8c:1f:ac:3b:50:4a:b1:24:7d:00:
ba:7b:72:4c:e5:b8:9f:80:f3:94:23:7f:5a:c8:07:
66:b7:0a:d7:7e:1c:91:c3:41:92:f3:08:fd:7d:2d:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A3:67:C2:31:83:35:D3:7E:32:A4:D8:8B:8E:A0:94:A7:C9:AC:20
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:17:c7:0f:b1:cf:28:61:9c:7a:17:9e:8b:86:5a:1e:7a:a7:
65:8c:0d:ab:14:da:4e:b5:9d:f7:37:6e:90:f2:38:6f:18:81:
77:a1:2c:58:65:16:ea:a1:66:ab:9b:f3:5d:32:02:08:f7:05:
30:bc:da:06:c5:aa:c9:63:b1:53:9a:61:36:74:8b:22:b3:e8:
37:7c:2a:04:49:ae:25:3b:5e:51:7e:c8:1d:9a:0b:58:ea:0a:
61:9f:5d:d6:f4:6d:9f:df:5b:be:e9:fc:3a:df:73:75:02:8d:
5a:15:4e:c6:86:aa:9c:11:01:57:e7:51:fa:36:48:0a:93:7d:
72:d0:a6:87:a8:f3:4e:93:f9:ff:a0:24:a0:d1:35:3f:86:d5:
a8:9c:96:3d:cd:b1:fc:86:b5:30:c1:65:16:66:91:b9:ff:d1:
60:8b:ea:8b:b5:a1:6f:a7:cc:9f:a8:48:16:60:4c:c1:59:09:
78:61:e9:a0:58:d6:be:ba:8f:64:65:38:73:b3:bd:a6:af:58:
be:c4:8d:89:7f:53:da:7a:48:7b:42:9e:4a:00:5f:ab:f7:a9:
6e:df:96:69:d9:66:d9:ca:99:9a:e3:00:81:17:ba:e8:10:b4:
6b:a7:e6:ed:17:fe:77:27:74:76:ba:07:2b:e2:ba:4a:9a:47:
09:80:16:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvy4ndO4NrjBZp75o6VZ1xpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTY3OWU1OGU0YjhiZjYzZTk1MDAyYjU0YmU0NzFkNjM0
Yjk1MDYwHhcNMjYwMTI1MDIwMTI2WhcNMjYwMTI2MDIwMTI2WjAzMTEwLwYDVQQD
EyhjOGEzNjdjMjMxODMzNWQzN2UzMmE0ZDg4YjhlYTA5NGE3YzlhYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1xEBLNj7U+j5ovyC8nCDvrZ9Afe
ueJwKGAjsZyR0F9vkoSeFuNxCQBkP1EenjbV97Y1kleAToqw1fWSgGuX6DDKSRxR
+oFkbvR5GwMF1JPix3Kz5yQHp9T1T1s30nUHuk9IBQVVeLlRsVgbv8HDcqIHKum4
GLhDJaaJYp8ytCQAhHDzyxQi8/D7vy6x9CtzAGR1CQxZU7ULi6TXO4WyYFsTVKJn
uusMm5YPLTi+vf+gH9LlhU9KP+2Zm3+Vqctk9/SwOWG7NPfMjwPH3pKnL9Fe5yyj
XYwfrDtQSrEkfQC6e3JM5bifgPOUI39ayAdmtwrXfhyRw0GS8wj9fS3g1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMijZ8IxgzXTfjKk2IuOoJSnyawgMB8GA1UdIwQY
MBaAFPfmeeWOS4v2PpUAK1S+Rx1jS5UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMt
YTFjNWQ3ZWI0YmQ3LzEvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMtYTFjNWQ3ZWI0YmQ3
LzEvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxfHD7HP
KGGceheei4ZaHnqnZYwNqxTaTrWd9zdukPI4bxiBd6EsWGUW6qFmq5vzXTICCPcF
MLzaBsWqyWOxU5phNnSLIrPoN3wqBEmuJTteUX7IHZoLWOoKYZ9d1vRtn99bvun8
Ot9zdQKNWhVOxoaqnBEBV+dR+jZICpN9ctCmh6jzTpP5/6AkoNE1P4bVqJyWPc2x
/Ia1MMFlFmaRuf/RYIvqi7Whb6fMn6hIFmBMwVkJeGHpoFjWvrqPZGU4c7O9pq9Y
vsSNiX9T2npIe0KeSgBfq/epbt+Wadlm2cqZmuMAgRe66BC0a6fm7Rf+dyd0droH
K+K6SppHCYAWdA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:57 2026 by rpki-client