This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File: B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier: I44Hd1QDG34HIWLEBVizsmrnPDX6+KNrJ30o9Fjyt/M=
Subject key identifier: 35:AA:C9:D3:58:F8:2F:30:E3:90:78:5C:B5:33:3F:FB:3B:5F:48:01
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial: 019BF5075533F83E40B1D84791C0130A58B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 12:00:57 +0000
Manifest this update: Sun 25 Jan 2026 12:00:57 +0000
Manifest next update: Mon 26 Jan 2026 12:00:57 +0000
Files and hashes: 1: 5NepKsibkXxq0cC5aAvvP_8JjP4.roa (hash: 7HOC7sGZGamyWKAmcPUs1h2P6lOKJ+z20+QYh7rUkew=)
2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: TrQ9QVtwRBNbMM40bYF+chADdOlujRuK7YQ7v51OJzQ=)
3: PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa (hash: M6ZYD9tQnpCFir5Cu0FNk295lOfSt9eoRIH1690apck=)
4: VGYXm9SrAnPQDO4KzyfYQTctcKE.roa (hash: t6wWWjbtPwKCRrEiQDaW7hfJLS6tTVFXTMhhJiW17DM=)
5: ecvQXZ3AprCLKejnaTOVVFlxHok.roa (hash: UJHUQBi7HS/efD3FVZTiVWpdVXwILbRze3oIm83qHnA=)
6: h1mEZ62DMm3uuyaJJJmPKB4-m6s.roa (hash: AOIevC2x+LRQ++ZcMrIM2D+bhkF+aQN4GCC5pvrUkG0=)
7: k_NknFuW4fn4bDMEidouhfOP4yE.roa (hash: /QvV9YqG7NdPkIkhFC2G0RzWP2PLlZH/17cSaHRPmK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:55:33:f8:3e:40:b1:d8:47:91:c0:13:0a:58:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
Validity
Not Before: Jan 25 12:00:57 2026 GMT
Not After : Jan 26 12:00:57 2026 GMT
Subject: CN=35aac9d358f82f30e390785cb5333ffb3b5f4801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:19:86:0f:d7:81:4f:d0:f2:9b:b8:6d:38:
c1:81:5b:ca:62:f5:7a:f8:7c:7f:0a:ad:cc:ee:e2:
d7:6c:9a:0d:41:9d:a9:83:37:45:b3:e4:85:b3:09:
fa:46:69:ff:c5:2c:f9:a6:a7:e8:5f:f1:a0:cd:47:
62:a4:94:e9:85:9d:0b:75:18:b7:5c:66:b8:1b:18:
76:fa:c1:e3:fa:45:44:35:a2:37:ed:b3:7e:76:78:
72:b3:ce:61:ef:88:39:3f:ce:3c:aa:19:b9:f3:00:
20:58:28:73:cc:e6:1c:3c:21:8a:50:03:71:fe:22:
f4:2c:17:1c:5d:42:78:9b:b0:91:d5:06:1d:dd:2b:
f3:8e:05:fc:5b:80:60:5c:4e:41:88:d9:f3:f6:69:
05:a9:30:3b:53:58:36:50:3b:74:17:4b:7f:5e:f6:
89:c4:45:b5:38:99:c7:f2:6e:6c:e4:9b:bb:9b:68:
5d:17:ab:0f:6f:94:01:90:7b:fe:fa:0e:19:96:97:
1f:fa:94:21:cc:aa:53:de:41:6b:bf:50:7b:4c:0f:
c0:e2:b6:67:50:1c:bf:9e:e9:fc:4f:ec:a1:8a:82:
1c:fa:7e:e2:40:48:3a:b7:d2:7b:24:33:94:51:e3:
75:f8:9e:ef:ee:f4:e0:1b:84:fb:6a:dd:c6:58:dc:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:C9:D3:58:F8:2F:30:E3:90:78:5C:B5:33:3F:FB:3B:5F:48:01
X509v3 Authority Key Identifier:
keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f0:96:5a:4d:d9:9d:92:ed:d8:80:af:bc:b0:97:31:4e:67:
72:c7:92:7b:d6:26:34:92:50:14:89:45:8e:87:67:f1:9f:c5:
5a:09:e4:bb:70:e2:2c:9a:60:df:4f:79:6c:18:ae:82:a9:d3:
22:ac:b2:a4:3b:f6:55:44:42:2d:3f:25:f9:de:a6:4b:00:66:
e7:b5:26:5b:93:31:75:8d:2d:90:24:d2:e6:53:b6:94:3c:28:
1f:a7:14:54:b9:7d:0a:61:85:9c:90:20:a4:3b:48:c3:ea:72:
43:31:11:4c:5f:d8:63:e5:14:d3:76:c5:ce:b8:7b:db:bd:00:
99:2f:e9:10:31:59:5b:c2:92:79:3f:19:e7:b3:81:11:ad:ae:
d4:f4:6b:2b:1c:e1:0e:3b:0b:07:fc:af:22:6e:28:a1:60:80:
c9:05:02:7a:f9:86:2a:8b:ed:1f:61:86:6f:9c:c3:42:93:d9:
3d:4c:e9:06:de:72:02:5b:27:5c:15:71:0b:96:4e:61:ee:14:
e7:7a:4e:0c:e4:19:7d:93:34:9c:61:c3:23:76:e0:ef:59:df:
35:a4:86:9f:48:ec:63:94:93:47:e2:6e:25:5a:64:5c:3d:70:
16:50:27:1d:8b:0f:63:76:72:f5:8e:48:0c:73:82:dd:27:4f:
50:c1:05:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:18 2026 by rpki-client