This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: OAhDS9is3i77cMvG7yJwdox6vPdYVvRFTF5Ah11VwvM=
Subject key identifier: 29:12:1C:64:1E:80:3F:F8:04:4A:7B:26:59:4C:60:46:82:91:A6:60
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 019C1C4C55C1BCD831CE5A58B6AA0F18259F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 1801
Signing time: Mon 02 Feb 2026 03:01:30 +0000
Manifest this update: Mon 02 Feb 2026 03:01:30 +0000
Manifest next update: Tue 03 Feb 2026 03:01:30 +0000
Files and hashes: 1: Lh1w2stJ270Gej9xnTdwoInIgKA.roa (hash: o+GwhLAcoD1EMh7vyC4YZpvJmieyScRxzeQPPXDHKzo=)
2: mXT_95G0hHnwfzwy9GHCGff03us.roa (hash: MURLfvQpANHzg+d3efhUAoTh/8FNUBv5Zb/aAOYp3OU=)
3: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: EPckkbR7VdO0nCu48X1T759PoFZ6nJHrYZ4WlkS0BI0=)
4: x7mbec4cpv5N8U0_JFOsofDdp9k.asa (hash: xc6esLHJMBzAKQI4ygNtC8Fx32gcjy+TaKUBFG2ujWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:4c:55:c1:bc:d8:31:ce:5a:58:b6:aa:0f:18:25:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Feb 2 03:01:30 2026 GMT
Not After : Feb 3 03:01:30 2026 GMT
Subject: CN=29121c641e803ff8044a7b26594c60468291a660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:16:4d:83:1b:ed:12:c8:d9:42:d0:54:ad:
5f:bb:1d:fb:5b:39:a8:f7:83:9f:70:65:8b:03:a7:
37:ee:61:24:8e:c7:7a:4b:dd:f7:23:a4:44:c8:62:
d0:c6:53:99:13:ca:4f:23:70:27:a1:11:fa:cd:06:
b4:d1:e5:bc:73:0f:8a:ce:18:6c:ce:ba:5b:94:3a:
13:fd:14:f1:cb:7b:fd:eb:54:09:a1:a1:b6:b1:da:
b1:52:b8:58:11:fc:89:cd:b5:c0:b6:62:ec:5a:b4:
70:4f:30:e6:00:b8:ce:e3:26:eb:0d:5e:4f:22:2a:
c3:7a:07:55:60:3c:58:48:66:0d:80:52:92:4f:d6:
a5:00:df:4d:38:6a:df:f6:20:90:f6:2b:6b:a2:4f:
e9:dd:bd:94:09:3b:1d:af:92:26:d3:76:94:b5:38:
ef:2b:b9:d4:7d:7e:9f:4b:28:ed:49:95:82:04:79:
b6:2d:6a:fe:bd:b4:20:79:b3:ab:7c:71:3f:96:0e:
54:1b:eb:27:53:50:e9:ad:cb:ac:83:23:da:6d:cb:
6a:c8:40:c6:96:78:0a:c9:82:4a:7b:94:f0:22:c2:
62:fa:35:9e:bf:82:3a:b7:05:f1:1a:10:35:ea:ae:
e7:11:b8:81:4f:dd:12:23:85:b0:b9:a3:50:3c:06:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:12:1C:64:1E:80:3F:F8:04:4A:7B:26:59:4C:60:46:82:91:A6:60
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:71:47:a8:93:04:72:8b:8a:bc:e2:83:1c:db:50:24:e4:b6:
80:88:e7:ec:7d:4e:0f:fa:d7:5d:00:b5:55:b4:00:04:b4:8f:
62:0b:46:c0:1a:e1:3f:c5:d5:13:af:58:af:c9:06:7d:a1:0c:
83:45:1d:d4:ef:dc:8d:cf:ba:f3:4d:c5:df:a7:0d:da:b7:8b:
9e:a1:cb:d0:80:df:ef:a4:b0:8f:ac:6d:fc:cc:90:d2:9e:a6:
66:98:65:eb:87:c1:ac:f0:02:57:be:48:cf:bc:62:c8:99:3c:
4f:86:f7:48:48:ee:5d:31:0f:91:62:6b:58:f3:31:3f:96:88:
f2:04:f8:ba:a1:5c:95:d5:94:52:47:8f:5c:2f:7b:87:31:2a:
5f:b0:13:0e:f7:39:20:d9:2f:75:32:c1:5b:f4:32:ea:cd:2b:
6c:00:38:bc:0e:11:e9:7f:18:80:28:de:b0:32:b0:c3:fd:7d:
5a:50:a2:82:b4:b8:9d:b6:67:bb:12:e3:55:38:6e:5b:5f:88:
c1:b3:0f:d5:63:0e:09:39:ba:da:6a:fa:dc:7e:68:8b:e6:8d:
49:2a:f8:22:16:5d:1e:28:ec:7b:c7:c3:52:1d:36:6b:c5:55:
01:4b:92:4f:f2:73:a0:b9:90:8d:7e:b5:94:ed:f2:a8:71:95:
74:05:4c:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwcTFXBvNgxzlpYtqoPGCWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTRhMGQ1ZmRhNjAwYzVkNWI3ZjYxOGY2ODZkN2U5MzA1
MWI0ZDcwHhcNMjYwMjAyMDMwMTMwWhcNMjYwMjAzMDMwMTMwWjAzMTEwLwYDVQQD
EygyOTEyMWM2NDFlODAzZmY4MDQ0YTdiMjY1OTRjNjA0NjgyOTFhNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WsWTYMb7RLI2ULQVK1fux37Wzmo
94OfcGWLA6c37mEkjsd6S933I6REyGLQxlOZE8pPI3AnoRH6zQa00eW8cw+Kzhhs
zrpblDoT/RTxy3v961QJoaG2sdqxUrhYEfyJzbXAtmLsWrRwTzDmALjO4ybrDV5P
IirDegdVYDxYSGYNgFKST9alAN9NOGrf9iCQ9itrok/p3b2UCTsdr5Im03aUtTjv
K7nUfX6fSyjtSZWCBHm2LWr+vbQgebOrfHE/lg5UG+snU1DprcusgyPabctqyEDG
lngKyYJKe5TwIsJi+jWev4I6twXxGhA16q7nEbiBT90SI4WwuaNQPAbAWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkSHGQegD/4BEp7JllMYEaCkaZgMB8GA1UdIwQY
MBaAFK/koNX9pgDF1bf2GPaG1+kwUbTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAt
ZTEwN2Q5ZjE2YzJkLzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAtZTEwN2Q5ZjE2YzJk
LzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5XFHqJME
couKvOKDHNtQJOS2gIjn7H1OD/rXXQC1VbQABLSPYgtGwBrhP8XVE69Yr8kGfaEM
g0Ud1O/cjc+6803F36cN2reLnqHL0IDf76Swj6xt/MyQ0p6mZphl64fBrPACV75I
z7xiyJk8T4b3SEjuXTEPkWJrWPMxP5aI8gT4uqFcldWUUkePXC97hzEqX7ATDvc5
INkvdTLBW/Qy6s0rbAA4vA4R6X8YgCjesDKww/19WlCigrS4nbZnuxLjVThuW1+I
wbMP1WMOCTm62mr63H5oi+aNSSr4IhZdHijse8fDUh02a8VVAUuST/JzoLmQjX61
lO3yqHGVdAVM0g==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:14:27 2026 by rpki-client