This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
File: pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft (raw, json)
Hash identifier: Qr1yE/BmrzXYsCEKbcYS5HdYGgl0P2/oSEIG+tjbNUc=
Subject key identifier: 6B:FA:F2:05:57:26:28:86:3A:DA:77:07:0E:49:B8:98:BD:8F:2C:21
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 019BD84718F141228B7912FC31BFCA330D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
Manifest number: 17DB
Signing time: Mon 19 Jan 2026 22:01:36 +0000
Manifest this update: Mon 19 Jan 2026 22:01:36 +0000
Manifest next update: Tue 20 Jan 2026 22:01:36 +0000
Files and hashes: 1: JCYIq9abXabyABSE5MBNKtlW6Ds.roa (hash: wyz0gi5oUZNHdIXWdMzjT6ryVOTn8WqxbAJlVCJ1Slc=)
2: gQlaDrKaYvl0-C-DyFPVtl0u3B4.roa (hash: A/ZwZg8++NTunxUO1oyToOusbEjGDF79YcXv8xOqsQM=)
3: pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl (hash: a3tBFB6jozOfspNcGLx4MarB8iQWZABBevRSyQEAx+U=)
4: u0aDlmSdDj71EM-iDNS3bskqYP8.roa (hash: 7duuGh5xzVloGi3w0t9gMbtpB8qNHncN9NT4g5kJltI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d8:47:18:f1:41:22:8b:79:12:fc:31:bf:ca:33:0d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Jan 19 22:01:36 2026 GMT
Not After : Jan 20 22:01:36 2026 GMT
Subject: CN=6bfaf205572628863ada77070e49b898bd8f2c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:9f:1c:54:41:43:c9:00:8f:71:29:97:5c:
47:be:ad:2e:b6:4c:ce:36:23:85:0a:c4:64:66:68:
4e:26:08:c3:50:32:b3:95:52:cc:33:08:04:ed:74:
b3:7b:bc:51:4c:20:0c:e2:e1:5e:da:80:bd:37:e0:
b3:5f:fd:f3:ad:4b:d2:db:18:b5:35:51:68:92:f9:
9c:0e:55:10:a8:a8:7a:60:0f:fc:c6:e5:96:8e:f1:
88:be:f2:c3:d4:64:27:bf:5f:5e:64:40:4e:59:8b:
4c:5c:16:ad:29:42:1a:a2:d6:6b:8c:1e:18:c6:cc:
b1:fc:55:f1:41:28:5c:79:e9:c6:e1:fb:8e:ac:ac:
71:55:65:6c:74:2a:6f:86:b4:bd:fe:15:bd:7c:61:
3d:54:54:ab:ac:7a:e1:b5:bf:f6:cb:96:cb:16:37:
68:a7:01:aa:08:8e:2a:31:f8:ab:8e:a8:20:ca:f0:
69:dc:08:a2:47:1f:cb:36:89:4b:e8:20:39:1f:1c:
ea:84:49:48:ae:2b:01:d1:7a:c1:cc:df:30:e0:72:
06:bf:86:0a:e2:b9:92:81:a9:28:88:e4:a5:ef:8a:
73:49:25:34:53:ec:2d:73:8a:b5:b5:a4:69:cc:af:
91:b8:64:e3:3d:6f:48:f8:1a:11:37:e9:96:58:ea:
f8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FA:F2:05:57:26:28:86:3A:DA:77:07:0E:49:B8:98:BD:8F:2C:21
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e6:ef:21:25:f3:fd:b8:c4:37:ce:45:46:8b:d9:95:6e:00:
