This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
File: N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json)
Hash identifier: v2ib3J/Z5v3pcZZVQ2bQlauAIJTMNj8yLIxLhuNf/XM=
Subject key identifier: 27:D6:8A:CE:85:E6:E2:65:8F:71:61:9D:2E:0E:C1:88:FA:02:25:2D
Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755
Certificate serial: 019BA1595318832CEBEF15BB3AA4245CDED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
Manifest number: 17C5
Signing time: Fri 09 Jan 2026 06:02:24 +0000
Manifest this update: Fri 09 Jan 2026 06:02:24 +0000
Manifest next update: Sat 10 Jan 2026 06:02:24 +0000
Files and hashes: 1: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: P3aP/w8HHnwZO809CLEfem7+sVg5AZnno2Hb1oEsW8M=)
2: hdfHlp9X2wMs9YL8yldtpHWheV8.roa (hash: Pv6P2CmLu762uZLyxGq9eFFRzEqg1ASmUsEfElOD4ZA=)
3: jr55ySGNHSD10H2_OXt21Ktunw0.roa (hash: vxN6j3jPaPKjT/LRmQlMKBnzVqHbofA00iJqGae0vWo=)
4: vN-QNhPrTsEbYGTx8daKtvPjdzE.roa (hash: mT9H4mkT7WVAi+nSLyy8fxt12jq+PfPah/Hp91TG3TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 06:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a1:59:53:18:83:2c:eb:ef:15:bb:3a:a4:24:5c:de:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755
Validity
Not Before: Jan 9 06:02:24 2026 GMT
Not After : Jan 10 06:02:24 2026 GMT
Subject: CN=27d68ace85e6e2658f71619d2e0ec188fa02252d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:ec:a4:65:ed:90:56:da:39:ec:fd:f7:da:
11:13:cc:d6:ad:fd:fe:d5:75:c3:b9:5c:ed:a0:7d:
6e:6d:e9:7f:37:19:21:3d:28:00:fd:bf:56:72:8a:
f7:1f:34:16:9d:36:26:c0:ee:9e:d0:71:3c:d6:24:
57:d0:97:e8:88:45:9b:e4:c2:16:ad:70:f0:c1:00:
e0:7a:e0:12:1b:5e:fc:68:1f:2f:3b:40:15:87:a6:
49:03:d4:18:90:de:bc:52:f1:b7:f1:a9:13:89:cd:
42:b9:7e:8b:95:6e:e8:70:df:8d:70:cc:89:2e:02:
91:0e:85:a7:e6:97:d8:a7:83:eb:94:05:0c:32:61:
63:78:77:14:ad:d2:6a:0a:85:30:69:35:2d:ce:52:
37:94:b2:e5:ec:cc:35:52:e5:12:59:5e:d5:74:86:
b3:b1:37:7b:97:82:a2:fa:94:b6:47:17:d6:10:c3:
4f:91:d0:ea:71:6b:3a:0a:10:2e:47:e0:5c:e8:5e:
ed:89:1d:c2:87:59:89:19:08:3b:b6:8e:96:ff:a0:
09:84:28:0c:c9:ee:90:b2:f8:e0:57:6b:da:29:38:
80:94:24:cb:8d:2a:a2:6a:9c:de:c6:60:a2:b1:90:
e2:29:ce:b1:23:04:bd:5b:ed:2e:e0:a8:3a:e1:b1:
23:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:8A:CE:85:E6:E2:65:8F:71:61:9D:2E:0E:C1:88:FA:02:25:2D
X509v3 Authority Key Identifier:
keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:65:ef:55:52:7a:05:33:d1:b3:48:22:cb:be:0c:32:7f:50:
d1:1a:72:da:86:82:1a:f6:24:38:c2:43:87:41:71:e3:28:87:
51:a5:af:74:a6:c5:bc:0a:90:00:69:a5:b2:b6:08:67:bc:41:
09:9e:43:d5:b7:ef:4e:e0:e0:e6:d9:18:95:9b:81:92:4f:af:
46:a2:0b:89:78:d2:21:b1:d9:60:08:c6:93:d3:38:98:57:70:
48:a2:49:fe:01:60:7f:9c:05:a9:37:f3:e9:64:e7:15:3d:c9:
97:d8:2a:aa:5f:40:d1:ad:04:ac:93:38:d3:72:e8:cb:fa:fe:
35:22:f4:29:83:2c:e3:ba:72:4e:ae:54:b6:3f:47:c1:69:61:
ab:3a:55:99:2b:ee:e7:99:34:d3:45:1f:ae:e0:cc:5c:5a:4d:
25:49:35:93:97:74:3c:eb:08:e7:e9:11:32:83:f0:1e:cd:e2:
9b:7b:f9:8f:cc:70:db:11:ee:ff:20:dd:72:87:b7:34:5a:ca:
c1:e3:81:7c:94:80:5c:c9:5a:63:a6:24:b4:a7:88:b0:cf:fb:
c9:24:eb:0b:6f:e6:55:24:32:2d:7e:44:b3:f9:b5:89:56:56:
89:ba:59:4e:a3:50:1b:93:96:58:ac:c3:86:ad:00:88:f8:f1:
3b:b6:7c:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuhWVMYgyzr7xW7OqQkXN7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YWY0ODEzMWVjZDlkY2EzZGVmMmIyZGU3ODhmMTUwNjA2
Mjc3NTUwHhcNMjYwMTA5MDYwMjI0WhcNMjYwMTEwMDYwMjI0WjAzMTEwLwYDVQQD
EygyN2Q2OGFjZTg1ZTZlMjY1OGY3MTYxOWQyZTBlYzE4OGZhMDIyNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmDspGXtkFbaOez999oRE8zWrf3+
1XXDuVztoH1ubel/NxkhPSgA/b9Wcor3HzQWnTYmwO6e0HE81iRX0JfoiEWb5MIW
rXDwwQDgeuASG178aB8vO0AVh6ZJA9QYkN68UvG38akTic1CuX6LlW7ocN+NcMyJ
LgKRDoWn5pfYp4PrlAUMMmFjeHcUrdJqCoUwaTUtzlI3lLLl7Mw1UuUSWV7VdIaz
sTd7l4Ki+pS2RxfWEMNPkdDqcWs6ChAuR+Bc6F7tiR3Ch1mJGQg7to6W/6AJhCgM
ye6QsvjgV2vaKTiAlCTLjSqiapzexmCisZDiKc6xIwS9W+0u4Kg64bEj2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfWis6F5uJlj3FhnS4OwYj6AiUtMB8GA1UdIwQY
MBaAFDevSBMezZ3KPe8rLeeI8VBgYndVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWZhZWQtYzJkNy00Y2I5LTk3ZjUt
ZGY2ZjIwZGNiOTRiLzEvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zNWZhZWQtYzJkNy00Y2I5LTk3ZjUtZGY2ZjIwZGNiOTRi
LzEvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2XvVVJ6
BTPRs0giy74MMn9Q0Rpy2oaCGvYkOMJDh0Fx4yiHUaWvdKbFvAqQAGmlsrYIZ7xB
CZ5D1bfvTuDg5tkYlZuBkk+vRqILiXjSIbHZYAjGk9M4mFdwSKJJ/gFgf5wFqTfz
6WTnFT3Jl9gqql9A0a0ErJM403Loy/r+NSL0KYMs47pyTq5Utj9HwWlhqzpVmSvu
55k000UfruDMXFpNJUk1k5d0POsI5+kRMoPwHs3im3v5j8xw2xHu/yDdcoe3NFrK
weOBfJSAXMlaY6YktKeIsM/7ySTrC2/mVSQyLX5Es/m1iVZWibpZTqNQG5OWWKzD
hq0AiPjxO7Z82w==
-----END CERTIFICATE-----
Generated at Fri Jan 9 17:08:32 2026 by rpki-client