This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier: X1sa5sjHdmJexEUfJut8VdOBj5BQA2ys0rS2cZ1ltcA=
Subject key identifier: 5F:F5:03:38:26:A3:A1:1C:A4:52:E1:C6:09:20:EF:45:52:1D:FE:50
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 019BF79A8C168B50C7EAA095BA63D11D70B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number: 1124
Signing time: Mon 26 Jan 2026 00:00:59 +0000
Manifest this update: Mon 26 Jan 2026 00:00:59 +0000
Manifest next update: Tue 27 Jan 2026 00:00:59 +0000
Files and hashes: 1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: foPfhLLCeuLolm4T3uOsyeFPlXipSHYiVBMUFUA119E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:9a:8c:16:8b:50:c7:ea:a0:95:ba:63:d1:1d:70:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jan 26 00:00:59 2026 GMT
Not After : Jan 27 00:00:59 2026 GMT
Subject: CN=5ff5033826a3a11ca452e1c60920ef45521dfe50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:ac:d2:81:97:86:ad:00:f9:59:99:d9:d8:
6b:40:ac:36:ff:9d:5b:da:b6:0d:e0:68:5c:8d:75:
73:0f:12:c0:f4:c1:c7:a2:3f:1c:dc:4f:32:d4:6c:
a5:e7:a0:92:d7:c0:49:5e:13:f6:b4:4e:3c:fe:76:
42:5d:ec:08:8d:ad:ec:f5:7e:d3:ca:22:e5:77:2c:
d6:00:74:d6:e4:4e:5d:57:6f:c0:c9:1f:3c:ba:0b:
5e:1c:98:0c:54:a7:29:17:2c:01:d0:89:22:0b:e4:
f2:b4:ac:13:7f:44:b3:1f:11:9d:8c:76:31:32:50:
73:28:ae:c4:52:21:f3:65:4b:db:ff:82:d7:8a:f9:
8f:a7:f5:5b:a1:c0:0a:5f:45:eb:2f:e7:18:20:24:
5f:1d:f3:b1:c9:ce:87:4a:dc:2d:2a:a7:76:e8:41:
70:e7:1c:e2:65:e2:45:f5:ce:bb:6e:48:a1:ce:99:
0f:79:ca:72:44:67:e6:03:af:1f:b5:f5:2b:78:ff:
73:ba:65:ad:49:78:cf:df:46:23:b7:09:0f:4c:ce:
a2:51:b2:63:f2:3c:8e:9d:7a:99:da:a4:3b:e6:a2:
0b:ba:71:6f:6d:dd:90:be:9a:5c:ce:a6:46:47:fc:
14:61:62:f7:9a:62:74:07:0e:29:cb:3b:4b:d6:55:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F5:03:38:26:A3:A1:1C:A4:52:E1:C6:09:20:EF:45:52:1D:FE:50
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:26:10:7c:47:fd:34:2b:44:c3:fb:77:6a:07:10:94:56:84:
69:2d:62:98:77:b6:4a:19:01:c4:fd:45:06:29:fb:9a:ad:71:
9d:d9:14:1a:7d:23:81:f6:e4:6f:72:6f:95:70:4f:b1:89:35:
fc:61:b0:d6:0a:f7:17:cb:21:6a:c4:8d:c0:30:fe:58:04:4d:
b9:b8:25:83:ef:8e:19:fc:fc:53:5e:23:6f:b1:c4:44:c1:c7:
07:c0:92:15:db:f9:5c:2a:7d:cf:3d:7b:21:bc:2b:3b:61:72:
c4:0b:89:47:45:a2:48:4d:80:6c:bd:d5:d5:0e:64:59:8f:6b:
6b:81:24:ee:8d:27:71:e3:be:a4:e3:16:77:f2:9c:58:e1:fb:
49:77:e5:c5:af:9d:bc:84:e7:7c:de:80:34:16:74:26:2c:4f:
f7:68:fe:eb:4c:aa:44:80:84:d5:f8:6c:e4:72:57:23:15:0a:
7d:74:83:3d:1a:e9:af:39:a6:c8:83:00:50:fd:80:32:99:7e:
e3:47:35:2c:0a:06:8d:59:ce:30:9d:06:1c:d7:42:54:23:da:
f0:54:b5:d7:9a:ce:e2:78:05:c4:cb:ad:d7:f9:16:17:a2:9f:
ff:de:ea:3e:2c:79:dc:75:55:38:6c:0a:00:ab:5c:ee:94:b1:
41:1b:8f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:24 2026 by rpki-client