This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
File: v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json)
Hash identifier: z36iPVkiuaS1oPResr5UEHjMI6439Bk/t+3bY8/5oIA=
Subject key identifier: 01:C7:B0:4B:FD:4A:0C:0E:F2:64:BD:35:63:ED:BB:A2:6E:65:82:BC
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 019BF46302289FAAC2003E447B32C696D446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
Manifest number: 17E6
Signing time: Sun 25 Jan 2026 09:01:27 +0000
Manifest this update: Sun 25 Jan 2026 09:01:27 +0000
Manifest next update: Mon 26 Jan 2026 09:01:27 +0000
Files and hashes: 1: Ey3eMMmVsv8up-2fV-u6O1dJx5w.roa (hash: wOF8J5G3VP32rTAaqndoYJUfHTg8IW6zwflvdI+uR/k=)
2: Gd_0u-E4q9GONdfRaDKJ22IlGoo.roa (hash: mo3MnUSjRXBRpf8WeDxv+8kqnyR/lvZN6eWOjKlJpmo=)
3: M2RriBLwk53BN_AgCVd-87noYms.roa (hash: LGroozM/G0ZhsOHB60KVI0lNgNMs6ZKBbzNIOIHAESU=)
4: YFcnRl_M05t459VMCerZuYb9XrE.roa (hash: 5ScuBPIRAl8lb3NflfakLxZuKrrPxH5eDtW2uHK/6TE=)
5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: xVGmkAnpAVdl9DGBQhpM7VpFa0C8eEQl6vxYj8/Rv7Y=)
6: zmgz5RIVTXxCjLUGHC57LPwTTL8.roa (hash: xA1x3FAZvSwLZpJ7ksojvpjV1O0X4GhOLfsswPY/tiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:63:02:28:9f:aa:c2:00:3e:44:7b:32:c6:96:d4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Jan 25 09:01:27 2026 GMT
Not After : Jan 26 09:01:27 2026 GMT
Subject: CN=01c7b04bfd4a0c0ef264bd3563edbba26e6582bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:b0:37:c2:a5:74:5a:2d:8a:fc:6f:c2:57:
44:09:ff:9d:95:86:24:5e:12:fa:cd:f9:42:98:c8:
c5:b9:be:c4:e1:cf:d2:08:66:f3:39:50:46:76:da:
89:48:42:b6:51:54:f9:36:ff:50:cc:d5:4c:19:4a:
92:24:9f:51:64:1d:db:fa:f6:6e:04:09:df:23:cf:
6a:53:1f:9b:67:4a:f6:d0:a7:37:35:dd:52:3f:f0:
a7:93:df:dd:af:55:1d:5b:c7:26:4b:91:c4:8f:ee:
9a:37:ff:16:0f:e1:36:3c:96:c9:50:0b:4c:57:e7:
51:84:c7:2b:53:23:42:20:3f:b6:08:8c:ed:54:15:
37:78:85:c8:13:05:5a:80:98:f7:9c:2f:57:69:28:
31:f5:94:b6:29:c2:f5:14:21:fb:76:25:08:e5:71:
01:da:6c:c7:9f:dc:94:43:17:78:3c:99:5e:27:b8:
a9:2f:bc:58:be:59:b7:02:16:5d:ad:15:c1:84:5d:
04:44:4b:8b:0e:6c:f1:1b:51:1f:ae:73:bf:a7:6c:
e4:23:cc:9a:b1:00:c8:fc:52:d9:b9:c3:42:74:e5:
5e:4b:6b:8f:3d:4c:7b:04:cc:f2:12:d3:29:27:11:
0a:e0:37:99:54:1b:ea:86:c7:16:74:3d:95:1f:ed:
f4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C7:B0:4B:FD:4A:0C:0E:F2:64:BD:35:63:ED:BB:A2:6E:65:82:BC
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:91:7a:31:55:67:44:07:65:84:8e:6e:96:32:0f:19:06:a0:
bd:9b:67:cc:45:0f:51:8b:5f:51:60:2f:be:b3:1c:9f:88:70:
cf:4b:d5:95:f9:b3:8a:98:40:0d:96:59:68:71:84:78:87:33:
9d:a6:e5:a4:66:5a:29:bc:ce:f5:87:14:5a:66:48:e2:4f:93:
92:50:25:6f:86:66:f5:fe:cd:6e:f5:eb:42:0e:50:5c:c9:15:
3c:92:1f:5c:bc:cf:d3:92:18:33:ce:80:e8:04:8f:19:16:69:
57:3f:f5:68:1c:5a:39:14:3d:db:51:b0:77:ec:d7:c8:ca:f7:
fc:47:52:2e:46:1a:47:ea:0d:bd:8d:d8:05:33:84:60:42:bc:
68:dc:8a:b8:42:db:3d:e1:1d:01:f5:09:e4:ed:02:5f:14:13:
81:ee:ec:6b:a9:69:88:1a:be:09:37:c0:fc:2d:fd:fe:4f:ce:
e8:9c:5b:37:93:d4:f5:88:8c:a3:69:8d:29:80:cd:d0:73:d8:
39:89:22:6c:b1:22:5f:e3:35:56:d8:5c:76:76:a9:fc:1b:af:
8c:65:e7:27:33:a4:46:7d:f6:e6:ce:76:e3:5f:51:d8:5b:40:
ca:f0:88:2d:67:f2:b1:25:49:e8:22:39:cd:ec:d2:ed:2d:d4:
d2:d3:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:30 2026 by rpki-client