This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier: iOQG3txpwt3HtSYCjZSahkJR3ZHrufSXwAZmD4CJXWo=
Subject key identifier: 68:8D:DE:E9:45:9E:23:A7:70:35:F6:B9:B2:8B:2A:90:E2:D7:B9:53
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 019BF8ADD481D7061AE7EEE39C9E25C36A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number: 17FA
Signing time: Mon 26 Jan 2026 05:01:40 +0000
Manifest this update: Mon 26 Jan 2026 05:01:40 +0000
Manifest next update: Tue 27 Jan 2026 05:01:40 +0000
Files and hashes: 1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: jwfVqPEDbLwXcLXz4x20KNT6/yuuW61ce3wl7NDt2JM=)
2: U5Hr7DVltimNN4exYtKNMwjtw8w.roa (hash: a1GYmzluOFIdh7d+x71WU9ozZYGhuTpIQod/AeGpY6Y=)
3: pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa (hash: fiAhIReHkKJDspHClaY6l1S5vNnjpZ4eQPqh1G/RGnQ=)
4: shwoCz68cKqwcN5qi3XrzWkO2xo.roa (hash: vsl5wyUpfTDJC2irw4CHdq3XYydWiX8/t9r4NWlOM68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:ad:d4:81:d7:06:1a:e7:ee:e3:9c:9e:25:c3:6a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Jan 26 05:01:40 2026 GMT
Not After : Jan 27 05:01:40 2026 GMT
Subject: CN=688ddee9459e23a77035f6b9b28b2a90e2d7b953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:e2:de:3d:12:3f:f5:63:85:38:72:7b:a8:
f2:24:39:67:7f:d6:11:e3:c8:1c:42:d0:de:9b:99:
59:2c:92:2f:e8:ba:92:02:e7:d3:a8:6c:d7:47:19:
dd:02:9c:4f:da:9e:05:0e:40:4b:b8:e1:73:1d:70:
4f:88:f8:21:ad:c6:52:f3:85:35:50:47:7a:ed:59:
33:bf:44:42:f1:cf:44:a7:43:ac:4a:46:ab:0d:07:
33:44:a4:d5:cf:1e:bb:bc:21:e1:4f:6d:84:11:8c:
b6:f2:07:13:d5:65:8d:e2:75:4c:b7:91:8b:74:7c:
6d:24:a2:43:b7:40:bd:0d:9f:02:7f:21:3f:64:f3:
93:08:b0:bc:c9:6f:79:ff:6c:66:31:24:b4:2c:39:
6a:a1:97:2b:23:b6:68:d7:f3:a6:bf:99:de:c7:3e:
50:50:5a:94:5d:a7:6e:94:8a:36:0d:15:90:ed:2c:
e1:57:a3:83:60:8d:06:b6:f2:05:70:12:59:e1:4c:
63:dd:31:fc:94:fc:a2:93:17:74:26:8f:34:74:3c:
97:d6:50:8a:05:82:f9:c4:05:fc:cf:c1:36:d1:05:
95:1c:a0:6f:6e:bf:b6:73:1f:5e:9a:3b:a6:e6:d9:
50:aa:68:36:e2:3e:eb:22:ff:7c:a3:ef:bf:83:91:
e3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8D:DE:E9:45:9E:23:A7:70:35:F6:B9:B2:8B:2A:90:E2:D7:B9:53
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5d:05:f1:0c:ae:c2:01:3e:4c:d4:7b:74:14:c7:21:0b:bb:
65:94:b5:0c:5a:83:a9:f4:10:67:88:ca:4f:08:85:d6:91:a7:
4a:be:86:42:12:ef:50:54:91:c7:0d:d6:06:3b:26:c0:a3:ca:
00:09:bb:f5:f9:4d:89:21:4a:be:e0:5b:94:3b:a7:ce:58:99:
bf:d2:bb:3a:6a:2e:c4:1a:dc:da:f2:82:e3:9c:d5:ad:20:74:
3a:5b:6a:35:92:8b:f9:33:88:59:1f:4c:1a:2d:9c:f8:f3:0a:
a9:bd:33:3c:93:75:8d:9b:e4:28:3f:56:5e:37:28:5e:98:22:
1f:cf:b6:1c:9d:a1:1d:59:06:25:43:1a:86:55:6d:4a:c4:30:
fa:b5:8d:ee:9c:1c:dd:13:88:05:a7:ff:57:41:97:3b:f7:a5:
ef:8b:60:46:86:e8:40:3d:79:c9:b2:f2:fc:eb:b3:06:3f:66:
3c:ca:9a:24:48:11:66:ab:75:65:43:9b:3a:13:71:a7:a4:a0:
6a:aa:07:38:a7:9b:8b:d0:32:21:9e:a4:35:b2:44:a6:a9:85:
d9:23:94:f0:4c:b4:91:8c:22:0d:8d:69:76:69:4d:42:23:31:
bf:75:4f:7d:ea:9b:56:d2:e8:36:88:90:a8:dd:0a:f6:b4:0a:
3e:f9:78:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:16 2026 by rpki-client