This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier: hebTT1lMKW0LFlif+1Ur9nHuQzK52KqubM/OJgJZTKc=
Subject key identifier: 37:6D:3D:8B:FE:78:1D:6A:0C:E2:41:0D:A7:84:5C:71:AB:51:D0:E3
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 019BCF0CBE0BD587FFB68FA4AB715406F6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number: 17EE
Signing time: Sun 18 Jan 2026 03:01:17 +0000
Manifest this update: Sun 18 Jan 2026 03:01:17 +0000
Manifest next update: Mon 19 Jan 2026 03:01:17 +0000
Files and hashes: 1: 1Jxi3AriRg31UMXbMH3OPiY-5HA.roa (hash: 3Mxy5Zs+xxbHjoz6LYDQ1mtzuO64bgmhPoqFp9H+W6U=)
2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: AohCBK3pJ3DPfFeROYvM4om/8A/IfVUTuDv0xcwwgeQ=)
3: SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa (hash: sS4G3ab1K8SPkh8ckCRuErQYvrEjmRohAAhZp3pf6ig=)
4: eBZ7AmSoNEvuFIsVSaKIFPergtc.roa (hash: bJyd01nfZd9XumL2AfymHRJRduJs4cP6QwBEo8jMpBk=)
5: ltPyLrCgtlMllsCXQ4dfSV5n1sg.roa (hash: /beWoLO2qLG+iVsq1LgAGcDTFDHTDeaWmY9kyyThHj0=)
6: mJmloBqH1ccv7pf7_dE3WxThQ58.roa (hash: L0vhterDlOQyvmoADd6+0joQnbdSLqt2I9Yyqwk+Dl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:cf:0c:be:0b:d5:87:ff:b6:8f:a4:ab:71:54:06:f6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Jan 18 03:01:17 2026 GMT
Not After : Jan 19 03:01:17 2026 GMT
Subject: CN=376d3d8bfe781d6a0ce2410da7845c71ab51d0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:6d:c2:28:5c:cd:16:37:2e:69:4f:a1:ef:
3d:f7:e4:b3:00:69:b8:4b:68:ae:0e:f2:2b:b8:66:
b3:f9:80:40:94:d9:31:80:8a:d0:02:9c:bd:5d:a5:
6d:93:bc:a6:92:ea:61:0d:0e:be:64:21:d2:5c:44:
ec:9b:ed:94:3e:bd:c9:c5:a7:72:ab:53:01:0e:19:
7e:91:90:1f:81:dc:59:1d:6b:57:52:af:13:65:4a:
16:92:41:67:75:62:38:a9:6a:31:a2:3d:70:98:fb:
12:d4:ec:89:50:e5:2d:8e:26:be:0d:db:74:45:82:
1b:a7:54:ce:0b:69:66:de:ae:23:6c:68:f1:54:3f:
46:d2:05:33:61:12:b1:b1:aa:42:28:c1:ba:ce:ce:
78:1f:99:f5:8e:fb:ed:25:77:82:f6:96:bc:94:75:
57:30:6f:23:61:1b:62:dc:9d:96:d7:d6:eb:0e:b8:
01:40:f0:95:97:4f:3c:2d:c6:d5:b8:20:91:33:e8:
fc:d0:00:3b:dc:8a:71:81:07:83:58:c4:c3:60:af:
e2:31:a3:ae:ed:c6:64:cf:38:54:18:e4:cb:23:15:
be:a2:14:6a:74:43:9a:57:cf:61:2a:2b:53:5a:54:
55:36:28:e3:c1:14:86:03:0b:ce:07:92:d1:91:3c:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6D:3D:8B:FE:78:1D:6A:0C:E2:41:0D:A7:84:5C:71:AB:51:D0:E3
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:24:a7:dd:5a:4f:6b:82:a2:2f:54:43:0b:a3:66:9d:44:63:
08:a4:d0:03:b2:2f:5c:ee:fd:59:11:3a:e7:dd:ff:3e:00:52:
73:a8:31:59:11:52:e3:93:91:6c:19:67:0c:e9:e7:ff:61:c8:
e6:f8:d2:fc:72:0a:70:67:ce:3f:f4:f0:fe:d1:23:f8:55:bb:
b2:cc:5e:7b:69:1f:96:92:83:2b:96:40:90:44:a3:db:2f:c7:
12:f4:6b:dd:a9:6a:cd:f0:a1:61:e0:41:d3:e2:2f:0d:ea:3d:
d9:8c:0a:2a:14:a8:ce:88:d8:96:2c:53:50:ca:3e:37:3e:18:
e1:11:69:a4:16:8f:1d:47:9b:22:fa:bb:14:2e:8b:18:cb:02:
e8:26:9a:54:a0:9d:22:6b:02:1b:ab:49:4a:a5:c2:ba:cf:74:
47:72:b2:e3:6e:b4:37:91:f0:0c:06:d2:7f:88:ca:4c:2f:1f:
ca:37:18:2a:2c:e8:8f:00:4b:a0:b8:f5:74:c4:12:17:4f:1e:
91:a9:a5:27:cd:db:22:51:52:4f:5c:cb:2b:d8:9a:46:58:88:
b4:c9:a5:67:ca:3b:57:cd:02:86:49:cd:b0:aa:1c:11:62:3c:
fc:68:8f:d0:8d:3d:bc:da:8f:f8:75:c1:38:f1:3d:84:10:0b:
0d:1e:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 12:07:54 2026 by rpki-client