This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier: PUdjlHRZXlu01lsR0SARDxJRKvLUUeIMOLlq0mXx6dU=
Subject key identifier: 41:A8:B7:15:20:B0:33:44:00:C9:54:D9:6C:4B:28:27:FA:B5:00:0C
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial: 019BF7D14A8380049621FA49EE78EBBA143C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number: 0DB2
Signing time: Mon 26 Jan 2026 01:00:46 +0000
Manifest this update: Mon 26 Jan 2026 01:00:46 +0000
Manifest next update: Tue 27 Jan 2026 01:00:46 +0000
Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: uWl4bNAIF/jUruFDQRARz17oGMLfS8prVrA4fHhrMF0=)
2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:d1:4a:83:80:04:96:21:fa:49:ee:78:eb:ba:14:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Validity
Not Before: Jan 26 01:00:46 2026 GMT
Not After : Jan 27 01:00:46 2026 GMT
Subject: CN=41a8b71520b0334400c954d96c4b2827fab5000c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:82:53:1d:7f:28:cc:e2:fb:07:21:2a:ca:
83:32:40:67:29:3e:25:05:5a:a1:d9:6e:39:c3:8a:
af:f3:d7:21:88:05:ac:ea:63:4c:7f:f0:64:ce:8e:
89:6a:e2:a0:9b:c2:4f:ed:90:af:fc:d9:08:e6:18:
a0:4b:70:61:86:18:71:19:11:5c:6d:09:1c:86:1f:
36:93:b4:9d:38:ef:92:4d:21:1e:0a:13:5a:74:0a:
43:ae:60:0d:f5:42:09:e7:2a:c3:fe:c2:fe:3f:2c:
1f:46:a6:99:dd:ec:97:b5:b8:d3:4b:6b:20:65:95:
5a:92:03:4e:4f:80:01:de:1e:31:dd:d8:2f:85:3c:
95:be:b5:41:36:25:9a:4e:b5:23:e5:f7:dc:1b:36:
33:11:a8:05:13:c3:d8:f3:25:d1:91:96:27:52:46:
16:cf:1c:9f:88:a1:ba:66:1e:be:84:58:ce:c5:8d:
9b:3a:9f:01:36:20:b6:79:f3:50:e0:1e:f6:02:09:
82:be:d1:cb:f1:a5:d0:fc:76:8f:9c:a4:aa:66:97:
d2:dd:45:c8:cd:bc:5c:6a:60:3f:b3:74:b6:9a:4d:
8b:0b:9b:35:b9:d8:25:f9:e2:09:7b:72:42:61:14:
bb:a5:d2:61:98:07:42:6f:7c:29:10:e6:41:a2:f8:
8b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A8:B7:15:20:B0:33:44:00:C9:54:D9:6C:4B:28:27:FA:B5:00:0C
X509v3 Authority Key Identifier:
keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:59:78:2b:4c:e9:5b:6c:53:37:4d:90:ac:95:8d:7c:0b:44:
f4:2e:95:a9:91:5a:c5:22:21:a8:c3:fe:6f:8e:d7:8d:85:3b:
75:98:80:67:38:04:cd:a5:11:33:81:f6:c0:86:82:d7:3f:90:
ea:4a:b4:4e:18:eb:8d:0c:86:90:ea:68:66:c6:21:c4:54:1b:
82:5c:c8:a6:4a:4d:e4:60:02:fd:9b:91:91:21:0e:02:49:a2:
bd:16:cf:53:38:41:73:74:c6:3d:50:86:6b:93:b4:52:b2:0a:
96:fe:63:40:73:51:0f:f2:47:ef:45:20:95:34:65:23:41:77:
1e:e1:6d:2d:9b:83:98:53:37:e3:7a:1a:e9:46:f5:3f:eb:40:
6a:0b:2d:ac:43:f7:b7:12:db:fd:4a:6f:56:7a:8e:50:97:5f:
61:f5:34:0e:17:7a:67:e5:16:b4:81:2e:a3:bb:2e:d2:fd:f7:
c1:3a:06:6c:77:ec:54:bc:77:ee:40:02:20:e0:54:b2:16:30:
aa:2c:60:96:77:6b:6b:35:ab:09:b3:ad:9d:15:82:e4:aa:d2:
5a:9e:3a:36:49:42:b0:b3:b3:cf:fc:ba:a5:2a:d3:8d:fb:00:
47:66:48:81:6f:be:04:a4:b6:a5:a3:e6:03:14:bb:26:9a:72:
6a:14:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:39 2026 by rpki-client