This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: Jff6RGExzKuMfWx9cl+ufr0jKiihv7s1qADOsPGVpl8=
Subject key identifier: F5:55:08:75:61:BE:D3:3F:6E:89:76:50:42:AB:B4:AE:3E:06:8B:B9
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 019BDF92EC6015BB7E1DF708813F6B026055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 17DD
Signing time: Wed 21 Jan 2026 08:01:46 +0000
Manifest this update: Wed 21 Jan 2026 08:01:46 +0000
Manifest next update: Thu 22 Jan 2026 08:01:46 +0000
Files and hashes: 1: 02Kwxm94BZ7RAXrgQDrQO6z-3TQ.roa (hash: mn+URibZ+VkSuh5/xjJWoAZ326sPISM/MDnjDXusDEM=)
2: 5S_7thf2DaNAtWCpIaM3S8JGyIw.roa (hash: gFO7mmA7nFE7H8OIcfxRMIamOyG5pl0gNHLu/ghYBzU=)
3: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: Z6dUKbYYNBVvAl3rjGZ65QDUdS+NddWoCv4L2wnFgW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 08:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:df:92:ec:60:15:bb:7e:1d:f7:08:81:3f:6b:02:60:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Jan 21 08:01:46 2026 GMT
Not After : Jan 22 08:01:46 2026 GMT
Subject: CN=f555087561bed33f6e89765042abb4ae3e068bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d1:55:36:fb:b1:c7:7e:d7:ab:25:d2:55:3e:
8d:f7:2a:24:fc:aa:8e:e6:2a:66:e5:57:2a:be:ed:
b4:59:8d:55:e3:d9:f1:e5:8b:c3:5a:a9:ea:a4:e3:
74:8d:aa:35:16:76:22:06:58:5d:31:9a:36:fc:52:
a7:a7:d1:93:93:2c:a0:b1:8d:d5:cb:97:4c:ea:82:
c1:82:51:cf:8d:a3:83:63:37:bf:b5:5a:1e:41:87:
63:f6:e5:85:75:96:01:dc:f0:3f:cf:ef:7b:e5:73:
2c:80:f6:2c:8f:6d:53:3f:10:d0:6e:54:1c:f9:57:
d1:8d:b8:1a:d5:a1:a5:b4:51:51:13:ec:1f:89:68:
75:bf:bc:db:1a:8d:ed:ce:3c:1c:5a:36:7c:6c:67:
c6:40:69:99:bf:5a:ad:e9:95:6c:1b:20:15:84:17:
08:63:d3:34:b1:7d:90:b5:67:da:7f:fe:54:bf:3c:
79:d8:1c:39:61:77:6e:6b:0a:92:33:52:32:18:b3:
cb:31:e2:65:f4:67:ee:a1:27:ce:b8:20:ce:45:b5:
60:ab:15:b1:db:a9:01:4e:e9:c7:4b:b9:23:12:f5:
6e:8b:32:ed:a2:46:31:44:7e:18:5a:08:18:b7:5f:
b6:96:ac:9e:77:2f:ce:26:e6:50:0a:cc:5b:f4:7f:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:55:08:75:61:BE:D3:3F:6E:89:76:50:42:AB:B4:AE:3E:06:8B:B9
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b6:bb:22:c8:e8:87:15:38:53:d0:cc:01:ff:39:42:a2:3b:
61:00:15:62:27:09:e8:56:08:1b:db:eb:e1:3d:fd:2d:bb:35:
3c:f2:71:b8:5b:8c:42:e6:f1:fa:0c:f1:1b:92:79:4c:f7:cc:
56:fb:d2:cf:11:72:76:64:8b:26:74:a4:e8:ac:9f:bc:f5:44:
0f:49:e0:36:68:4d:40:a5:62:b0:62:65:47:f7:4d:84:96:aa:
7f:d8:dd:ff:e5:05:de:11:1f:1a:11:02:f9:e1:ef:d5:f5:70:
67:44:ec:d8:9f:40:5d:9d:51:6a:b0:2c:58:9b:85:0d:1b:90:
28:de:b4:22:65:79:43:8b:59:1a:19:b3:01:2e:8a:50:9b:a6:
6d:e5:87:f3:af:3b:2b:b9:7a:ea:2d:72:15:17:82:9a:b3:29:
48:e8:69:87:20:ae:6b:0f:4b:b9:f1:69:ca:b9:f2:0d:2c:6a:
d1:d4:85:6a:ec:df:b4:a1:75:e6:3c:82:43:ee:fa:28:56:ff:
08:11:f5:3d:f9:2a:18:94:76:fd:4f:72:3e:35:6b:df:a7:8a:
fc:2a:aa:7d:01:5f:31:4a:af:b5:c2:bd:97:c8:c9:17:77:18:
4a:82:07:e7:bb:d2:32:82:c7:1d:0b:91:6c:e6:96:9d:65:dd:
2f:ad:9a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvfkuxgFbt+HfcIgT9rAmBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2Y1MzJmYTI2MmY1YzZiZDk2MTViY2Q3OWQ2ZWRkNDNm
MmUwNzUwHhcNMjYwMTIxMDgwMTQ2WhcNMjYwMTIyMDgwMTQ2WjAzMTEwLwYDVQQD
EyhmNTU1MDg3NTYxYmVkMzNmNmU4OTc2NTA0MmFiYjRhZTNlMDY4YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNFVNvuxx37XqyXSVT6N9yok/KqO
5ipm5Vcqvu20WY1V49nx5YvDWqnqpON0jao1FnYiBlhdMZo2/FKnp9GTkyygsY3V
y5dM6oLBglHPjaODYze/tVoeQYdj9uWFdZYB3PA/z+975XMsgPYsj21TPxDQblQc
+VfRjbga1aGltFFRE+wfiWh1v7zbGo3tzjwcWjZ8bGfGQGmZv1qt6ZVsGyAVhBcI
Y9M0sX2QtWfaf/5Uvzx52Bw5YXduawqSM1IyGLPLMeJl9GfuoSfOuCDORbVgqxWx
26kBTunHS7kjEvVuizLtokYxRH4YWggYt1+2lqyedy/OJuZQCsxb9H+xfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVVCHVhvtM/bol2UEKrtK4+Bou5MB8GA1UdIwQY
MBaAFAN/Uy+iYvXGvZYVvNedbt1D8uB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEt
MDNhZGZiYzY4YzkxLzEvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8wOGU1N2MtZDcxNi00NzA1LTk1NjEtMDNhZGZiYzY4Yzkx
LzEvQTM5VEw2Smk5Y2E5bGhXODE1MXUzVVB5NEhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLa7Isjo
hxU4U9DMAf85QqI7YQAVYicJ6FYIG9vr4T39Lbs1PPJxuFuMQubx+gzxG5J5TPfM
VvvSzxFydmSLJnSk6KyfvPVED0ngNmhNQKVisGJlR/dNhJaqf9jd/+UF3hEfGhEC
+eHv1fVwZ0Ts2J9AXZ1RarAsWJuFDRuQKN60ImV5Q4tZGhmzAS6KUJumbeWH8687
K7l66i1yFReCmrMpSOhphyCuaw9LufFpyrnyDSxq0dSFauzftKF15jyCQ+76KFb/
CBH1PfkqGJR2/U9yPjVr36eK/CqqfQFfMUqvtcK9l8jJF3cYSoIH57vSMoLHHQuR
bOaWnWXdL62aAw==
-----END CERTIFICATE-----
Generated at Wed Jan 21 15:50:48 2026 by rpki-client