This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: gvAh1C77mcZrGYo8hFeoT2X+E6XOW9Z6Z2hNmUglKYk=
Subject key identifier: 75:24:17:A9:C9:93:9E:FD:0B:07:F3:80:6A:3F:EA:C5:ED:7B:23:A4
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019B999F4F4709922AF63F5F1200AC5EA235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 17FF
Signing time: Wed 07 Jan 2026 18:01:53 +0000
Manifest this update: Wed 07 Jan 2026 18:01:53 +0000
Manifest next update: Thu 08 Jan 2026 18:01:53 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: dYiZ40HvOj0+r7CQo3VVNy7rWZZzN6nsrKLtEdtgvJ4=)
3: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
4: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
5: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
6: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
7: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
8: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
9: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 15:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:99:9f:4f:47:09:92:2a:f6:3f:5f:12:00:ac:5e:a2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 7 18:01:53 2026 GMT
Not After : Jan 8 18:01:53 2026 GMT
Subject: CN=752417a9c9939efd0b07f3806a3feac5ed7b23a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:17:ba:be:96:30:5a:e9:ec:a2:a4:2e:a8:
5b:2a:94:34:21:75:61:49:96:08:f9:c6:5e:71:a0:
31:b8:01:2d:1e:57:b9:ff:25:8f:1d:5a:1c:f0:00:
2f:12:63:8a:dd:30:ad:ea:54:6e:da:a8:6d:87:11:
72:16:4f:60:0a:c4:d8:ad:77:51:ba:8b:29:9d:95:
51:62:e1:d8:e3:54:d0:fa:7d:64:fc:88:3b:67:a7:
26:44:ed:cc:ae:aa:f5:03:3f:0c:19:9b:10:68:49:
88:f4:b9:52:b2:60:1a:63:d3:c6:76:71:6a:4b:b2:
35:2b:dd:eb:fa:c0:ec:24:f0:f2:ee:da:34:23:f7:
90:b7:53:61:e9:55:2f:62:f4:5f:90:61:3b:f8:3c:
22:b7:5a:69:04:de:37:6f:24:dd:cb:cc:af:2c:3d:
95:cb:ba:75:3d:0b:8a:56:58:ec:f9:31:45:7a:09:
49:8b:6a:b6:4d:f9:b5:be:32:2e:d1:ee:43:0d:c6:
05:09:9c:d4:d6:15:0c:e0:1a:50:e1:2f:02:93:51:
fa:17:1e:6d:04:3b:8e:a8:97:d5:56:ce:d8:06:34:
60:c7:eb:c0:59:ef:2b:de:52:6c:6a:f2:02:5b:c8:
af:f4:0d:d2:e8:2b:f2:70:54:9a:5a:20:55:9f:b8:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:24:17:A9:C9:93:9E:FD:0B:07:F3:80:6A:3F:EA:C5:ED:7B:23:A4
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5c:bf:a9:88:99:cb:04:22:6c:14:8f:39:cf:1b:37:b3:8a:
54:a4:04:16:f9:4f:c2:0b:83:00:98:a4:7f:dd:7c:3b:50:24:
7e:9d:50:24:05:2b:37:62:ec:d9:a0:67:1f:0f:4e:09:2a:f3:
09:54:c0:b0:a4:67:98:af:3e:d8:d7:d8:bc:a9:bb:67:99:ae:
df:6c:8a:b0:9b:0e:e1:09:69:22:c1:42:bc:e8:a9:67:90:f0:
05:5e:ed:a5:ad:ff:d7:fe:a4:b6:ff:12:07:16:17:6e:d8:78:
6a:1a:b8:64:c6:b6:95:5c:7a:66:3f:f5:53:29:ed:2d:11:2f:
9d:db:a9:59:b0:bd:84:a6:77:c1:da:29:fc:62:8b:72:73:53:
ae:c0:12:b3:09:e3:5d:f6:96:4e:3d:27:1f:5b:9e:7a:ed:25:
dc:74:1d:db:db:88:a7:15:c6:4b:95:c6:81:fc:c4:b3:61:56:
98:43:26:27:c4:1f:8f:88:c3:38:1c:ed:a2:47:5d:4b:fd:ab:
e3:fb:f2:80:02:71:2c:e2:a7:01:d4:21:50:79:05:db:f9:af:
96:95:4a:a4:c7:d0:38:cc:49:35:23:21:b0:11:75:3d:3b:ca:
99:fe:d1:ce:ac:96:5f:cf:8d:f6:c0:65:a7:c1:83:f2:32:06:
64:3b:c2:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuZn09HCZIq9j9fEgCsXqI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYwMTA3MTgwMTUzWhcNMjYwMTA4MTgwMTUzWjAzMTEwLwYDVQQD
Eyg3NTI0MTdhOWM5OTM5ZWZkMGIwN2YzODA2YTNmZWFjNWVkN2IyM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEsXur6WMFrp7KKkLqhbKpQ0IXVh
SZYI+cZecaAxuAEtHle5/yWPHVoc8AAvEmOK3TCt6lRu2qhthxFyFk9gCsTYrXdR
uospnZVRYuHY41TQ+n1k/Ig7Z6cmRO3Mrqr1Az8MGZsQaEmI9LlSsmAaY9PGdnFq
S7I1K93r+sDsJPDy7to0I/eQt1Nh6VUvYvRfkGE7+Dwit1ppBN43byTdy8yvLD2V
y7p1PQuKVljs+TFFeglJi2q2Tfm1vjIu0e5DDcYFCZzU1hUM4BpQ4S8Ck1H6Fx5t
BDuOqJfVVs7YBjRgx+vAWe8r3lJsavICW8iv9A3S6CvycFSaWiBVn7hNsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUkF6nJk579CwfzgGo/6sXteyOkMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARly/qYiZ
ywQibBSPOc8bN7OKVKQEFvlPwguDAJikf918O1Akfp1QJAUrN2Ls2aBnHw9OCSrz
CVTAsKRnmK8+2NfYvKm7Z5mu32yKsJsO4QlpIsFCvOipZ5DwBV7tpa3/1/6ktv8S
BxYXbth4ahq4ZMa2lVx6Zj/1UyntLREvndupWbC9hKZ3wdop/GKLcnNTrsASswnj
XfaWTj0nH1ueeu0l3HQd29uIpxXGS5XGgfzEs2FWmEMmJ8Qfj4jDOBztokddS/2r
4/vygAJxLOKnAdQhUHkF2/mvlpVKpMfQOMxJNSMhsBF1PTvKmf7RzqyWX8+N9sBl
p8GD8jIGZDvCuw==
-----END CERTIFICATE-----
Generated at Wed Jan 7 20:09:30 2026 by rpki-client