This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File: I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier: iVMTxYPnN16vGdshkSjTaDQPRw4g7HfhwsS/Gphmhac=
Subject key identifier: 30:17:F6:E1:66:97:BD:F9:FC:17:6F:7B:72:96:78:4D:B3:59:50:89
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 019BD87D4B4A3EF6F67C228015DCD92331C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number: 17FE
Signing time: Mon 19 Jan 2026 23:00:48 +0000
Manifest this update: Mon 19 Jan 2026 23:00:48 +0000
Manifest next update: Tue 20 Jan 2026 23:00:48 +0000
Files and hashes: 1: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: kenEeGfwFiR1cKxLzsMsMSc8WBJV5qc8Y3cM+sT2I8U=)
2: IGRV2WsskuWTSjE61k7EJ5BQL_g.roa (hash: TD0j7saLbQNy5wP2+Z7EAP+DfzUHpEljN22YPu7FxcQ=)
3: Kc_ZYw3v8hIzmM1zcgt9F5cxL98.roa (hash: Lw1rg+/Tz8s8iqnT6INdOtQPU4yz9vyMzF8Or+39BWE=)
4: OwT3MWkGmy8nucB77AIErlwv-c8.roa (hash: TO+izXPgq1XnvslTtUGRCnNQnecbCKgXbwm0U1xhS58=)
5: ei49HQBepZfijJONn1YXG9qTwnQ.roa (hash: 436lkK/qtqzaDmSUiPMUIk0ZEB4+mDd5VFzkWFWYadA=)
6: srVqtN9AKuKob17qSxiXLthPNyw.roa (hash: +JQZjxz4atLwzjKZMuA0Nmi1UuJgxYV5FzyfEPCpnlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 20:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d8:7d:4b:4a:3e:f6:f6:7c:22:80:15:dc:d9:23:31:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Jan 19 23:00:48 2026 GMT
Not After : Jan 20 23:00:48 2026 GMT
Subject: CN=3017f6e16697bdf9fc176f7b7296784db3595089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:76:b0:47:fd:2f:7f:19:e4:d8:53:e3:0e:
9f:19:9a:76:45:cd:91:af:25:36:1d:aa:3c:74:25:
be:d3:c4:fb:ec:c6:10:87:41:21:9a:0c:44:3c:8b:
ba:f2:ae:b4:af:e0:28:f7:d3:1a:f8:c3:55:02:cd:
63:f7:14:34:66:f3:9d:d1:a8:24:da:f5:4f:13:34:
39:dd:2e:3f:cb:ad:0b:09:89:90:7b:44:93:ed:65:
10:97:58:a6:37:63:b3:83:c3:98:8e:be:c0:3a:f9:
53:24:65:1d:47:38:fe:55:9e:65:e3:34:0a:fe:c0:
03:1e:7a:a0:be:00:10:8c:40:b9:ca:b4:e6:67:25:
3f:af:62:4b:1d:ac:79:94:7c:19:48:c9:b3:33:eb:
05:05:ed:f7:45:9b:d2:29:50:86:68:77:9f:4b:90:
2f:f9:a2:b5:ba:ba:ef:52:a5:c9:fe:86:00:c0:24:
a8:50:18:71:2d:84:ee:a8:e3:95:3a:7a:a8:c2:7a:
e8:c2:07:fb:8f:f0:77:fd:06:0a:de:35:94:90:fc:
3f:d8:4f:6e:aa:c8:be:b2:a5:d5:c9:4b:99:f7:74:
7a:3b:90:11:fa:08:d1:0c:03:c4:e5:44:da:7c:fa:
