This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
File: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json)
Hash identifier: tK5vnN9zv3C8O3TPcQ8fo1Fwuo8g346rsbKf09I2WeM=
Subject key identifier: 15:B4:5F:70:8E:88:B7:63:74:42:DF:EE:9F:59:00:DE:E6:A9:CC:E5
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial: 019BFA9B4030F8FCD1A11C446513861DE776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
Manifest number: 1292
Signing time: Mon 26 Jan 2026 14:00:37 +0000
Manifest this update: Mon 26 Jan 2026 14:00:37 +0000
Manifest next update: Tue 27 Jan 2026 14:00:37 +0000
Files and hashes: 1: GfskLOZoVhgQg_wzxEm8GfZcHM4.roa (hash: ofrsA1DT7Aku9raL2XzjxdFLHd4Z33+79Febk9dotIQ=)
2: L_HXYmOHhoM2YRE97tQgr7r3-SI.roa (hash: FgKVtJ0H+q1J3xzFBhPOLkROSf4gdoaYW3BrXLNdbVA=)
3: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: ZSGaMAg8ZfktKNmDW8XjbihgNEve8UghsZACet0/YQg=)
4: YFarakxWfFYCLAQp5ljHgqOhWAE.roa (hash: RE/+b+N1gEHRcglkBMv26yH60CrY4s//QKu/NgO0inU=)
5: ikavjZ5f6GJawA563R9lfvFF_yw.roa (hash: xj6NjfSn9z5nQZs/dmQKm0hr04bNYyjHHm+s3X5QLbI=)
6: qQfpp7t9DK9V6gL_8q23BxXNnRw.roa (hash: lJumWK87pFOc6ZFcfXBZ+TluPfr8swJRdJzi3gOyHEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9b:40:30:f8:fc:d1:a1:1c:44:65:13:86:1d:e7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Validity
Not Before: Jan 26 14:00:37 2026 GMT
Not After : Jan 27 14:00:37 2026 GMT
Subject: CN=15b45f708e88b7637442dfee9f5900dee6a9cce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:24:46:39:43:4f:4b:e0:df:43:80:25:c5:
b2:cd:58:5e:ef:9d:4b:b8:ef:32:a2:ef:b2:09:ce:
06:26:83:d3:78:77:c9:80:3d:89:80:ac:86:44:d1:
60:31:07:68:08:d9:25:18:b0:0f:91:ee:8b:d3:e7:
51:46:7f:e4:20:74:d4:f7:ba:d3:a7:b1:c6:e8:e2:
14:58:1c:aa:3e:6a:b7:70:ad:ca:a2:bc:0b:9f:34:
94:24:68:fa:4c:69:ad:80:d9:90:b2:31:87:8a:cf:
ac:78:9f:55:19:ce:dc:4a:59:55:04:93:df:bb:5f:
24:c0:99:0f:84:df:31:ed:46:65:37:a3:f3:8b:b4:
18:63:d8:9e:cc:9e:73:90:9b:f6:4e:c5:ae:96:aa:
3e:8a:25:02:32:92:90:0b:2e:4a:90:c7:1d:d4:5e:
cf:86:4f:9b:29:e4:5d:90:0f:64:04:81:7f:76:cc:
e6:8b:15:81:5a:7f:b1:54:1a:31:1c:a0:f4:b7:bd:
8e:1d:c2:9c:7a:25:be:9f:b1:51:ff:92:91:2e:83:
92:f4:97:7b:c7:35:53:c8:87:1a:13:f9:08:d1:3c:
03:64:77:30:ed:76:b2:84:1b:92:95:60:fd:fa:8e:
1b:31:54:e7:2b:09:cf:d4:2d:bb:98:24:83:8d:0c:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B4:5F:70:8E:88:B7:63:74:42:DF:EE:9F:59:00:DE:E6:A9:CC:E5
X509v3 Authority Key Identifier:
keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e7:91:61:03:9d:d7:b3:b9:68:10:4b:54:14:5c:d7:5e:a9:
8c:1d:46:b0:f5:39:16:2f:5d:cd:10:23:6d:c1:69:59:05:a2:
39:7e:36:ee:80:e7:dc:4b:eb:21:82:5b:72:d4:47:21:e6:06:
de:cd:ed:d5:b1:5f:4d:2b:56:93:60:9b:fb:3d:6d:08:6b:42:
0d:5d:ef:79:0c:3f:bc:4c:63:80:9c:d0:7c:87:41:54:69:ca:
68:10:81:eb:96:d7:48:d4:b5:77:80:fe:69:21:96:74:20:c4:
a7:fb:c4:1f:3f:9a:56:93:f2:60:37:2c:8b:22:6a:59:67:3c:
a8:2f:44:ef:54:33:1b:06:85:d7:0c:49:0f:e3:29:a3:ae:84:
ca:bd:2b:60:4e:5d:4a:e2:ea:49:43:68:c6:31:9e:f7:48:1c:
5c:80:00:39:c8:0d:cd:d9:68:84:98:ab:a2:b0:fe:61:c0:9a:
ae:19:57:5d:19:28:a5:44:07:ac:56:b7:e4:e3:99:a0:07:84:
ef:7c:27:73:a8:14:7a:f8:57:fa:df:60:4b:a8:45:ff:c8:60:
d8:fd:90:e9:cf:80:44:01:32:46:e3:d3:a8:15:ad:25:23:f7:
3f:17:2f:67:cc:0f:68:11:81:1f:e6:97:12:8b:08:3a:7d:4a:
93:88:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:53:39 2026 by rpki-client