This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier: Y1z47rCVUVcCnzpWc3VCnlZoVNnJJp5KaFGDXhbm2W4=
Subject key identifier: 85:71:91:CD:7B:BB:C5:00:27:3E:0C:95:7F:2E:0F:F9:56:3F:71:EB
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial: 019BF763CA3A59262693B76C8BA67D4F00DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number: 0D43
Signing time: Sun 25 Jan 2026 23:01:10 +0000
Manifest this update: Sun 25 Jan 2026 23:01:10 +0000
Manifest next update: Mon 26 Jan 2026 23:01:10 +0000
Files and hashes: 1: RRtfB43pqBCM6OCwQmvlGxGMPl0.roa (hash: LR6JcqCChdanxUEAC+gj24/t+Ng0ZaCy6iSBjwr0kN4=)
2: RosKSFL_tFtQ89bX-qHP5zLu6m0.roa (hash: I4juV9hPvK9S7lanhjFS1ERPjUkTsd9rdm1n5n9GOHM=)
3: fUgeR2nF_pXWNWV55rMg8WE-3cA.roa (hash: tWjY+UnVt+eeOEtvKdASRIS/bltLwSGhZ5m+5B8PJGo=)
4: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: qzVF0nISVZ/t19+7a2fU75sDzGLWKl6kzfcOY/Y7Xwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:63:ca:3a:59:26:26:93:b7:6c:8b:a6:7d:4f:00:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
Validity
Not Before: Jan 25 23:01:10 2026 GMT
Not After : Jan 26 23:01:10 2026 GMT
Subject: CN=857191cd7bbbc500273e0c957f2e0ff9563f71eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:67:25:6b:d4:d5:77:28:13:71:a1:09:58:
76:fc:4f:a4:c2:0a:b2:56:3a:05:a2:bc:e4:e5:0f:
76:a5:33:43:0f:2f:57:94:43:3f:0f:23:5a:51:a0:
28:ca:03:bf:47:bb:1e:71:eb:99:5f:64:a5:b4:6e:
16:85:db:88:6c:c4:c0:55:18:ac:c1:54:b6:40:06:
49:19:42:cc:21:9b:f3:cc:e4:61:53:51:78:89:10:
db:b9:1a:c1:88:84:4f:7f:39:c6:67:34:27:4e:7f:
dd:1a:33:20:cb:de:bb:94:12:50:86:3c:58:7e:aa:
5d:67:28:82:21:8d:14:67:02:5d:f0:61:64:d2:4f:
ab:e3:34:4d:39:d8:05:9b:2b:fe:c6:1a:02:32:ab:
6c:6d:a6:fb:e8:37:15:00:6f:9a:56:60:b9:6b:03:
20:b1:f7:0c:08:03:99:17:14:e1:98:d5:69:9a:3d:
d1:08:63:67:3a:8a:36:fc:2e:2a:ee:a2:c5:e7:66:
4b:49:ea:d0:31:55:b4:26:db:1c:62:a4:d0:34:ba:
4b:69:a2:82:f0:35:d1:67:03:9c:b7:39:ef:8d:85:
7f:ea:a7:56:e9:bf:f1:7a:d0:75:77:a4:fb:f5:24:
0e:54:f3:38:a8:70:7c:d3:93:3b:70:f8:4f:de:93:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:71:91:CD:7B:BB:C5:00:27:3E:0C:95:7F:2E:0F:F9:56:3F:71:EB
X509v3 Authority Key Identifier:
keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:45:90:21:6b:aa:c6:01:20:a3:56:96:7f:9c:c9:c7:3c:48:
57:f3:59:c4:c2:96:d2:1c:30:2b:77:a2:ed:1d:f5:2c:7c:e2:
86:e2:9e:7d:47:28:48:22:ba:7a:e6:c4:c0:68:8a:98:69:6e:
07:e1:bd:b3:5d:e8:9f:eb:11:59:0b:bd:a7:28:90:cf:56:33:
73:40:94:76:ac:ed:27:9b:4f:de:e7:09:69:ef:b3:2c:c4:97:
4e:bb:66:05:88:14:8b:ff:de:92:6b:92:3b:e1:71:87:a3:ad:
8e:4e:5a:d2:a5:34:a3:d9:35:49:02:46:2e:d1:77:f8:e3:2c:
95:2e:2d:bf:fa:c3:2d:87:88:3b:b7:72:a3:62:36:c9:1a:2a:
c0:8c:cf:3d:ec:26:25:02:3d:64:60:2f:63:b5:bc:d5:79:7a:
74:d4:36:48:de:20:88:3d:7c:c9:0b:fe:79:17:55:52:2c:31:
fc:12:a7:50:e0:dd:17:54:45:c5:18:a7:a1:1c:8a:3d:7d:18:
32:76:03:a6:03:9c:ad:c9:58:41:0a:26:d4:b5:d8:5d:b5:f7:
6a:9c:89:91:34:5a:be:be:02:24:d5:55:8a:b1:9a:a6:fa:ac:
34:06:8b:67:d8:8b:b3:f3:61:ed:75:70:39:54:25:8f:d8:83:
d8:c8:44:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:11:35 2026 by rpki-client