This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: HS5QDb6dGsDZZPsbdUu08fYhGrLl2FnrkIZkfHO7EyY=
Subject key identifier: 9A:DB:DF:ED:5A:D5:8B:F5:6C:6A:2C:95:97:7D:C3:A9:87:7E:08:A6
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 019BFC1BC5C898839BA88FAE3C07BEC89F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 17EC
Signing time: Mon 26 Jan 2026 21:00:37 +0000
Manifest this update: Mon 26 Jan 2026 21:00:37 +0000
Manifest next update: Tue 27 Jan 2026 21:00:37 +0000
Files and hashes: 1: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: LmwlrfiMcPqpl5ccsVgP88BBdqbY5mrjUWHbTleGAaw=)
2: WNub_b8gcNqu1fV67q57r6UlmNI.roa (hash: W3o0N676i3NWWAuw5Jf6ypX8jnN/9ihF6+nuITCxXbk=)
3: bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa (hash: J52qNXcYUL8Md7MHBa4Z1H074n+eMZjwdb1rZYRHD/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:1b:c5:c8:98:83:9b:a8:8f:ae:3c:07:be:c8:9f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Jan 26 21:00:37 2026 GMT
Not After : Jan 27 21:00:37 2026 GMT
Subject: CN=9adbdfed5ad58bf56c6a2c95977dc3a9877e08a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:17:64:49:88:8c:c5:50:01:b5:b7:8a:1a:
6f:e2:af:5a:e7:22:8b:83:85:07:cb:d4:a5:2f:e0:
80:ab:f2:ba:6a:ad:18:61:16:a2:c6:04:16:9e:c2:
11:79:c7:a0:0a:09:0d:9d:09:f7:3a:05:87:83:82:
9a:00:f4:64:0c:2e:70:c2:8d:70:3a:a8:71:26:25:
d4:19:93:51:c3:87:be:e3:12:a5:a1:a5:b3:d6:bc:
53:da:5b:9f:af:8f:6f:e9:56:89:fe:f7:02:43:e2:
2f:49:9d:38:91:9d:2e:07:9e:41:63:cf:b3:58:b4:
cb:4d:79:a6:20:1a:74:17:49:d2:cf:b7:15:6f:6a:
a3:44:8d:46:62:c7:b2:c4:27:69:d6:50:df:1c:42:
51:b0:83:83:ba:81:28:98:f6:2e:91:d6:36:8e:24:
27:38:88:77:e9:cb:00:65:1b:a7:be:11:4e:6c:d5:
ba:b8:75:c1:17:34:11:ba:14:41:1f:88:f4:6a:15:
0c:55:b4:2c:cf:c7:da:c3:21:c7:6c:30:bc:e7:67:
4b:52:cc:08:89:c0:7f:31:80:9f:be:75:61:98:5e:
56:b9:97:ff:e1:44:44:1e:47:1f:81:8b:cf:9f:d6:
62:e7:ae:db:23:a9:4e:e4:2b:70:61:e7:cd:af:a8:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DB:DF:ED:5A:D5:8B:F5:6C:6A:2C:95:97:7D:C3:A9:87:7E:08:A6
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7f:f8:f8:89:f0:16:1d:c1:ae:02:75:ce:cd:ee:3d:17:8c:
b3:bb:1e:54:ff:59:17:2a:3c:f8:cb:a6:22:c3:d4:5d:88:73:
e7:42:63:33:7d:05:c0:a7:14:05:7c:45:ab:ca:74:42:b0:7f:
c5:8e:51:f3:29:8d:41:d1:51:09:de:10:df:07:29:3e:2e:ec:
41:c6:8b:eb:f5:24:da:17:da:d3:c4:da:f1:27:1d:4c:52:c5:
c8:16:72:fc:66:2c:c2:6a:3e:a1:f9:48:8d:bb:63:9e:28:83:
bc:ce:68:d6:11:35:28:25:d4:68:e2:c5:b3:e7:f9:60:e7:24:
dc:a9:d5:99:58:e3:94:0b:30:96:9c:57:7e:ce:b3:b7:64:ca:
32:0c:53:7c:3d:4d:df:d7:4f:e3:37:87:15:b9:0d:43:96:99:
2e:ca:a1:05:f8:68:48:5d:7e:15:af:b6:96:3c:8a:d1:0a:ec:
85:21:57:da:6a:87:5a:19:b9:03:58:c4:ef:6f:6f:e0:71:fe:
da:63:bd:28:9e:1b:30:bb:2f:0a:2d:49:49:9b:43:6d:7c:a7:
be:69:43:c2:b7:be:e3:ac:d5:cf:40:c8:9c:8c:7b:ec:6a:da:
be:57:fa:0d:8c:f8:6e:3b:d2:40:6d:f5:23:4e:35:d5:59:af:
07:c2:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:09:54 2026 by rpki-client