This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: VRC3fSiBZJJwy0wS6Fg+zEG8NRkJjo35xCnQ0oNsKf4=
Subject key identifier: 1C:B4:9D:65:03:5D:5B:7A:46:B3:37:9A:2B:7D:1F:F9:BB:54:A0:B1
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 019BD846A70C6A8546CDC58D0805AAC6CBEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 17F1
Signing time: Mon 19 Jan 2026 22:01:07 +0000
Manifest this update: Mon 19 Jan 2026 22:01:07 +0000
Manifest next update: Tue 20 Jan 2026 22:01:07 +0000
Files and hashes: 1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: zxI+O8k4Nthep8cPrw0kgAsQ72NLsG+INi9m7uO0lms=)
2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 20:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d8:46:a7:0c:6a:85:46:cd:c5:8d:08:05:aa:c6:cb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Jan 19 22:01:07 2026 GMT
Not After : Jan 20 22:01:07 2026 GMT
Subject: CN=1cb49d65035d5b7a46b3379a2b7d1ff9bb54a0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:ce:12:80:af:92:e2:cc:3e:3c:8c:dd:17:
bd:08:98:a9:79:db:a6:ae:b0:52:1b:7d:a7:83:e1:
ff:4d:2b:c5:81:a4:49:11:ad:58:6c:ea:3a:4d:3c:
3d:a1:a7:4b:ae:39:37:af:e8:92:a0:83:21:41:e6:
fa:a8:fa:71:ee:ea:47:d7:db:a6:39:f7:50:a3:0f:
6f:d4:35:ab:ef:f0:8c:51:ef:7a:9f:d3:ab:5b:ae:
05:11:a1:d4:6c:fe:f2:a8:c7:65:03:0d:a2:b1:84:
7d:d0:a6:8e:fa:b4:9f:08:b9:1d:f9:be:02:d9:e3:
34:d3:33:a4:43:67:53:62:32:9e:49:01:0d:03:f2:
b0:b9:fd:45:d4:f3:1f:60:cf:82:b3:f4:a4:49:74:
df:4f:23:03:8a:57:be:ca:a4:76:e4:da:0b:b3:dc:
c7:31:09:ef:89:40:5f:eb:4d:3d:53:ed:58:32:15:
2d:47:9b:8e:f0:a4:7c:3c:34:d3:08:b7:d1:01:2e:
03:04:f2:7f:e2:58:8c:23:58:bb:6a:4b:a1:dc:6a:
4d:64:29:5d:af:26:9d:ea:7a:f5:68:01:a6:b5:a8:
44:c3:00:8b:58:f5:80:82:6e:26:0b:47:c1:fd:be:
a7:57:00:67:87:d7:bd:97:81:f7:8b:a7:b8:36:97:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B4:9D:65:03:5D:5B:7A:46:B3:37:9A:2B:7D:1F:F9:BB:54:A0:B1
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cb:8c:fe:c3:8f:2c:61:63:73:84:3d:c7:e0:65:fe:be:71:
b0:69:b2:d3:35:7b:42:41:55:98:76:f3:a5:52:6a:f3:ca:f3:
67:38:68:e1:e0:b1:1b:38:02:5a:92:79:82:bf:2e:90:0c:1d:
28:c3:4f:54:34:79:3e:27:3d:7e:e3:cf:a2:d4:ec:b3:79:e3:
c8:a6:29:d5:7b:94:45:4c:ee:e2:16:f1:ea:e9:52:58:92:5d:
fa:45:88:24:0e:18:24:48:f1:87:24:f5:83:1f:f0:de:80:01:
8d:81:5b:88:af:88:df:e2:eb:f5:ee:38:ca:72:96:b0:0f:63:
56:4f:ad:00:9a:59:71:36:47:42:89:99:3e:69:84:50:79:42:
2e:18:d0:ac:8c:49:f8:c7:95:e2:41:ae:e4:ff:a6:50:a8:c8:
6a:0f:37:67:eb:41:b5:f5:0d:f0:50:06:7f:5a:b4:e7:8a:c3:
47:ae:88:d4:47:af:5f:48:01:a0:0b:40:94:e2:9f:13:fd:0a:
c5:2d:ae:94:3d:d9:d6:08:13:7d:6d:5d:3f:60:11:bc:8b:cd:
84:4b:cd:19:15:37:3f:19:39:ee:d3:df:b6:98:80:34:3d:ad:
de:3e:62:20:9e:94:1a:b0:86:fc:ed:7e:5e:0b:4a:93:0b:8c:
f5:10:51:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvYRqcMaoVGzcWNCAWqxsvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3
NDlmZGQwHhcNMjYwMTE5MjIwMTA3WhcNMjYwMTIwMjIwMTA3WjAzMTEwLwYDVQQD
EygxY2I0OWQ2NTAzNWQ1YjdhNDZiMzM3OWEyYjdkMWZmOWJiNTRhMGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw93OEoCvkuLMPjyM3Re9CJipedum
rrBSG32ng+H/TSvFgaRJEa1YbOo6TTw9oadLrjk3r+iSoIMhQeb6qPpx7upH19um
OfdQow9v1DWr7/CMUe96n9OrW64FEaHUbP7yqMdlAw2isYR90KaO+rSfCLkd+b4C
2eM00zOkQ2dTYjKeSQENA/Kwuf1F1PMfYM+Cs/SkSXTfTyMDile+yqR25NoLs9zH
MQnviUBf6009U+1YMhUtR5uO8KR8PDTTCLfRAS4DBPJ/4liMI1i7akuh3GpNZCld
ryad6nr1aAGmtahEwwCLWPWAgm4mC0fB/b6nVwBnh9e9l4H3i6e4NpcoLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy0nWUDXVt6RrM3mit9H/m7VKCxMB8GA1UdIwQY
MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt
ODhlZDhkNzcxN2E0LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0
LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcuM/sOP
LGFjc4Q9x+Bl/r5xsGmy0zV7QkFVmHbzpVJq88rzZzho4eCxGzgCWpJ5gr8ukAwd
KMNPVDR5Pic9fuPPotTss3njyKYp1XuURUzu4hbx6ulSWJJd+kWIJA4YJEjxhyT1
gx/w3oABjYFbiK+I3+Lr9e44ynKWsA9jVk+tAJpZcTZHQomZPmmEUHlCLhjQrIxJ
+MeV4kGu5P+mUKjIag83Z+tBtfUN8FAGf1q054rDR66I1EevX0gBoAtAlOKfE/0K
xS2ulD3Z1ggTfW1dP2ARvIvNhEvNGRU3Pxk57tPftpiAND2t3j5iIJ6UGrCG/O1+
XgtKkwuM9RBRVA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 04:34:37 2026 by rpki-client