This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier: ubXTwi5ojwyFi81saaQl8VHwlIVMUnabq3Ph/ZBvjI0=
Subject key identifier: 46:E8:30:53:CD:43:C0:14:96:C7:10:4B:85:6C:C4:70:72:CB:92:42
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 019BFE77F8DBA1C2E2998191B506590D0CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number: 15E1
Signing time: Tue 27 Jan 2026 08:00:33 +0000
Manifest this update: Tue 27 Jan 2026 08:00:33 +0000
Manifest next update: Wed 28 Jan 2026 08:00:33 +0000
Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: XH3DMIU5fE258yuMTnfQeUUtZj8EWleaf/2sVrqdig4=)
2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:77:f8:db:a1:c2:e2:99:81:91:b5:06:59:0d:0c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 27 08:00:33 2026 GMT
Not After : Jan 28 08:00:33 2026 GMT
Subject: CN=46e83053cd43c01496c7104b856cc47072cb9242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:b1:8b:b4:73:fd:87:b7:49:df:14:e4:ce:
73:16:33:64:9b:66:42:f9:5f:93:e1:6b:7a:d5:3b:
28:a3:fa:35:30:c3:42:49:4c:37:ab:c7:55:f3:19:
7e:fa:4a:b7:75:df:ee:99:01:be:55:36:c1:e4:71:
ab:be:3f:34:e8:dc:b0:5b:53:b3:7b:cb:08:ff:b4:
87:91:c7:15:9a:c0:8f:0f:30:73:4c:fb:44:55:76:
32:8a:f2:a7:63:62:a4:bf:09:aa:ab:31:80:e7:20:
cb:6e:38:65:d0:08:2d:df:3a:6f:cf:b5:96:c0:52:
87:87:90:09:ac:e6:cf:d1:24:ec:ee:38:82:50:19:
9e:1e:8a:b0:80:54:c0:98:fd:55:e4:c7:1c:f8:23:
c4:58:ea:ba:a3:47:83:62:af:15:8b:eb:82:72:cb:
50:b9:48:a7:ea:ef:aa:ab:b5:de:52:13:b3:e8:2d:
d3:96:a5:c5:c8:84:89:f4:a4:6e:4b:c2:0c:04:18:
75:92:37:81:9e:c1:bd:59:14:55:0a:b7:02:94:26:
9e:56:85:4f:d0:cb:31:aa:22:d6:00:6e:01:c4:a6:
2f:fb:84:47:bc:1f:b9:85:b9:8b:9c:5d:c9:38:83:
16:e5:cc:ea:fb:30:ba:33:da:dc:89:e5:2c:55:00:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E8:30:53:CD:43:C0:14:96:C7:10:4B:85:6C:C4:70:72:CB:92:42
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:1b:cd:04:1c:d2:20:0e:c4:d1:06:09:ad:83:29:48:80:
4d:26:52:c9:08:ec:7c:b8:8b:e2:55:0c:d4:2c:aa:97:1c:c0:
bb:74:4f:11:31:7b:28:28:34:0f:84:ba:55:d3:1f:ff:66:a5:
1d:ee:d5:2e:a5:b2:86:c5:d8:76:12:0a:ce:54:2d:2f:76:d8:
6a:73:3e:e6:2a:d8:58:82:9b:d4:d4:16:4c:4f:30:d3:ea:22:
c0:bc:f5:be:95:73:d7:be:7e:bf:e5:5c:06:6e:5a:54:fd:34:
23:68:0e:4a:34:8e:b7:bb:32:63:91:6c:45:61:ee:09:41:11:
a1:04:2e:f1:91:0d:7e:82:58:b8:ad:04:50:ba:aa:64:8e:93:
ed:6e:bb:c6:81:cd:67:3e:9c:eb:ea:14:ec:8a:e7:ea:a2:5c:
ff:d0:cf:a6:fe:5f:c5:88:35:52:33:e9:68:7c:ad:33:8b:09:
c4:a3:13:37:30:96:79:5e:bb:e9:f6:5c:f7:a2:1a:15:d7:c2:
e9:92:82:85:ac:eb:55:85:75:6e:17:1d:b5:db:b4:b2:64:91:
3f:16:8b:b6:80:34:ea:14:3f:b9:70:1c:48:bc:ab:e1:4d:fa:
53:06:1f:58:cb:33:11:c6:30:b6:a6:37:fb:0d:58:13:c8:2b:
c5:a4:54:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:02:44 2026 by rpki-client