This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: PR8stsFPA2lzhpxE0NNb0TLf6T+MnAOti4pD1vtak1s=
Subject key identifier: FC:F9:C8:B1:4A:79:FA:57:5D:EE:5C:AD:5B:52:E5:D0:36:B1:44:D6
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 019BDE11C97711E8465523D7EA49680985BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 17DF
Signing time: Wed 21 Jan 2026 01:01:06 +0000
Manifest this update: Wed 21 Jan 2026 01:01:06 +0000
Manifest next update: Thu 22 Jan 2026 01:01:06 +0000
Files and hashes: 1: 24Hwto-BpXx4ZNDaWCPO8Ea-hlI.roa (hash: iK9kCH46Oumb8kgSKUedbFMHCOpgazvLt/ANMQHFNJk=)
2: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (hash: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E=)
3: HW1ashBasiojQ_LVw9DqjgRziMs.roa (hash: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA=)
4: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: dxMuASOX0B2wMziPnVUuyJoVpwLxxBx5m7LQJWRj0f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:de:11:c9:77:11:e8:46:55:23:d7:ea:49:68:09:85:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Jan 21 01:01:06 2026 GMT
Not After : Jan 22 01:01:06 2026 GMT
Subject: CN=fcf9c8b14a79fa575dee5cad5b52e5d036b144d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:c1:7a:97:26:43:f2:ce:2a:97:a6:59:bd:
01:d2:87:f5:57:71:f5:16:c8:51:20:5c:48:64:a3:
82:1a:2f:cd:4c:65:e1:eb:48:4d:30:30:aa:9a:b7:
73:b8:5c:98:28:cc:39:ff:33:0b:0d:25:d2:63:5f:
7a:e1:b5:10:f2:8a:ac:9f:ea:87:5a:0f:0c:44:94:
e1:cc:44:ed:8b:e4:fb:75:ea:df:58:3a:14:53:83:
6f:48:1d:92:5e:38:91:cb:f0:f7:9c:b2:60:17:2f:
13:ec:73:11:9c:60:28:d9:32:47:72:38:8d:4c:0e:
a7:ca:a1:9f:15:ef:c3:8d:a8:6b:b2:f5:90:a4:a1:
44:73:0e:45:38:f8:18:ce:56:6c:14:f6:b2:06:21:
d7:c5:e9:f9:8e:c3:3e:c4:38:6e:d2:82:3a:d4:a8:
82:2a:6d:cc:58:a0:15:1f:14:e6:f3:59:25:2a:ea:
d0:9d:24:78:c9:ea:0f:10:36:63:5f:6b:4a:dc:77:
77:13:71:ef:5f:92:1e:76:51:df:d0:a1:22:e5:44:
c6:55:1d:77:f9:38:8f:a4:72:19:89:8b:26:d1:e1:
5a:d1:08:5e:23:67:4b:b9:0b:31:ae:da:e1:1a:75:
dc:51:86:a8:cf:8b:45:34:10:20:5c:05:92:f0:1f:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F9:C8:B1:4A:79:FA:57:5D:EE:5C:AD:5B:52:E5:D0:36:B1:44:D6
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:14:30:62:cd:95:9e:5a:48:bc:40:37:60:dc:a7:e8:f1:55:
38:0a:f2:7b:d0:c9:8a:a9:89:3c:2c:a1:70:f7:87:cd:9e:85:
76:1b:da:34:f1:74:e6:40:86:44:65:a5:57:05:a5:10:40:5c:
15:99:bc:1e:f6:e4:d4:7c:29:0f:e9:6a:ff:86:3b:ce:ae:5c:
12:14:fb:85:85:03:2b:66:d0:85:cd:2f:a0:23:51:7c:cc:3f:
00:ff:22:5d:52:a0:05:3d:57:7d:0f:43:c8:f4:9f:f6:a1:12:
f4:bd:ab:12:79:f6:43:91:9a:63:af:eb:6d:e8:ce:a9:63:3a:
b9:9c:95:4d:66:ad:62:f0:d4:c7:45:12:a2:76:45:a8:b1:03:
e1:2c:45:47:72:8d:44:d8:26:e5:36:67:74:70:cd:6a:5c:27:
48:79:98:8b:54:ed:88:0a:00:71:ab:71:c2:56:36:d0:88:36:
e2:88:61:be:0c:8a:22:34:ca:c4:ed:7f:59:0e:7d:c1:14:7c:
b4:5d:ce:c8:51:67:29:bd:4c:77:4e:8b:8f:81:89:01:a0:39:
48:f4:cb:74:df:e9:11:0f:e0:f2:b2:2f:30:c9:2b:be:c7:44:
41:e9:af:03:52:3e:c7:a5:d5:51:81:c6:51:87:99:c3:8b:65:
55:a2:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 03:09:55 2026 by rpki-client