This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: BP4D5F1RB7ooRd4+EUB2wECXYKGhopo1sEuhzxhHHFk=
Subject key identifier: D6:F8:76:EF:DF:EF:7C:B3:21:2D:6B:A6:B2:50:94:02:06:F5:C2:A1
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 019BF79A431ACD0DADC115EE4ACFEB4FDBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 08B9
Signing time: Mon 26 Jan 2026 00:00:40 +0000
Manifest this update: Mon 26 Jan 2026 00:00:40 +0000
Manifest next update: Tue 27 Jan 2026 00:00:40 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: /bvoBJLub/10OvjY9iiypab6wZWUuoHMqDbsaQgXC0k=)
2: XFAB8dGfZx_QXDK6Kld_xwViMJw.roa (hash: H6Sf/b3mZ3PIXiHfD9wOVIrsUeA+yHGGwcGYDodBCc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:9a:43:1a:cd:0d:ad:c1:15:ee:4a:cf:eb:4f:db:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Jan 26 00:00:40 2026 GMT
Not After : Jan 27 00:00:40 2026 GMT
Subject: CN=d6f876efdfef7cb3212d6ba6b250940206f5c2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:4a:92:bb:f7:07:e5:46:ae:db:be:31:b5:
36:6f:e6:46:0d:2b:7f:cc:6a:77:25:50:40:8e:44:
0a:ef:8b:f3:53:81:b8:cd:9f:a5:82:9e:09:16:29:
c1:29:38:9f:a9:20:73:83:4a:bf:d7:cb:ce:0c:31:
d0:9f:1c:35:83:ea:65:d3:ee:c1:4f:60:ac:ed:41:
2f:18:45:41:36:27:9b:18:15:21:c4:f2:cb:5f:b6:
f7:40:ef:50:93:f2:22:73:e2:b4:aa:4b:13:42:91:
05:c2:28:9b:ad:ff:bf:b2:0a:c4:6a:23:35:c2:c0:
26:b1:8d:b1:f7:01:8c:57:2b:30:7d:46:bb:2c:e3:
29:6f:1a:2b:61:2f:29:40:8d:f6:19:68:35:a8:6d:
7a:f4:1b:49:5b:7a:e5:70:95:78:5c:ae:64:b5:0e:
a3:de:1e:b6:b3:ad:fb:06:d3:66:be:21:d7:55:cf:
cf:a3:95:41:b6:c8:98:3a:c2:82:a1:6e:ab:be:94:
06:c3:30:fb:ed:a2:3c:53:3d:2d:e3:12:2f:b2:3f:
88:d6:20:cf:9f:42:60:25:43:b8:29:fe:4c:8b:90:
e7:33:33:af:ca:46:d8:19:65:70:15:59:40:a8:7f:
76:18:42:cf:27:55:9d:f3:ad:3e:4e:ad:70:77:31:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F8:76:EF:DF:EF:7C:B3:21:2D:6B:A6:B2:50:94:02:06:F5:C2:A1
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e9:e1:bb:7b:ce:b3:1c:6c:8d:08:e5:a9:d3:a0:f3:d9:62:
0d:c6:51:9d:62:f0:58:fd:80:79:c1:a0:e5:05:3b:d7:d2:20:
48:b8:c3:5c:2b:52:a8:c4:0e:87:71:95:08:06:e9:6a:ee:37:
f9:b2:52:98:bf:ed:4d:d9:f5:dc:6c:ab:57:10:2b:d3:7c:70:
f3:05:9d:dc:e8:64:6b:a9:8a:20:e1:1d:ed:6f:fc:b4:f8:75:
3f:2a:2b:82:da:30:39:6c:ca:2e:8d:79:6e:33:2e:0e:87:e6:
30:dd:7a:0b:6c:77:2c:36:ee:fc:c0:f5:7b:a2:df:11:61:fc:
78:b3:57:3e:a0:7a:86:71:ce:f2:c8:85:0b:3c:5c:c9:9a:e0:
c1:5a:85:ec:78:b6:57:02:4d:a0:f3:b4:5f:db:ab:71:6a:b4:
de:dd:ef:af:22:79:c9:1f:8c:a0:2b:ff:44:1a:67:98:6c:0d:
2c:f7:7e:a2:0d:ab:2b:7f:58:4d:b1:76:57:ae:19:20:70:b9:
98:0d:1c:6d:b5:7b:fb:b6:dc:64:b1:7a:b7:30:f5:7e:b1:57:
e8:a7:39:d8:01:1b:4d:85:d6:a4:a2:bc:4f:cc:bf:2e:76:3d:
03:0c:ee:19:b7:a7:31:4a:b2:8a:1b:df:35:6d:aa:30:f9:38:
f7:4a:94:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3mkMazQ2twRXuSs/rT9u0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MTE4MGE3YzUxNjY3ZWMzODc1ZTc2NWYyNDVmOTA5Mzg2
MTI1NzEwHhcNMjYwMTI2MDAwMDQwWhcNMjYwMTI3MDAwMDQwWjAzMTEwLwYDVQQD
EyhkNmY4NzZlZmRmZWY3Y2IzMjEyZDZiYTZiMjUwOTQwMjA2ZjVjMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydJKkrv3B+VGrtu+MbU2b+ZGDSt/
zGp3JVBAjkQK74vzU4G4zZ+lgp4JFinBKTifqSBzg0q/18vODDHQnxw1g+pl0+7B
T2Cs7UEvGEVBNiebGBUhxPLLX7b3QO9Qk/Iic+K0qksTQpEFwiibrf+/sgrEaiM1
wsAmsY2x9wGMVyswfUa7LOMpbxorYS8pQI32GWg1qG169BtJW3rlcJV4XK5ktQ6j
3h62s637BtNmviHXVc/Po5VBtsiYOsKCoW6rvpQGwzD77aI8Uz0t4xIvsj+I1iDP
n0JgJUO4Kf5Mi5DnMzOvykbYGWVwFVlAqH92GELPJ1Wd860+Tq1wdzGEpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNb4du/f73yzIS1rprJQlAIG9cKhMB8GA1UdIwQY
MBaAFPQRgKfFFmfsOHXnZfJF+Qk4YSVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZDZmZGQtNmQ0MS00MTI1LThiYjUt
OGYzMmQwMzE5NGIwLzEvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZDZmZGQtNmQ0MS00MTI1LThiYjUtOGYzMmQwMzE5NGIw
LzEvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVenhu3vO
sxxsjQjlqdOg89liDcZRnWLwWP2AecGg5QU719IgSLjDXCtSqMQOh3GVCAbpau43
+bJSmL/tTdn13GyrVxAr03xw8wWd3Ohka6mKIOEd7W/8tPh1PyorgtowOWzKLo15
bjMuDofmMN16C2x3LDbu/MD1e6LfEWH8eLNXPqB6hnHO8siFCzxcyZrgwVqF7Hi2
VwJNoPO0X9urcWq03t3vryJ5yR+MoCv/RBpnmGwNLPd+og2rK39YTbF2V64ZIHC5
mA0cbbV7+7bcZLF6tzD1frFX6Kc52AEbTYXWpKK8T8y/LnY9AwzuGbenMUqyihvf
NW2qMPk490qUUA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:59 2026 by rpki-client