e0:a1:9f:09:b8:1d:72:9b:e9:3e:16:f3:bb:69:8d:02:7e:0e:
c6:d6:7a:18:f4:ab:7e:88:00:40:a4:83:c1:c9:96:60:5f:8a:
9a:0c:f2:c0:92:76:18:7f:6c:4b:3e:7a:36:31:c9:84:c7:be:
41:5b:9a:9d:06:a3:a9:bb:21:7e:1b:56:db:0b:a3:61:6f:25:
19:37:90:9f:0e:3c:cc:f3:04:18:46:11:6a:4d:ef:85:d0:ce:
ed:e8:71:01:74:34:da:cf:05:bb:68:80:9c:ab:7d:6e:42:f4:
c6:63:79:22:7e:55:1b:98:ab:a7:4c:ce:74:43:27:0d:99:56:
aa:66:b3:65:f7:12:d6:24:cb:1c:c7:84:64:af:5d:c5:5e:c0:
4e:0b:e4:d8:4e:7f:70:44:6e:8e:04:6e:55:56:97:29:58:cf:
60:99:cc:26:bc:6d:fb:e4:a8:37:53:59:2d:11:5f:63:07:c2:
a6:48:6b:a9:66:35:0d:57:d4:f7:b0:9a:a7:be:4d:ef:c6:61:
67:94:aa:a6:bb:29:15:de:b1:27:ca:49:e4:10:50:0d:da:c7:
11:14:c6:f9:13:c1:4b:01:60:a9:46:0c:cf:3c:a5:d8:d0:d0:
ed:c7:96:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvYRxjxQSKLeRL8Mb/KMw1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MzM3MjVjZDVkZDkxY2YxOTBhYjNhOTk1MjZlODk4MzU3
ODU2ZWYwHhcNMjYwMTE5MjIwMTM2WhcNMjYwMTIwMjIwMTM2WjAzMTEwLwYDVQQD
Eyg2YmZhZjIwNTU3MjYyODg2M2FkYTc3MDcwZTQ5Yjg5OGJkOGYyYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU6fHFRBQ8kAj3Epl1xHvq0utkzO
NiOFCsRkZmhOJgjDUDKzlVLMMwgE7XSze7xRTCAM4uFe2oC9N+CzX/3zrUvS2xi1
NVFokvmcDlUQqKh6YA/8xuWWjvGIvvLD1GQnv19eZEBOWYtMXBatKUIaotZrjB4Y
xsyx/FXxQShceenG4fuOrKxxVWVsdCpvhrS9/hW9fGE9VFSrrHrhtb/2y5bLFjdo
pwGqCI4qMfirjqggyvBp3AiiRx/LNolL6CA5HxzqhElIrisB0XrBzN8w4HIGv4YK
4rmSgakoiOSl74pzSSU0U+wtc4q1taRpzK+RuGTjPW9I+BoRN+mWWOr4kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv68gVXJiiGOtp3Bw5JuJi9jywhMB8GA1UdIwQY
MBaAFKYzclzV3ZHPGQqzqZUm6Jg1eFbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAt
YzBiODEzYjRlYzdlLzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81Yjg1NmEtYTkwZC00NzkxLTljMTAtYzBiODEzYjRlYzdl
LzEvcGpOeVhOWGRrYzhaQ3JPcGxTYm9tRFY0VnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANubvISXz
/bjEN85FRovZlW4A4KGfCbgdcpvpPhbzu2mNAn4OxtZ6GPSrfogAQKSDwcmWYF+K
mgzywJJ2GH9sSz56NjHJhMe+QVuanQajqbshfhtW2wujYW8lGTeQnw48zPMEGEYR
ak3vhdDO7ehxAXQ02s8Fu2iAnKt9bkL0xmN5In5VG5irp0zOdEMnDZlWqmazZfcS
1iTLHMeEZK9dxV7ATgvk2E5/cERujgRuVVaXKVjPYJnMJrxt++SoN1NZLRFfYwfC
pkhrqWY1DVfU97Cap75N78ZhZ5SqprspFd6xJ8pJ5BBQDdrHERTG+RPBSwFgqUYM
zzyl2NDQ7ceW1Q==
-----END CERTIFICATE-----
Generated at Tue Jan 20 03:00:50 2026 by rpki-client