This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: OBrr9jCLmCcZ9klq+ZugpWN6D9BLFRsxBkTSaR35SJo=
Subject key identifier: BF:6F:34:D8:08:A9:FC:81:67:DA:BE:03:C9:97:0E:7F:70:AA:9C:7C
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 019BFB0A3729E44C6E5A27C5BB1EE2BDF62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 17F1
Signing time: Mon 26 Jan 2026 16:01:48 +0000
Manifest this update: Mon 26 Jan 2026 16:01:48 +0000
Manifest next update: Tue 27 Jan 2026 16:01:48 +0000
Files and hashes: 1: T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa (hash: tcM1/9+Y0ysaMgq7228hAfu0hiNGpyhSmSnmef1IcbQ=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: 3VtdarUD8BWSx+UiTW7are09RMI0BD1EgHIS5Tvi1R8=)
3: uAlfyOgC6lACz_fQjNh5oktGozY.roa (hash: AyHxXbtccjqD9qYxj8NhKDHPVrcTXTiY5Ov+6QmBFbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:0a:37:29:e4:4c:6e:5a:27:c5:bb:1e:e2:bd:f6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Jan 26 16:01:48 2026 GMT
Not After : Jan 27 16:01:48 2026 GMT
Subject: CN=bf6f34d808a9fc8167dabe03c9970e7f70aa9c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:4e:49:77:20:f2:d2:18:d0:81:b1:4e:40:
3b:00:66:2d:15:4b:86:63:f7:82:36:ba:61:6f:93:
5b:33:a6:59:85:2c:fb:aa:05:32:23:79:15:6f:dc:
b6:cf:f0:44:69:10:20:a7:39:83:b8:2b:53:70:ff:
11:15:51:24:9a:ce:1e:ad:24:07:4f:d8:41:33:8a:
4f:86:e0:1f:b3:c2:81:48:54:fd:39:0a:f4:6a:1d:
3a:5d:a6:1f:73:ef:d5:65:98:3a:50:8b:08:3c:93:
bf:d2:91:cf:7c:d3:87:65:f7:1c:1a:a9:02:54:9b:
58:87:d8:9c:ac:af:f3:47:ed:ac:b3:b3:1a:c3:c2:
90:92:2e:cc:8c:ad:1b:5d:b7:f3:93:6a:29:10:42:
c1:0a:ef:a4:43:63:00:d2:79:0b:5d:d3:07:94:42:
c5:bf:a2:31:ca:c2:dc:63:0e:8d:06:e3:b3:28:15:
63:97:76:c2:cb:24:d8:a9:cf:fc:5e:20:de:a3:4f:
28:08:96:55:fb:3d:8a:20:ea:10:75:99:fa:0c:54:
f6:cb:fd:8c:16:47:9c:66:31:71:8d:e8:74:99:03:
61:c1:46:cf:b5:30:2d:94:7d:67:52:e6:b2:fb:c0:
4e:94:9b:e3:80:d7:58:33:22:b2:27:f4:a3:2e:88:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6F:34:D8:08:A9:FC:81:67:DA:BE:03:C9:97:0E:7F:70:AA:9C:7C
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:92:ad:eb:73:80:92:0d:26:80:11:5c:6b:b8:bf:f3:91:94:
ba:85:c2:92:55:07:d2:6a:12:41:1c:87:66:4a:19:a6:19:c1:
51:0b:99:2c:c4:77:db:88:60:e7:ce:37:8f:87:10:16:27:82:
1c:61:4e:67:97:e0:0a:55:e7:32:b7:17:5a:2a:5d:12:7a:cc:
86:02:a8:74:0c:38:ba:64:c2:ac:8a:97:4b:bc:a9:fd:25:ac:
ee:d3:01:7c:ec:75:ea:59:81:6e:c4:23:66:d5:b3:8a:e6:fb:
41:91:e9:74:e1:89:5f:08:23:a3:d0:c3:d8:4b:cb:51:38:02:
f9:ff:76:94:1e:6a:4a:79:c4:c0:ad:1a:1d:60:29:ec:a5:f7:
2d:a4:00:a2:c9:7d:9d:d5:db:bc:c4:41:20:c0:0c:47:1e:72:
ba:9b:2a:31:c6:85:76:33:45:94:e5:d6:41:e6:0a:91:d5:c9:
52:93:3c:5b:7f:ba:a6:c9:eb:68:e3:64:8b:73:21:44:51:27:
a1:71:9a:02:c1:2e:62:3d:7e:65:15:24:38:89:1d:b0:36:82:
da:6f:a6:61:6f:5b:fb:40:2a:44:51:c1:ad:2d:c3:0f:13:dd:
83:3d:d4:33:36:8d:b1:c6:aa:aa:96:f0:21:5b:1a:14:66:25:
20:e4:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:08:48 2026 by rpki-client