This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File: 1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier: CNNeU5Fmk0kLo0ZOIzoICxJw8aZadmGa+jvgpVGSWiw=
Subject key identifier: 3D:89:20:BD:06:94:52:4F:7B:CE:A5:CC:2C:83:06:17:7B:CA:32:21
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial: 019BFA64F4EC548B21795100148EAFD9FB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number: 17A9
Signing time: Mon 26 Jan 2026 13:01:18 +0000
Manifest this update: Mon 26 Jan 2026 13:01:18 +0000
Manifest next update: Tue 27 Jan 2026 13:01:18 +0000
Files and hashes: 1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: IA5N9YkBJEdI4jqypM++9llfQSl7bJMJ/Ac/BBCzeyE=)
2: IjQ6OXkHd97zyTTXFkCYM_KMp5w.roa (hash: 60iQn92KHp6H4icJkgsF/2o05bPMtszkQ7f+dqj/Mrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:64:f4:ec:54:8b:21:79:51:00:14:8e:af:d9:fb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Validity
Not Before: Jan 26 13:01:18 2026 GMT
Not After : Jan 27 13:01:18 2026 GMT
Subject: CN=3d8920bd0694524f7bcea5cc2c8306177bca3221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:44:6d:cb:53:6b:ba:9a:a9:33:23:c1:cc:51:
cd:42:12:7a:4d:24:63:37:11:e3:08:0b:e3:70:b2:
67:07:d5:b0:71:da:8b:31:82:02:f1:e0:92:6a:ef:
a1:6a:6d:76:26:99:f1:e9:63:06:33:48:7a:10:8e:
69:32:8a:87:4e:51:72:44:79:14:2c:1b:4c:b4:09:
a9:ac:d7:65:70:f0:10:4e:41:72:a8:89:34:d2:e3:
58:eb:2a:5a:68:a0:31:fd:88:8f:98:3b:f1:28:45:
dd:ad:5b:52:3e:27:39:6c:15:c8:b6:33:36:0b:8c:
26:22:17:80:8f:10:f7:0e:9d:6c:01:53:19:96:66:
53:49:14:a2:6b:1d:c0:d0:3e:46:04:8a:61:2e:1c:
59:d9:98:7c:a9:f9:7c:b0:e5:51:42:f1:87:de:c2:
d5:d0:4c:59:00:c3:8c:c8:00:7b:51:98:56:f6:47:
90:bf:a0:b4:55:d4:13:67:8e:95:c2:a2:66:5e:6f:
e3:04:c2:91:5d:d9:c4:ab:3b:60:d3:bf:16:fd:36:
ff:c8:b4:2e:49:03:0e:0b:39:0a:60:fd:0c:1c:e6:
70:ca:c5:51:9e:ee:90:45:5e:48:21:f1:f3:de:46:
78:09:70:41:65:e1:52:60:7b:dc:23:c3:3c:61:10:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:89:20:BD:06:94:52:4F:7B:CE:A5:CC:2C:83:06:17:7B:CA:32:21
X509v3 Authority Key Identifier:
keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ff:cb:56:14:32:e2:cc:59:b0:12:b1:d6:0d:a4:cc:09:8d:
fa:1b:63:70:2a:8e:5c:35:01:cd:c9:15:03:fb:27:0a:6b:de:
3c:8c:88:9e:1b:b0:14:02:54:b7:4f:02:dc:7e:ef:53:d3:74:
69:14:e5:1c:f9:07:c3:49:f8:8d:77:25:7a:3c:54:ab:08:ff:
4d:2f:b6:cd:ac:dd:af:f7:81:bb:69:3a:5e:46:89:c1:62:88:
0f:8d:69:c8:82:1c:3f:74:64:8a:fe:14:7d:3b:89:c7:cc:67:
e9:9b:11:6d:66:bc:4a:68:3e:ee:af:ed:8e:30:54:34:92:05:
0d:91:f9:3b:34:3d:81:e1:61:33:74:27:ac:c5:cf:bf:45:10:
24:c4:5b:24:55:41:e2:60:98:a6:ad:71:cc:5e:5f:4a:45:50:
80:06:ba:e7:78:4f:d7:25:97:10:ff:d5:b2:ed:3b:96:42:5f:
fc:ab:55:73:38:78:d5:a4:50:0f:2c:79:ec:7f:f9:e7:8f:99:
dc:96:9d:c1:aa:7c:76:0d:0e:0d:4b:f4:0f:64:44:32:39:e6:
27:be:c9:a9:47:c9:8f:d1:65:f7:7d:5c:d5:8e:20:c3:23:1a:
e0:02:15:8a:9f:3a:e8:3f:58:af:65:21:6b:84:90:7f:4c:b6:
7d:8e:c7:28
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZv6ZPTsVIsheVEAFI6v2ftiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2QyOTgwYzFjNzhiY2Y2YmI5YjgwYTA3OTIwNThiMGJj
YWVkNGIwHhcNMjYwMTI2MTMwMTE4WhcNMjYwMTI3MTMwMTE4WjAzMTEwLwYDVQQD
EygzZDg5MjBiZDA2OTQ1MjRmN2JjZWE1Y2MyYzgzMDYxNzdiY2EzMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ERty1NrupqpMyPBzFHNQhJ6TSRj
NxHjCAvjcLJnB9WwcdqLMYIC8eCSau+ham12Jpnx6WMGM0h6EI5pMoqHTlFyRHkU
LBtMtAmprNdlcPAQTkFyqIk00uNY6ypaaKAx/YiPmDvxKEXdrVtSPic5bBXItjM2
C4wmIheAjxD3Dp1sAVMZlmZTSRSiax3A0D5GBIphLhxZ2Zh8qfl8sOVRQvGH3sLV
0ExZAMOMyAB7UZhW9keQv6C0VdQTZ46VwqJmXm/jBMKRXdnEqztg078W/Tb/yLQu
SQMOCzkKYP0MHOZwysVRnu6QRV5IIfHz3kZ4CXBBZeFSYHvcI8M8YRCOzwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD2JIL0GlFJPe86lzCyDBhd7yjIhMB8GA1UdIwQY
MBaAFPnNKYDBx4vPa7m4CgeSBYsLyu1LMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jMHBnTUhIaTg5cnViZ0tCNUlGaXd2SzdVcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvYzg3OTdiLTAyZTAtNDcxOC1iZGZk
LTA5MjljYmNkYjdhYS8xLzEtYzBwZ01ISGk4OXJ1YmdLQjVJRml3dks3VXMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzcyL2M4Nzk3Yi0wMmUwLTQ3MTgtYmRmZC0wOTI5Y2JjZGI3
YWEvMS8xLWMwcGdNSEhpODlydWJnS0I1SUZpd3ZLN1VzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv/L
VhQy4sxZsBKx1g2kzAmN+htjcCqOXDUBzckVA/snCmvePIyInhuwFAJUt08C3H7v
U9N0aRTlHPkHw0n4jXclejxUqwj/TS+2zazdr/eBu2k6XkaJwWKID41pyIIcP3Rk
iv4UfTuJx8xn6ZsRbWa8Smg+7q/tjjBUNJIFDZH5OzQ9geFhM3QnrMXPv0UQJMRb
JFVB4mCYpq1xzF5fSkVQgAa653hP1yWXEP/Vsu07lkJf/KtVczh41aRQDyx57H/5
54+Z3Jadwap8dg0ODUv0D2REMjnmJ77JqUfJj9Fl931c1Y4gwyMa4AIVip866D9Y
r2Uha4SQf0y2fY7HKA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 20:28:35 2026 by rpki-client