This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier: rgXpWjVavyilce+3h/hkzXkwQBSVdsTnsWKlha7HeOA=
Subject key identifier: 70:87:6B:10:9A:C3:73:C0:8C:1D:93:68:D2:C3:9D:82:70:E6:2C:BA
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019BF6F59AEAF4866B574393EB8DC4A9F3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number: 0232
Signing time: Sun 25 Jan 2026 21:00:49 +0000
Manifest this update: Sun 25 Jan 2026 21:00:49 +0000
Manifest next update: Mon 26 Jan 2026 21:00:49 +0000
Files and hashes: 1: _nHQVX4gUfRcsyUXq5yHaGKdYhU.roa (hash: R3LVcKNvDMfvVqa7EK825MNQi2hSPcfWJhILpOzo+sU=)
2: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: MrNo6Zy2bdoKF0rRkdjCy2rXK72bWsaRLsDgKMaQoqw=)
3: yWPZuql0MvhSm3JMA1hMhAx0qW8.roa (hash: 2i2jlPPD7IE9jQ4n5YA8j4oeQ4N7jBY19i7lQ4cGyLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:f5:9a:ea:f4:86:6b:57:43:93:eb:8d:c4:a9:f3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Jan 25 21:00:49 2026 GMT
Not After : Jan 26 21:00:49 2026 GMT
Subject: CN=70876b109ac373c08c1d9368d2c39d8270e62cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:81:b3:52:0c:d3:ec:65:c2:d1:eb:fb:3d:
2f:20:c4:fe:cd:5e:50:20:13:1e:dd:04:00:59:a2:
6a:f4:33:df:05:9c:fd:b7:91:e5:44:b0:80:45:a2:
35:99:76:9e:48:be:02:f9:d3:7f:be:8a:17:66:1e:
26:6b:b3:ef:25:aa:73:63:6d:8a:3f:34:9f:a8:13:
1d:dd:ba:85:30:0f:a8:a6:e3:cb:b1:1b:cd:45:93:
48:88:65:ee:1f:d4:60:bf:6b:57:d3:19:92:89:1c:
01:3e:2f:c5:80:4f:b1:df:61:cd:a0:5b:e1:cf:5c:
fb:68:20:1b:a4:17:f9:6d:1c:72:33:cd:c4:e4:60:
f0:76:ef:ca:42:1c:d6:d8:17:5d:4d:71:d1:19:f8:
3b:6e:a5:ec:f7:e1:ad:cd:75:89:31:4c:23:b3:5d:
13:17:0b:45:ec:66:e3:9a:af:66:ea:91:c6:b5:29:
bb:0f:0f:57:ba:dc:1b:81:c9:06:36:80:d1:1e:99:
49:1f:b8:53:2e:34:0e:8a:e6:6a:da:1a:f3:55:0e:
7b:b1:7c:52:d6:fa:6a:2b:ee:ab:02:71:fa:6d:a6:
d8:b7:c7:6a:89:a7:49:70:16:95:e1:93:0f:78:15:
75:4a:c3:8f:97:30:a1:7b:dc:43:e5:e2:56:ca:ee:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:87:6B:10:9A:C3:73:C0:8C:1D:93:68:D2:C3:9D:82:70:E6:2C:BA
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b3:7a:94:64:00:04:cd:d8:16:84:bb:c8:db:fc:33:66:f5:
4b:e6:2e:8f:ef:b8:a7:9c:18:71:64:1a:ef:5f:06:d5:2a:b0:
57:55:d1:ff:32:29:02:ff:3c:a4:bf:c8:6d:06:e8:a3:1e:81:
8e:b4:61:4f:05:61:31:5a:42:c2:0c:8f:95:57:31:dc:b5:85:
49:e9:02:d2:4e:02:04:7b:4d:b6:66:0b:90:4f:6c:1f:6a:ea:
19:48:3e:dd:cf:e7:4e:e3:3c:18:c7:8d:af:f2:4c:ea:04:19:
df:dc:19:c9:25:85:58:b8:9d:c1:04:6e:3b:81:61:31:d2:b9:
76:f0:5f:12:84:59:d6:01:d8:fc:8c:30:9f:db:a8:85:90:55:
8a:85:3f:ea:2d:79:29:53:a3:22:72:30:e3:6e:4f:b8:43:24:
0d:e2:4c:f9:6c:bb:73:65:67:8d:cb:c6:6c:c9:ac:b4:c3:a9:
2f:c0:f3:68:bf:78:95:2a:65:b9:52:60:c7:2d:80:b1:d6:a3:
cb:94:0c:88:ca:02:04:b5:a4:7f:dd:02:4e:61:8e:ec:4a:bc:
13:dd:5f:1b:f5:f7:e6:3d:8c:10:9e:dd:d2:f5:ec:cb:90:9f:
a2:fc:6c:84:9c:29:7c:af:32:57:b0:12:3e:04:f1:82:21:10:
42:92:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:15:23 2026 by rpki-client