This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: H0PwV7OiTrHQdPrcBYNs05GlbjQQkj/O5sdj6YkTOwg=
Subject key identifier: 93:C7:E6:74:22:09:4D:3C:B0:E9:B5:BF:E8:1C:DF:D3:E2:E1:94:3C
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 019BF5ABF078F69B3CC45475AD6C59F421BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 08B8
Signing time: Sun 25 Jan 2026 15:00:44 +0000
Manifest this update: Sun 25 Jan 2026 15:00:44 +0000
Manifest next update: Mon 26 Jan 2026 15:00:44 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: BQihArDg1yWPZZZjohiBm2UuZ8QVB08WQh16gcasqdQ=)
2: XFAB8dGfZx_QXDK6Kld_xwViMJw.roa (hash: H6Sf/b3mZ3PIXiHfD9wOVIrsUeA+yHGGwcGYDodBCc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ab:f0:78:f6:9b:3c:c4:54:75:ad:6c:59:f4:21:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Jan 25 15:00:44 2026 GMT
Not After : Jan 26 15:00:44 2026 GMT
Subject: CN=93c7e67422094d3cb0e9b5bfe81cdfd3e2e1943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:40:0d:c5:84:8a:47:01:5e:05:92:5e:79:
72:89:f2:fd:02:8a:68:9b:e7:33:42:1e:82:1a:2e:
c2:16:03:ac:84:cd:cf:97:ba:fb:5e:20:1d:db:d6:
69:1d:b8:f3:89:95:20:92:ae:c9:7b:5f:d3:1f:6e:
5a:a2:70:6a:0a:03:12:2f:28:66:c9:68:a8:8a:d2:
e7:e9:88:84:e3:d3:d9:14:8c:84:e7:b0:c0:37:12:
15:7a:5e:c1:41:c2:a7:06:76:ab:4e:88:6e:7e:0a:
4e:b3:21:20:9d:4d:d9:17:34:38:73:ac:e9:e6:f6:
3d:ff:04:6e:fb:b4:a5:94:29:ee:e0:b2:e9:8c:09:
08:64:71:63:7d:48:fb:46:4b:49:b3:bc:60:4e:f0:
0b:f5:85:5f:ac:86:ea:98:0e:9a:41:76:66:78:39:
64:6e:1b:68:2d:d5:7e:a5:d5:e8:ec:09:56:40:7b:
0a:47:ac:89:4a:0f:92:13:63:d9:53:cf:d0:a1:91:
2f:69:42:6d:3e:e9:65:24:1a:a3:81:5f:ea:e3:83:
b1:44:8a:15:6b:a5:cf:f1:2d:74:cb:dc:a8:18:90:
09:fe:99:60:b9:ce:74:f8:cb:b1:8d:8b:b9:32:71:
29:33:58:bc:59:8d:f8:4e:04:3e:75:c0:d6:8d:24:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C7:E6:74:22:09:4D:3C:B0:E9:B5:BF:E8:1C:DF:D3:E2:E1:94:3C
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:01:aa:20:b4:10:4f:44:c3:f4:06:58:18:44:9c:a3:21:fc:
4f:6b:a8:26:a1:d5:e9:72:2c:37:d6:fd:c1:a7:b5:8a:60:d2:
50:08:c9:02:1e:2c:e5:9f:e8:69:60:3c:dd:2c:15:80:2a:46:
92:d8:5d:8c:05:24:ae:e3:77:4b:0a:61:cb:f4:bf:3b:24:0c:
5c:5d:18:a2:12:35:48:84:35:8e:c3:ad:39:01:fc:a6:ae:01:
7e:83:86:bf:c1:e7:dc:69:d0:b3:c4:97:ff:74:36:42:51:92:
26:2f:4b:25:41:ac:42:5c:3f:02:05:5a:3f:27:c1:ca:4b:51:
37:2d:41:a5:ea:4d:ed:03:7c:4a:07:6c:24:aa:ca:7f:63:c8:
00:d7:68:42:fc:d1:20:dc:42:29:d2:ad:92:91:fb:91:64:f5:
6c:29:6b:9a:18:d6:ef:08:0d:a3:2d:07:01:bc:18:62:0e:51:
a0:67:95:4b:58:39:03:dd:2d:8d:07:f9:db:01:64:50:3b:c5:
cf:86:8e:c4:cf:b3:82:cd:05:b6:e7:66:c1:c0:9f:24:39:4d:
98:b5:f0:d1:f3:39:8e:08:f6:91:ea:37:ae:f7:28:00:91:4e:
3b:85:68:9b:8c:df:95:7d:f6:a0:e9:96:31:36:3d:8b:db:3e:
d8:e7:45:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:16 2026 by rpki-client