This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: Au5M0vCqjJ15iOm1amwcmDQW0lYWrk5IZo8ff8rONlk=
Subject key identifier: AF:7A:2C:21:E0:38:C7:BC:59:D8:5E:1B:62:CF:5D:57:D1:44:83:B9
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019BB1396C1A868AE8811F8358FEB9B8A487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 15B9
Signing time: Mon 12 Jan 2026 08:01:29 +0000
Manifest this update: Mon 12 Jan 2026 08:01:29 +0000
Manifest next update: Tue 13 Jan 2026 08:01:29 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: OHd0+wzm8VENU8MCOPp9maKXs7iDzwseZtLDNgCYvdg=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Jan 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:b1:39:6c:1a:86:8a:e8:81:1f:83:58:fe:b9:b8:a4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 12 08:01:29 2026 GMT
Not After : Jan 13 08:01:29 2026 GMT
Subject: CN=af7a2c21e038c7bc59d85e1b62cf5d57d14483b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:6c:5f:52:c2:0f:a9:c2:ca:52:c9:a3:c4:
e5:12:c9:63:01:ef:aa:df:73:b3:18:13:95:3a:8b:
d2:ed:8f:a6:b9:ae:7e:15:c6:25:0f:40:1f:11:ea:
18:3e:90:30:0e:cb:81:b7:2a:2c:ea:01:6e:a6:a0:
fe:a5:e0:f4:28:e1:a9:f8:8f:72:fe:29:2d:b2:c7:
4c:e0:e8:47:de:75:ae:03:1a:c8:ea:b5:e4:01:24:
ff:e8:12:39:6a:25:5c:00:3c:b6:46:c4:1b:0a:bb:
42:79:15:20:c8:dc:e3:00:b2:e2:89:41:67:fb:f1:
09:d7:8e:9b:1b:cd:ff:57:ed:74:c7:98:8e:f5:2c:
8b:74:02:33:af:6e:6d:c6:3a:33:8f:10:45:7b:c8:
24:d0:08:8a:42:17:d5:cd:39:03:26:79:e7:d5:44:
4a:89:0e:9e:58:5a:64:d8:55:31:f9:4b:b8:d8:73:
3f:ea:39:9c:6d:40:fd:17:82:bb:ec:10:12:da:90:
18:60:d5:99:b2:19:bd:92:80:1e:a4:74:5f:a9:e5:
dc:7c:fa:81:1a:88:d4:5e:83:21:06:74:6e:f1:a1:
ce:68:41:40:e3:d1:0b:d6:45:73:30:a6:9f:10:e5:
30:8e:af:7d:59:67:6a:f2:09:90:f0:32:a5:4e:4d:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:2C:21:E0:38:C7:BC:59:D8:5E:1B:62:CF:5D:57:D1:44:83:B9
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d9:29:aa:83:f3:25:38:8e:50:3d:e5:ed:00:00:08:a7:d0:
51:49:cf:24:e3:45:b9:68:34:4f:a4:1f:47:de:fb:3d:8e:ea:
ad:af:7d:70:9e:1b:1e:dd:95:35:f2:be:ac:49:2f:af:23:f4:
82:df:bf:9c:c2:33:cb:54:7b:eb:47:e3:97:da:e2:26:8d:2f:
38:f8:0a:60:38:95:a6:0b:44:c4:a2:4c:26:35:1d:7a:96:22:
33:18:78:a8:cd:45:06:13:2c:08:08:58:77:4a:73:9e:64:0d:
e4:7d:be:ba:30:f2:bb:79:2b:f1:53:ae:39:bb:ad:88:ab:47:
c0:56:31:0c:40:db:99:e1:ce:3a:53:8a:ec:09:ad:d7:7b:4b:
d0:d4:e1:61:03:f2:12:69:68:70:3f:c7:2c:a3:9a:ff:aa:cc:
43:c8:7d:c0:a0:27:31:16:0c:5a:31:e5:04:d1:2e:bb:a4:75:
a9:99:e8:f5:ba:c1:b4:11:63:70:e1:b2:df:9d:fe:6d:c1:ca:
20:d1:af:e6:e1:d9:58:b3:ec:03:20:58:6d:85:e8:3e:28:ed:
ff:85:10:81:d5:a2:b8:8c:f4:96:7d:17:90:30:05:60:18:38:
e5:6c:d1:2f:a9:59:e7:e6:d0:4c:42:df:da:44:cb:d5:5b:27:
9a:63:18:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuxOWwahorogR+DWP65uKSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjYwMTEyMDgwMTI5WhcNMjYwMTEzMDgwMTI5WjAzMTEwLwYDVQQD
EyhhZjdhMmMyMWUwMzhjN2JjNTlkODVlMWI2MmNmNWQ1N2QxNDQ4M2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx9sX1LCD6nCylLJo8TlEsljAe+q
33OzGBOVOovS7Y+mua5+FcYlD0AfEeoYPpAwDsuBtyos6gFupqD+peD0KOGp+I9y
/iktssdM4OhH3nWuAxrI6rXkAST/6BI5aiVcADy2RsQbCrtCeRUgyNzjALLiiUFn
+/EJ146bG83/V+10x5iO9SyLdAIzr25txjozjxBFe8gk0AiKQhfVzTkDJnnn1URK
iQ6eWFpk2FUx+Uu42HM/6jmcbUD9F4K77BAS2pAYYNWZshm9koAepHRfqeXcfPqB
GojUXoMhBnRu8aHOaEFA49EL1kVzMKafEOUwjq99WWdq8gmQ8DKlTk03MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK96LCHgOMe8WdheG2LPXVfRRIO5MB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9kpqoPz
JTiOUD3l7QAACKfQUUnPJONFuWg0T6QfR977PY7qra99cJ4bHt2VNfK+rEkvryP0
gt+/nMIzy1R760fjl9riJo0vOPgKYDiVpgtExKJMJjUdepYiMxh4qM1FBhMsCAhY
d0pznmQN5H2+ujDyu3kr8VOuObutiKtHwFYxDEDbmeHOOlOK7Amt13tL0NThYQPy
EmlocD/HLKOa/6rMQ8h9wKAnMRYMWjHlBNEuu6R1qZno9brBtBFjcOGy353+bcHK
INGv5uHZWLPsAyBYbYXoPijt/4UQgdWiuIz0ln0XkDAFYBg45WzRL6lZ5+bQTELf
2kTL1VsnmmMYTQ==
-----END CERTIFICATE-----
Generated at Mon Jan 12 10:18:56 2026 by rpki-client