This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier: 6JZMw/p1+7Do64c6eqWcGNpQopWylo71Epre3zg4Qqg=
Subject key identifier: AD:10:B6:18:AD:1D:70:05:AC:FA:1E:C2:F9:A2:EC:86:4E:FD:38:47
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 019BF53DDFD68959725E9E9860901FC478C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number: 187D
Signing time: Sun 25 Jan 2026 13:00:31 +0000
Manifest this update: Sun 25 Jan 2026 13:00:31 +0000
Manifest next update: Mon 26 Jan 2026 13:00:31 +0000
Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
2: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
3: 9QOoNpd76OPVl49TOCbIH5K-Xuc.roa (hash: iHslUv59RlEtWqhiDG50P5ptUXczZiGq5UnFqrvblIU=)
4: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: ybLQzH9skUfzf3Ay+qDZLSELyUTmROyCoSlq5P1XRes=)
5: OdMVWui-4Jljx26VrFQSjyDGRvo.roa (hash: UGyO9OR6VyOa56rqgYNKLWL4KF44h+tsmx4bpi6i9tw=)
6: Xlo2dAjL9Nrixz0iYa0SAY5SYBc.roa (hash: Bg+pB+Sxi3uvjFsg12Ez9WbynlaVnSIe2mie+DFh+2c=)
7: ih0mxzFH0MUiJNPNZCziaJJuGMU.roa (hash: Xd9Xc8lt28a42B6a+zDM/Y1fYiUSVn12an9g9QH+NKk=)
8: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
9: zxibd_f4xg8XI9jjPajufCcwE7M.roa (hash: jbQlcexgvpGqLA0AUXCsjYkFmJ4wQU/giRIaoZA7v/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3d:df:d6:89:59:72:5e:9e:98:60:90:1f:c4:78:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 25 13:00:31 2026 GMT
Not After : Jan 26 13:00:31 2026 GMT
Subject: CN=ad10b618ad1d7005acfa1ec2f9a2ec864efd3847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:ad:d3:14:90:cb:8a:51:92:0c:c8:51:54:
26:71:9f:30:49:0a:de:b8:34:d7:00:2f:87:d7:55:
ff:d0:90:1a:b0:56:ce:a3:bc:82:c0:92:75:67:df:
de:df:77:42:d7:9a:21:29:ae:d8:ba:75:81:47:e4:
1d:ca:36:2d:d6:fc:be:b2:1c:d4:4b:5b:4d:28:93:
a0:33:45:f7:e4:81:98:71:88:3d:06:4d:10:cc:ae:
a2:60:af:8c:ae:23:04:9f:da:2c:b2:5c:be:b5:17:
58:e8:5d:7d:1d:c1:f7:6f:a4:42:e9:d0:b8:4e:8d:
2c:e5:01:80:76:ca:34:15:26:e9:1d:d1:17:76:86:
6a:a2:b6:d4:ad:84:5e:50:70:a5:9d:ba:1d:c6:b2:
43:62:54:96:aa:3f:42:2e:52:e1:63:39:07:75:27:
84:85:5d:c6:5b:e0:03:50:95:5e:04:f9:e2:60:dd:
73:8f:e9:c6:8c:7b:f8:52:c6:d5:b0:9a:52:20:dd:
59:f2:cf:aa:b6:61:1f:81:92:f8:d7:e9:0f:63:09:
15:3a:3a:66:c5:f9:84:76:e4:15:6a:3c:08:09:73:
7e:d3:34:17:0d:70:5c:8c:8a:10:7f:43:d0:14:22:
4f:82:22:5a:1b:8b:3a:6e:d3:48:1e:e7:2c:c5:0d:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:B6:18:AD:1D:70:05:AC:FA:1E:C2:F9:A2:EC:86:4E:FD:38:47
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5f:7d:e9:36:bf:7f:d9:43:ca:c6:a1:1b:42:a9:c6:16:97:
55:17:98:dc:ab:27:03:13:98:be:94:4d:00:06:57:bc:2e:e5:
be:3a:c2:4a:9b:55:7f:dc:d3:a0:16:4f:9a:5e:39:a6:a2:36:
01:a4:d8:99:86:58:56:de:4b:cc:74:18:b0:9d:26:cb:b6:43:
e6:50:16:1d:73:21:3c:4d:f9:a4:81:e7:fc:70:9b:69:71:b0:
4c:15:e4:6d:9e:4a:8f:e6:0f:1e:54:33:32:c4:02:e6:e2:0b:
6a:67:6a:00:01:9a:fa:07:fd:86:50:4d:45:29:41:36:e7:f0:
1c:05:70:6b:d7:29:66:fa:02:d4:5d:2a:fd:28:d2:f9:e1:95:
fd:e8:b9:ba:df:e4:f8:d2:a1:9e:f6:bd:d9:21:72:82:18:34:
f3:34:47:d7:5b:a3:36:e7:d4:9b:0b:d2:b5:40:4e:20:f8:16:
61:6f:a0:fa:1e:f7:8d:b6:03:48:92:71:0f:b8:0d:d2:7c:53:
d9:ba:f2:55:3b:ab:ae:d7:18:c8:bb:43:54:f4:c9:2a:bb:31:
47:4e:fe:83:da:83:73:64:1e:ec:aa:67:e4:60:09:b4:2b:29:
25:3e:ad:4f:ab:39:46:1c:68:d5:aa:c6:7f:7a:a5:fd:9b:9d:
f0:34:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:01 2026 by rpki-client