This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier: URZSXTOcmT1Skte3qTDLdAZ+UEZSEf1Ev+tv5CooRTA=
Subject key identifier: 26:42:CF:B3:DE:3E:69:77:1E:3B:B2:F9:D8:82:AE:8D:AC:45:F7:B6
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 019B93D3173B2A33A8D8881AC2442D5011B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number: 17FC
Signing time: Tue 06 Jan 2026 15:00:43 +0000
Manifest this update: Tue 06 Jan 2026 15:00:43 +0000
Manifest next update: Wed 07 Jan 2026 15:00:43 +0000
Files and hashes: 1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
2: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: uAS5/DemnYP/JpAOTO/UVeA2lYgp7lTxjBlL2yHAiZU=)
3: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
4: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
5: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
6: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
7: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
8: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
9: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Jan 2026 14:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:93:d3:17:3b:2a:33:a8:d8:88:1a:c2:44:2d:50:11:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 6 15:00:43 2026 GMT
Not After : Jan 7 15:00:43 2026 GMT
Subject: CN=2642cfb3de3e69771e3bb2f9d882ae8dac45f7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:55:e1:a3:06:20:77:9d:f9:d5:8c:56:e3:
28:dd:90:9f:49:7b:25:26:3b:42:ec:4d:34:fe:5e:
2c:db:82:56:7c:5a:a0:3c:c7:51:8f:7b:d1:78:48:
09:67:b5:30:52:af:4d:13:7e:95:9d:29:d7:e6:fd:
bc:8b:78:d0:81:03:92:44:bc:eb:01:9f:7b:78:4e:
9e:da:4e:ac:87:f7:87:35:81:ee:52:d2:d3:fd:e9:
02:b4:86:64:27:8d:2c:a8:d3:c7:91:8c:ac:50:6b:
d4:04:e1:3d:7e:f6:bb:d1:80:1f:3b:97:87:85:ad:
4f:d5:c6:7d:66:a6:9a:7e:1c:ab:f7:a2:ef:f6:88:
56:ce:00:3f:b2:36:92:ed:56:0c:42:c3:c5:ba:ab:
30:57:dc:a6:4b:0a:91:d1:9d:be:2d:8c:ba:11:83:
8d:cd:2f:09:13:c9:af:29:35:34:bd:5d:3c:33:ed:
d4:77:95:64:fd:0d:de:48:d6:c5:64:50:7d:fa:5d:
8d:79:27:6d:ff:f5:fb:5c:80:58:20:5e:68:7b:81:
ae:95:ae:dc:f6:56:8f:bc:51:a2:1c:97:79:7c:4e:
52:2b:f5:af:16:ca:df:61:01:38:ac:70:0b:77:0e:
38:c9:36:73:c9:2e:ee:aa:63:9e:d2:d8:94:c5:02:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:42:CF:B3:DE:3E:69:77:1E:3B:B2:F9:D8:82:AE:8D:AC:45:F7:B6
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0d:48:fb:fd:4b:a9:d7:17:ad:ef:ce:21:20:84:1b:4f:eb:
31:95:f0:5e:c9:52:8d:a4:8b:46:ab:a4:22:99:89:0c:55:32:
6f:e5:24:a7:d7:bc:be:09:94:29:d7:9f:5c:34:39:d6:a8:64:
48:a0:5b:6a:4e:84:ea:5d:3c:43:98:8e:b7:f3:ba:24:84:44:
af:c1:08:1a:bc:72:0e:42:5a:fa:43:4b:20:06:63:67:aa:b3:
9f:f3:d0:85:96:26:7d:9b:cc:8e:ca:c1:d3:bb:6a:59:2d:74:
05:9e:be:0e:5f:65:8d:d3:03:16:bd:e3:39:d1:39:49:64:db:
0e:d5:63:b3:4e:cc:78:ed:8b:69:d8:3e:3a:8e:25:a4:5e:42:
fc:ab:41:5b:9d:52:cb:4a:21:d9:01:6d:ae:0d:29:b3:b9:1f:
e1:8c:ea:4c:b3:13:3b:9e:08:d8:2a:f0:0e:c4:fd:1a:da:96:
40:f5:85:9d:45:75:6a:e3:67:49:4a:c5:b7:ae:68:c3:20:44:
27:82:7d:80:3e:07:41:3a:30:99:c7:11:56:96:bb:0c:1d:c0:
83:9c:c3:7e:21:6a:a0:31:b8:4c:43:26:1c:2f:b0:d5:8a:95:
ad:aa:13:36:90:3d:bb:42:76:3f:8e:fc:08:6b:cb:f5:18:69:
c3:14:9f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuT0xc7KjOo2IgawkQtUBG3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYwMTA2MTUwMDQzWhcNMjYwMTA3MTUwMDQzWjAzMTEwLwYDVQQD
EygyNjQyY2ZiM2RlM2U2OTc3MWUzYmIyZjlkODgyYWU4ZGFjNDVmN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKJV4aMGIHed+dWMVuMo3ZCfSXsl
JjtC7E00/l4s24JWfFqgPMdRj3vReEgJZ7UwUq9NE36VnSnX5v28i3jQgQOSRLzr
AZ97eE6e2k6sh/eHNYHuUtLT/ekCtIZkJ40sqNPHkYysUGvUBOE9fva70YAfO5eH
ha1P1cZ9Zqaafhyr96Lv9ohWzgA/sjaS7VYMQsPFuqswV9ymSwqR0Z2+LYy6EYON
zS8JE8mvKTU0vV08M+3Ud5Vk/Q3eSNbFZFB9+l2NeSdt//X7XIBYIF5oe4Gula7c
9laPvFGiHJd5fE5SK/WvFsrfYQE4rHALdw44yTZzyS7uqmOe0tiUxQLQhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZCz7PePml3Hjuy+diCro2sRfe2MB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARg1I+/1L
qdcXre/OISCEG0/rMZXwXslSjaSLRqukIpmJDFUyb+Ukp9e8vgmUKdefXDQ51qhk
SKBbak6E6l08Q5iOt/O6JIREr8EIGrxyDkJa+kNLIAZjZ6qzn/PQhZYmfZvMjsrB
07tqWS10BZ6+Dl9ljdMDFr3jOdE5SWTbDtVjs07MeO2Ladg+Oo4lpF5C/KtBW51S
y0oh2QFtrg0ps7kf4YzqTLMTO54I2CrwDsT9GtqWQPWFnUV1auNnSUrFt65owyBE
J4J9gD4HQTowmccRVpa7DB3Ag5zDfiFqoDG4TEMmHC+w1YqVraoTNpA9u0J2P478
CGvL9RhpwxSftg==
-----END CERTIFICATE-----
Generated at Tue Jan 6 22:07:42 2026 by rpki-client