This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
File: s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json)
Hash identifier: jVOVpyyY7pMkjAdVtD8sNdHSsoOGznFHKGDxhyr50M0=
Subject key identifier: 1D:F5:15:D5:FE:D3:3B:CA:9D:64:2F:EE:53:E3:A7:B9:17:44:25:FC
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 019BFA2DB2A8E6BE34C377F41E045F1081CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
Manifest number: 180D
Signing time: Mon 26 Jan 2026 12:00:57 +0000
Manifest this update: Mon 26 Jan 2026 12:00:57 +0000
Manifest next update: Tue 27 Jan 2026 12:00:57 +0000
Files and hashes: 1: 3qg1KGc8omoslEG7jKlx4gx_LhQ.roa (hash: TnGs+EX2f9uQeebTem+/sfQFkc/zmqJQ5dURkVKi/n4=)
2: 6GTkHhvGaHh_ppvgJMPn5q-SDT4.roa (hash: zOLVYqNLZkRsHu25N50zDbPPg1XzLp1BrOsPiOu+9z8=)
3: 6JxXQsPP5HeOd-zrinJyzOvxbvk.roa (hash: avnYdM5iKLHNYRmn2VZGG+0Rulxb30BrgSNse/s1Stw=)
4: Lm2Fdw-4HY59cWTBR1AYmOLC0Mk.roa (hash: SNGqheW6LsNlSg4kHxkvmFfi6Fzh2bEiE379f5CYZNA=)
5: N18aROBQ19Wj6Kdi3-iQ5c6OfeA.roa (hash: ezUkbSC7P3mO/d4z+5YndvD9aLmtqZ6KOctd3R4dOws=)
6: OUOP2IJYsVbNI_PTNHQ12RVMoDI.roa (hash: BnGONzncD2wwl5KKt6nDn2hcjBqGU1Umy1qq2TndNLU=)
7: X5qhIZ7xGCMvKQfZQrbeuOZ9uf8.roa (hash: i3DUL5+61b/Yr3dFWew0V6gv0s7RuSUIeTUfltYEFJs=)
8: Zjh5y2Kd8cSRzdszQnign9Lz3l4.roa (hash: TMEeISdGQlH/KULrec6oWy2p2scTUrKdaSvlMRJx3eE=)
9: davP__FvqtFRD-X_NqiEFhhBbv0.roa (hash: 4RXC3pzMOtisG7APBmg+7ubBijArd9IpJUc7sUhKN2U=)
10: g-q-xyU0r6niX_HcUqMnHfOWVQg.roa (hash: 3EYAH+TPHIG5maEa02mmMDsDD6AUBoN3T8wtoxwbwEg=)
11: iO24D_W0B1UjBwRFlQ8CdPgIqgs.roa (hash: VKTFC+1OrvrVs+DP4mHHKFLGZKyqteGaSW/b1eEAqMs=)
12: jytqbvPB7p4L3yG-M73X311CEZM.roa (hash: OoChTy3t+Ypl0/yoHt/yN9OFfFbQL1CiSDqOkSSFy9Y=)
13: qzIbIOdweY6pocYgDw-BYpuwt2k.roa (hash: RCGDZNml0heHLSfAzhIyGN2imnWRjKRBHXZrfhyhHtA=)
14: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: /wS1yMhdRWjVibEcFcX6K0w/Flw/k46ceLywjMIVLw0=)
15: x3SzmyzLt8OYyGIP7YYKzeSx1t0.roa (hash: aW1SwGzhZKDv9vTg+ztGzAN+MHGjx+qNx1xNIM7zvvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:2d:b2:a8:e6:be:34:c3:77:f4:1e:04:5f:10:81:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 26 12:00:57 2026 GMT
Not After : Jan 27 12:00:57 2026 GMT
Subject: CN=1df515d5fed33bca9d642fee53e3a7b9174425fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:a9:35:64:7b:6f:9c:94:df:c7:ee:75:41:
b3:8f:05:bb:61:59:44:2c:4a:e9:bf:5a:68:51:6a:
8f:02:fc:a3:77:87:4b:ff:1c:4e:81:50:de:e5:9e:
0a:ec:56:47:85:64:ba:47:56:51:a1:05:6f:aa:73:
ed:09:54:71:3a:98:20:d0:f9:81:37:6f:4d:e1:2e:
09:44:c7:45:8c:ea:9d:b8:8d:d7:fc:11:4e:17:67:
eb:ba:b5:0c:22:57:e9:c3:5a:7a:e4:15:90:14:f7:
b7:27:ce:88:68:72:a7:7a:dc:11:92:ce:8b:55:a3:
6c:48:a5:b0:ad:da:2c:88:89:41:82:02:00:3e:f9:
33:c6:ba:ca:05:d6:3e:9b:0b:f6:50:fd:09:10:72:
c3:db:e5:2d:2b:ee:9b:64:a0:9c:6a:c3:b0:57:07:
8b:4c:35:43:c7:ef:9b:11:fc:50:db:93:8a:34:9c:
22:54:ea:18:b1:cf:33:1a:d4:2a:d2:11:51:30:63:
76:e1:2d:68:d8:c8:c2:02:9d:87:52:34:0e:98:6e:
19:02:a3:06:a5:01:43:09:12:34:91:9e:de:2d:3d:
0c:48:c8:06:87:1f:a5:7f:17:8c:15:8e:68:73:67:
ef:80:a7:fe:d7:22:cb:cb:a0:7a:05:af:92:86:07:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F5:15:D5:FE:D3:3B:CA:9D:64:2F:EE:53:E3:A7:B9:17:44:25:FC
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d5:c8:1c:fe:72:28:1e:65:7f:78:cd:36:e8:df:97:c9:e3:
0e:9f:2f:d6:55:47:63:ef:6d:8c:2c:4f:f8:06:1f:37:56:d8:
85:07:3c:cc:d7:ab:22:65:c5:cb:fb:6e:ec:60:7d:da:5d:7f:
a8:1b:a7:70:40:4d:e7:93:9a:11:f1:15:67:2f:7e:1f:0c:a1:
d7:23:49:18:cd:ac:43:a3:c2:d3:6e:1a:16:7a:65:49:d5:ee:
0f:24:53:c0:9f:7c:07:b0:2f:25:89:bc:4a:f9:e2:82:26:d3:
bf:18:b6:66:67:0d:3a:e2:fb:79:ad:dd:9c:4c:05:7b:77:e1:
47:de:20:cc:4d:19:05:f7:e8:ff:66:a9:d7:e7:bc:d7:db:86:
bb:b7:05:2a:e1:d6:4f:97:e5:31:e1:ad:dd:12:7e:db:c4:da:
1a:09:07:fe:ab:e5:96:3a:23:2c:07:68:6b:17:34:94:70:30:
a7:a1:41:7a:92:0b:c0:c7:90:ac:50:94:86:35:0c:6d:82:16:
1c:3b:a0:1c:32:d0:62:bb:cc:d8:ff:9c:0a:e7:ed:e7:c8:25:
59:af:bf:06:3d:e3:a5:fc:51:36:04:9b:9d:8b:d5:f2:06:43:
71:37:38:3b:54:10:aa:c0:75:7d:48:48:4f:a7:21:a9:ba:8e:
e9:c2:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:52:36 2026 by rpki-client