fa:6a:c0:f2:5d:42:d1:af:83:e7:34:69:ca:dd:65:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:17:F6:E1:66:97:BD:F9:FC:17:6F:7B:72:96:78:4D:B3:59:50:89
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a8:c8:2a:5e:d4:9d:7e:ef:a5:1b:98:d8:a8:cb:33:9b:c0:
f9:bd:11:89:11:e8:80:7e:72:54:65:84:6d:64:1f:6a:e4:8d:
40:e2:e8:01:5a:c9:e1:5c:ff:bd:ad:8b:17:c1:71:08:0a:3e:
fe:db:97:f9:23:4b:85:e4:ef:f9:c2:ab:64:0d:3e:04:c8:da:
01:cc:87:2a:16:31:ea:1b:5f:40:60:61:9d:dd:60:fc:3f:e3:
28:a2:83:10:94:39:cc:48:2f:8f:97:2a:e2:18:d7:82:c0:95:
e1:a1:d5:32:61:db:86:35:68:47:21:4a:94:44:af:1b:11:a7:
1e:2d:5c:c8:54:67:94:83:d4:9a:f7:1b:41:91:ba:9d:3f:ba:
32:98:5f:d1:cc:f8:1e:03:6e:3b:69:cf:40:45:e2:29:06:e1:
89:14:fe:05:1a:fd:c2:0a:33:28:11:62:72:06:a7:fd:25:29:
ca:39:3e:7d:7b:e8:83:b2:20:e1:a1:1e:1f:c7:2b:5f:9e:c0:
d9:c5:58:1f:ef:81:46:34:c7:fd:75:53:40:24:85:f8:19:91:
9d:86:0a:67:63:33:fa:20:82:4b:c1:61:8a:f7:82:cc:02:54:
79:fa:ae:aa:40:92:c2:0f:66:d4:0f:c8:62:0a:28:fd:0b:32:
5d:a9:d8:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvYfUtKPvb2fCKAFdzZIzHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1
ZGEzZjQwHhcNMjYwMTE5MjMwMDQ4WhcNMjYwMTIwMjMwMDQ4WjAzMTEwLwYDVQQD
EygzMDE3ZjZlMTY2OTdiZGY5ZmMxNzZmN2I3Mjk2Nzg0ZGIzNTk1MDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+52sEf9L38Z5NhT4w6fGZp2Rc2R
ryU2Hao8dCW+08T77MYQh0EhmgxEPIu68q60r+Ao99Ma+MNVAs1j9xQ0ZvOd0agk
2vVPEzQ53S4/y60LCYmQe0ST7WUQl1imN2Ozg8OYjr7AOvlTJGUdRzj+VZ5l4zQK
/sADHnqgvgAQjEC5yrTmZyU/r2JLHax5lHwZSMmzM+sFBe33RZvSKVCGaHefS5Av
+aK1urrvUqXJ/oYAwCSoUBhxLYTuqOOVOnqownrowgf7j/B3/QYK3jWUkPw/2E9u
qsi+sqXVyUuZ93R6O5AR+gjRDAPE5UTafPr6asDyXULRr4PnNGnK3WU90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAX9uFml735/Bdve3KWeE2zWVCJMB8GA1UdIwQY
MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt
ZWUwNjAzOTQ5ZjkzLzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz
LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqjIKl7U
nX7vpRuY2KjLM5vA+b0RiRHogH5yVGWEbWQfauSNQOLoAVrJ4Vz/va2LF8FxCAo+
/tuX+SNLheTv+cKrZA0+BMjaAcyHKhYx6htfQGBhnd1g/D/jKKKDEJQ5zEgvj5cq
4hjXgsCV4aHVMmHbhjVoRyFKlESvGxGnHi1cyFRnlIPUmvcbQZG6nT+6Mphf0cz4
HgNuO2nPQEXiKQbhiRT+BRr9wgozKBFicgan/SUpyjk+fXvog7Ig4aEeH8crX57A
2cVYH++BRjTH/XVTQCSF+BmRnYYKZ2Mz+iCCS8FhiveCzAJUefquqkCSwg9m1A/I
Ygoo/QsyXanYlw==
-----END CERTIFICATE-----
Generated at Tue Jan 20 04:39:52 2026 by rpki-client