This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File: iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier: A74UzM4b2oFjDYc8BqqWNkUGyMuGA9ogZsimTRFm7eA=
Subject key identifier: 2C:79:E9:9B:E7:2B:AD:D9:E9:BD:4F:59:6C:EA:E1:14:93:62:68:0F
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 019B9E8DE9681EC02640F3CD6AEF9257924A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number: 14DE
Signing time: Thu 08 Jan 2026 17:00:59 +0000
Manifest this update: Thu 08 Jan 2026 17:00:59 +0000
Manifest next update: Fri 09 Jan 2026 17:00:59 +0000
Files and hashes: 1: DoG1nIvAyF6Ofk7B7oBXD9fCbWY.roa (hash: 9biYSv6POYCwfleLHgkM4hjjkLE1P6h07qcPCt2vZ8Q=)
2: Ku186Y-Tu0woDCZbFinpqq7ZdFE.roa (hash: v4Tz8TXIdty6/ZjbJ1ivX2W0EU7wX33Cwf/C7mVCK74=)
3: _yFrTYVVOzem6SAvOPOzP_wE_MM.roa (hash: 5prdT05UIi7fhKfl8B0EiaHRzoodJuHLB7r7onONbos=)
4: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: i79zO1yCuyA5GuaP0KbcTTP3OLiwYSZmErgzhLQNtk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Jan 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:9e:8d:e9:68:1e:c0:26:40:f3:cd:6a:ef:92:57:92:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Jan 8 17:00:59 2026 GMT
Not After : Jan 9 17:00:59 2026 GMT
Subject: CN=2c79e99be72badd9e9bd4f596ceae1149362680f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:ce:8d:45:0c:f3:ee:85:fd:76:97:8c:82:
86:f1:b5:c8:0a:d5:d7:3b:d8:d3:9b:f9:a0:cd:fc:
a4:28:69:30:94:b0:c7:6c:53:85:89:b2:87:5b:9b:
34:64:42:94:cf:c9:af:fe:ec:d0:24:0b:d0:9e:f6:
27:b4:a9:b5:06:d2:c8:09:c1:3c:58:9c:ff:da:c6:
69:34:c8:55:47:7a:e1:2d:06:d5:e4:91:e8:08:e4:
07:84:8a:fb:3e:22:1c:5f:34:0a:58:c6:fe:41:4d:
7f:bf:f9:45:2b:50:84:7a:a9:77:e1:fc:53:5f:28:
40:49:02:af:c6:24:ae:7d:a5:94:b5:51:c9:d3:9a:
5e:24:f3:7a:6e:37:a9:d2:03:80:f6:0c:8c:14:3f:
8b:fa:8c:20:be:68:21:bf:cd:cc:67:f6:bb:ba:9d:
78:4b:48:23:39:86:5d:92:da:87:f0:10:61:1e:32:
6e:f5:37:f1:5c:0d:af:a9:0f:58:c1:8e:4d:19:e6:
bb:54:2e:10:27:20:31:4f:30:89:98:b5:b8:3d:dc:
92:6c:f4:3b:09:02:3e:09:5e:9e:eb:e2:96:44:a1:
22:2d:0c:01:87:09:db:46:4c:34:14:cd:3e:3d:a3:
d4:fe:f4:84:33:5a:55:f7:81:ef:5d:6c:82:26:f4:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:79:E9:9B:E7:2B:AD:D9:E9:BD:4F:59:6C:EA:E1:14:93:62:68:0F
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d5:44:0f:18:15:9f:4f:64:50:30:ac:5b:5b:44:98:e4:79:
f5:84:6f:e1:b7:31:1e:da:69:6a:42:f1:b3:63:5a:c7:cd:80:
dd:84:41:d5:45:da:fa:5e:95:d6:00:81:62:58:35:7c:a8:13:
ef:15:c7:07:4c:7b:e3:e3:e4:73:07:a2:24:e0:21:e0:aa:b8:
50:bf:a4:82:9b:01:52:3f:44:a1:17:62:2b:5b:36:08:52:ef:
af:08:1e:e2:61:4b:e3:6e:7a:6d:d9:8c:e5:ec:16:ab:a2:3c:
d0:93:d5:0b:31:81:e0:8d:dc:d5:33:0a:73:43:0e:71:06:ba:
da:57:f2:50:0c:5d:f9:7b:17:6a:c0:cd:f3:2e:ab:28:a3:29:
ae:04:49:27:e0:8d:a9:57:0a:d9:3b:d1:2e:34:70:ba:a8:3e:
0e:2c:88:41:b0:74:db:7d:cd:33:0c:bc:13:ed:26:d2:a7:16:
3c:ac:e0:94:be:7f:48:8a:a7:fa:83:30:d3:9c:de:10:74:de:
15:6c:a5:a1:2c:ab:40:32:e0:f9:ee:5c:a0:52:15:cf:bd:e8:
b8:82:3f:86:01:b2:0d:09:83:98:80:02:b2:ae:7b:5f:51:88:
59:ad:46:99:95:bc:ca:32:c1:59:15:51:ff:57:08:f7:cd:17:
7a:c6:8d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 01:35:34 2026 by rpki-client