This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier: mM5YNwHYLziR/9IaG/YtAGsAl+17Sd9NZHQccBvfS1Y=
Subject key identifier: D8:C7:1F:B5:68:32:97:3C:F8:DE:4D:6B:8C:F7:84:BB:53:D0:60:B8
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 019BFC8A2DC66F7AC3983F63AF69B24D01E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number: 17EE
Signing time: Mon 26 Jan 2026 23:01:12 +0000
Manifest this update: Mon 26 Jan 2026 23:01:12 +0000
Manifest next update: Tue 27 Jan 2026 23:01:12 +0000
Files and hashes: 1: 1-gvD7al892cvZ4RIDuyKy9oaP8E.roa (hash: 3YuUrQDhY5WtE8QXyn7md8vc7m27H9qU1hbbb54ZWaY=)
2: 5Lz9w0B7jrAzPI5acoujGxqoJpE.roa (hash: MZNW6RIYVz1iqV9FFYEQ74EZU6o1FnMQFNeyud+QFNQ=)
3: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: ly2nPaFGD4RI9Hu8yx6jKjfeBOwgOZB/Bjvfk1NqM3w=)
4: U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa (hash: Msu3UEjWnFS+f8ETYG9dtK80xmHaVMz/zqoRDxDt/JM=)
5: Zd_S7TX7KyLf91f92bM72Q5m1hg.roa (hash: cE/CxwAeAo553C8FvYX71S7+9eLctivX+ScLAuru1fI=)
6: m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa (hash: +y6I9Y8FOJyplIOWWLmZd1y7Nvbup46rof3V4cdi8+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:8a:2d:c6:6f:7a:c3:98:3f:63:af:69:b2:4d:01:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 26 23:01:12 2026 GMT
Not After : Jan 27 23:01:12 2026 GMT
Subject: CN=d8c71fb56832973cf8de4d6b8cf784bb53d060b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:89:43:eb:51:20:80:dc:ef:e0:5a:4b:e1:
3e:70:95:87:82:9f:5a:de:a3:e2:a5:55:97:3d:0c:
80:d8:59:ff:e9:06:49:ae:4b:fe:b7:7c:5f:eb:4f:
99:8c:2b:a1:8f:05:47:00:57:b2:66:ef:7a:b0:51:
b0:f8:11:b5:16:9c:bf:57:36:6b:9d:ed:69:58:7b:
c3:13:49:69:8a:5d:07:17:c8:97:a0:38:98:cd:4b:
2f:8f:ef:d3:4f:c3:5b:c2:f3:53:8f:a4:59:e2:80:
c4:d8:a9:ed:f2:be:a7:69:09:9b:3b:c2:0b:e5:46:
9b:f7:74:09:97:7d:ee:ef:5c:24:ab:cc:6b:94:28:
85:d5:f8:2e:57:9d:3a:a0:35:e2:38:1f:46:ec:81:
27:c9:ee:55:8c:82:34:99:ac:15:ee:6a:20:a3:1c:
d9:6c:c3:05:2d:57:48:46:24:d2:65:06:6a:fe:1e:
26:9d:b0:87:f1:02:5c:73:a3:fb:5e:1f:b8:29:81:
db:1b:44:51:47:f4:a4:41:7e:92:ce:5d:78:e5:92:
e8:1d:de:17:7c:6c:96:d8:cf:84:0c:c6:bb:45:85:
a4:7f:b9:58:80:88:e3:27:bf:21:53:0d:78:64:eb:
65:53:8c:9e:05:af:da:62:9f:8e:7e:fd:d6:84:dc:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:1F:B5:68:32:97:3C:F8:DE:4D:6B:8C:F7:84:BB:53:D0:60:B8
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:19:93:d2:c1:f2:57:d5:42:5f:2c:6a:cc:bc:04:ef:a1:10:
4a:ce:c3:63:2f:6e:c3:b5:3c:8c:a6:d2:24:05:a8:2c:0f:2f:
39:81:7d:29:cd:51:d4:fa:74:47:83:4d:a7:97:24:bd:5b:9c:
7a:68:a9:10:b0:fd:7d:fa:45:04:82:77:8c:ee:18:fd:7c:70:
91:8d:e8:16:63:8c:64:b5:3a:1c:90:65:a5:31:fe:90:75:e4:
1b:88:31:67:12:f8:b0:a5:64:8f:ce:8e:11:b3:e2:df:09:0b:
a8:26:62:4e:66:ae:37:0c:7f:99:62:a5:bf:9c:b2:30:27:02:
d3:4b:e2:7d:cd:8e:2d:e9:b9:db:7a:1e:59:18:35:a0:79:40:
8b:7b:35:4d:8c:8b:aa:98:16:cc:e7:e1:9c:58:8d:40:13:1a:
cd:5e:f4:63:e1:46:3e:13:ce:19:d9:45:78:10:df:73:2f:06:
38:4d:57:41:12:c9:15:27:82:d8:8e:98:71:64:20:b7:97:01:
95:b4:c7:38:72:65:78:8e:f3:4d:8c:3e:b6:05:b4:20:ac:cb:
18:1a:86:21:5f:bc:98:cb:73:2f:0b:33:56:11:3d:f0:ab:01:
9a:37:79:08:14:4b:ce:91:5f:c6:a4:b9:2a:83:bc:1d:2c:a8:
59:ed:43:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8ii3Gb3rDmD9jr2myTQHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2
ZjRkYjQwHhcNMjYwMTI2MjMwMTEyWhcNMjYwMTI3MjMwMTEyWjAzMTEwLwYDVQQD
EyhkOGM3MWZiNTY4MzI5NzNjZjhkZTRkNmI4Y2Y3ODRiYjUzZDA2MGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc6JQ+tRIIDc7+BaS+E+cJWHgp9a
3qPipVWXPQyA2Fn/6QZJrkv+t3xf60+ZjCuhjwVHAFeyZu96sFGw+BG1Fpy/VzZr
ne1pWHvDE0lpil0HF8iXoDiYzUsvj+/TT8NbwvNTj6RZ4oDE2Knt8r6naQmbO8IL
5Uab93QJl33u71wkq8xrlCiF1fguV506oDXiOB9G7IEnye5VjII0mawV7mogoxzZ
bMMFLVdIRiTSZQZq/h4mnbCH8QJcc6P7Xh+4KYHbG0RRR/SkQX6Szl145ZLoHd4X
fGyW2M+EDMa7RYWkf7lYgIjjJ78hUw14ZOtlU4yeBa/aYp+Ofv3WhNz3GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjHH7VoMpc8+N5Na4z3hLtT0GC4MB8GA1UdIwQY
MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt
MmVlMmI3Mjk1ZGZmLzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm
LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBmT0sHy
V9VCXyxqzLwE76EQSs7DYy9uw7U8jKbSJAWoLA8vOYF9Kc1R1Pp0R4NNp5ckvVuc
emipELD9ffpFBIJ3jO4Y/XxwkY3oFmOMZLU6HJBlpTH+kHXkG4gxZxL4sKVkj86O
EbPi3wkLqCZiTmauNwx/mWKlv5yyMCcC00vifc2OLem523oeWRg1oHlAi3s1TYyL
qpgWzOfhnFiNQBMazV70Y+FGPhPOGdlFeBDfcy8GOE1XQRLJFSeC2I6YcWQgt5cB
lbTHOHJleI7zTYw+tgW0IKzLGBqGIV+8mMtzLwszVhE98KsBmjd5CBRLzpFfxqS5
KoO8HSyoWe1Dkw==
-----END CERTIFICATE-----
Generated at Tue Jan 27 07:17:21 2026 by rpki-client