This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: YGpYIEqAAl7OhrLGcImo8odTP77n8283/U5KIvaHNtE=
Subject key identifier: A1:F1:77:23:EF:12:31:30:55:35:25:95:BC:FC:86:CA:61:5A:45:B0
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 019BF350A48E1F48A35D1E27201F71FF9455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 1800
Signing time: Sun 25 Jan 2026 04:01:46 +0000
Manifest this update: Sun 25 Jan 2026 04:01:46 +0000
Manifest next update: Mon 26 Jan 2026 04:01:46 +0000
Files and hashes: 1: JC6b9AAY2rwkq1FORl5Abxr-m1w.roa (hash: TFvVsSvQ0TaMuOye+x7ZRV34hFmw1XW7pj5/x7K+d10=)
2: Sr2ilYThFqm2tCLjqx0SQiHp3gg.roa (hash: ZjkDiEE0NsiNSW23AbUw04cnOCc6rq224JzhXfjp1bc=)
3: c64_xwrokSnmr0o0Rxc1LXbWsks.roa (hash: D7VOIgGxMLMKLMuDjwZq55SJloCAKPMrVwWrZEo0Y/o=)
4: t23_omorbxNaeI1t-2_nVI-M9Bo.roa (hash: tkmuOhPWK63hgBOOCfU7J7aL82MJy/fu9mcuqv0UO0w=)
5: yTBqPRFUVfKdzLterimo113_dkQ.roa (hash: qNzAUGKwPF55HCrIzh2nSa4zmob6mdMkWCPw4jO7Mk4=)
6: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: ibbMeazrBTak0ANGorQq9NFdWPmddZ53MFwlieDKMbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:50:a4:8e:1f:48:a3:5d:1e:27:20:1f:71:ff:94:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Jan 25 04:01:46 2026 GMT
Not After : Jan 26 04:01:46 2026 GMT
Subject: CN=a1f17723ef12313055352595bcfc86ca615a45b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:ba:06:58:3d:bb:87:5b:92:a7:04:e9:dc:
4e:4b:bd:6b:17:32:a0:4c:12:8e:60:cd:36:cf:28:
45:cc:a2:a2:a0:dd:ba:da:de:7b:a4:f9:a9:65:8e:
dc:6b:25:5e:ad:bf:10:84:2f:f3:32:21:82:07:7a:
50:63:54:20:ce:9d:5b:d0:24:bf:e7:c0:93:b2:4d:
ff:6c:24:4a:b1:82:ad:b4:df:a3:15:73:6a:f0:0b:
6a:20:ce:fa:d2:34:c7:d7:83:8b:14:5a:7c:c4:e7:
01:47:72:ad:48:5f:b6:11:bf:5a:5f:71:bf:cf:e0:
9a:04:b1:a4:e6:34:ad:43:71:d2:e2:43:fe:80:0c:
80:71:66:86:52:81:55:42:17:e4:00:44:d0:03:29:
bf:b3:a4:b6:3e:00:00:0e:bc:26:e5:13:bb:d8:a2:
6c:05:52:3a:11:60:1a:69:d3:f3:a2:b8:86:b2:29:
98:1c:23:14:62:18:98:f7:5a:2a:6b:41:bd:bb:05:
1e:6f:25:8e:71:1c:49:64:32:1f:66:e3:8a:2a:81:
40:10:9f:85:28:1c:af:01:b8:84:12:bb:e0:f5:bb:
db:c5:30:6f:e4:72:db:98:ea:f0:27:13:80:4b:5b:
4a:92:37:2a:59:2d:19:31:8f:ca:5b:3b:a4:d5:b5:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F1:77:23:EF:12:31:30:55:35:25:95:BC:FC:86:CA:61:5A:45:B0
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:21:aa:92:b9:93:b1:9f:3f:9b:22:6a:ed:d7:06:08:e3:aa:
65:c9:1a:62:3e:bb:d4:e8:8c:9f:53:a2:c5:96:50:a0:ac:1e:
5f:f7:af:c1:01:6a:28:70:6c:72:2d:6f:2f:90:71:dd:13:36:
59:44:fa:d1:d5:a9:c3:c1:9f:84:99:04:d0:c0:58:83:aa:86:
38:31:08:4c:e4:da:2d:a8:61:67:5e:7d:e1:c8:3a:0c:de:2b:
71:7b:f2:5b:00:68:93:8a:d8:89:b7:e1:69:0e:51:81:de:78:
f4:dc:76:e1:17:9e:c3:da:d8:77:14:8e:5d:59:23:7b:a6:d7:
3c:a1:96:20:db:57:c6:3d:6e:3c:54:e6:b9:df:12:b1:59:b4:
39:f0:a4:e3:fb:1c:a9:3d:e3:4b:7b:37:01:c0:92:8d:ef:ee:
b2:f5:29:c9:8b:6a:af:a8:59:0e:8f:02:0d:57:1e:2c:ab:ca:
99:58:f6:ea:eb:3e:2d:32:22:0c:00:31:53:43:68:7b:3a:f7:
73:15:58:08:58:84:68:5a:2d:39:82:6d:ba:ed:a1:b0:e8:93:
16:11:5b:08:d8:f0:d7:a3:54:14:a2:05:cf:7c:b6:d7:1d:dc:
f3:f2:6e:04:5f:a7:c0:e0:49:30:19:fc:06:b8:3d:99:e8:ee:
2e:7c:15:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUKSOH0ijXR4nIB9x/5RVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2
ZDE0MTcwHhcNMjYwMTI1MDQwMTQ2WhcNMjYwMTI2MDQwMTQ2WjAzMTEwLwYDVQQD
EyhhMWYxNzcyM2VmMTIzMTMwNTUzNTI1OTViY2ZjODZjYTYxNWE0NWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDa6Blg9u4dbkqcE6dxOS71rFzKg
TBKOYM02zyhFzKKioN262t57pPmpZY7cayVerb8QhC/zMiGCB3pQY1Qgzp1b0CS/
58CTsk3/bCRKsYKttN+jFXNq8AtqIM760jTH14OLFFp8xOcBR3KtSF+2Eb9aX3G/
z+CaBLGk5jStQ3HS4kP+gAyAcWaGUoFVQhfkAETQAym/s6S2PgAADrwm5RO72KJs
BVI6EWAaadPzoriGsimYHCMUYhiY91oqa0G9uwUebyWOcRxJZDIfZuOKKoFAEJ+F
KByvAbiEErvg9bvbxTBv5HLbmOrwJxOAS1tKkjcqWS0ZMY/KWzuk1bUKaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHxdyPvEjEwVTUllbz8hsphWkWwMB8GA1UdIwQY
MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt
MjIzNzQyZWU0Mzc1LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1
LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCGqkrmT
sZ8/myJq7dcGCOOqZckaYj671OiMn1OixZZQoKweX/evwQFqKHBsci1vL5Bx3RM2
WUT60dWpw8GfhJkE0MBYg6qGODEITOTaLahhZ1594cg6DN4rcXvyWwBok4rYibfh
aQ5Rgd549Nx24Reew9rYdxSOXVkje6bXPKGWINtXxj1uPFTmud8SsVm0OfCk4/sc
qT3jS3s3AcCSje/usvUpyYtqr6hZDo8CDVceLKvKmVj26us+LTIiDAAxU0Noezr3
cxVYCFiEaFotOYJtuu2hsOiTFhFbCNjw16NUFKIFz3y21x3c8/JuBF+nwOBJMBn8
Brg9mejuLnwVmA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:44 2026 by rpki-client