This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json)
Hash identifier: B9CqAz/mOCbVq7nxha1cCTFBhDnVc5O+LQxsagXAszc=
Subject key identifier: D2:25:7F:5C:2E:DD:06:9E:E6:82:74:49:26:DB:B8:FE:78:5D:CB:F3
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 019BF91B203A8C8C84A0BF26484A4FE98AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
Manifest number: 0F40
Signing time: Mon 26 Jan 2026 07:01:02 +0000
Manifest this update: Mon 26 Jan 2026 07:01:02 +0000
Manifest next update: Tue 27 Jan 2026 07:01:02 +0000
Files and hashes: 1: 1Szjzw2KvVCy0V1IKnCQlhzw36U.roa (hash: 0vNmVEVumOksaePQAHWYBW9xdfQM3+N4dhZcAektxxA=)
2: 2Ijce7koIphf5jpD6dtt4ux1VIs.roa (hash: xXW3d8652og82PwcjTeZHa3yQuYtriDzUNEHcVL0bY4=)
3: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: jW2e15RYXA3pPHYJsbLh1B7gY2080TNQCNNFP9EQe8U=)
4: bsYgzcPZezJ2gYbc8PKOspEFG4c.roa (hash: MpgIeeEXTiyIocenUfFnFL+sMDiBogWiOdN5+ESRb/E=)
5: e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa (hash: oC+ocV09AXnxKxFBaBEAaFvyphxKhACRBYHFRB7YC5U=)
6: g6sf18n3xZl1TALCvAHdOtQxRg4.roa (hash: xF4qc4vWFwiPiBXPNEqALg9dNoI0YkOYJ4CNgjIGAJ4=)
7: jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa (hash: FONWYkgA1dLto5X/Omv5HI8QNgMouzq0GwMPGBqkdRM=)
8: zyd8uSkjKcRLHzmFPeh-k40bdgw.roa (hash: Z+xUSGJvLfcezS9srOZIqvbsKOYqYqGNXUZ1rB4SeYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:1b:20:3a:8c:8c:84:a0:bf:26:48:4a:4f:e9:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Jan 26 07:01:02 2026 GMT
Not After : Jan 27 07:01:02 2026 GMT
Subject: CN=d2257f5c2edd069ee682744926dbb8fe785dcbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:af:36:8a:b6:ae:9e:69:77:7b:ef:b8:da:
d3:de:8a:db:ed:f9:26:53:e4:93:99:52:9f:ee:6c:
1e:ad:c8:03:15:7c:de:59:ea:7f:be:2c:ff:fa:4a:
6e:b2:11:ab:fc:05:2a:7d:85:c2:fa:81:c3:e9:7c:
77:5d:b8:34:86:0d:40:28:4c:d0:d8:93:db:ed:27:
d2:12:fe:00:9d:4b:c0:14:6e:d5:03:7e:51:35:99:
ca:ad:51:cc:11:84:f3:4a:48:40:4a:66:77:1a:ef:
49:cf:f6:1b:31:1a:a5:e1:21:74:5e:fc:4e:1f:d8:
65:35:ce:8d:86:81:6b:09:71:7b:34:df:53:4a:6c:
91:57:23:ef:67:53:57:df:30:c0:98:29:f3:87:c0:
ad:10:e6:c7:47:92:3f:00:15:67:5e:66:6a:65:eb:
ef:62:cc:0a:a4:f1:c6:f8:92:11:32:db:7e:90:5f:
86:60:9b:b9:be:22:28:ff:4f:ed:3a:f5:f7:e5:e2:
c8:c5:fc:81:26:a2:46:10:01:12:0f:7e:93:4b:de:
72:32:c3:8f:cd:4e:a6:0d:4e:8a:5b:10:f7:ec:84:
00:3e:8f:35:d0:c3:fa:ea:df:f7:4c:0d:1c:94:b2:
5a:87:ef:eb:92:ef:87:04:01:2f:82:53:07:1d:bf:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:7F:5C:2E:DD:06:9E:E6:82:74:49:26:DB:B8:FE:78:5D:CB:F3
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:19:80:01:c5:23:7f:a2:ee:cd:6c:38:b5:3d:4c:ce:42:26:
a5:b3:57:e1:0c:57:1a:8c:96:bd:bc:71:42:11:f1:42:79:11:
2c:42:24:fc:72:d8:33:7b:c0:ff:c1:03:2f:ff:9e:8e:b0:3e:
f1:c8:52:62:c9:d2:05:74:16:e0:d4:e6:77:3d:15:0f:e2:ae:
65:6b:b2:55:74:60:27:a3:ef:59:1b:c7:86:f4:74:8d:4e:fd:
15:9a:a6:0e:77:4e:3b:8d:0c:67:72:ec:22:98:bd:b0:bc:92:
d9:10:31:12:0b:84:74:0e:2b:3c:9a:dd:e9:fc:63:d8:88:60:
a0:d4:22:c0:da:cf:0b:cd:d7:48:bc:e0:e9:cd:ae:40:4a:3f:
f1:f5:f8:d3:5c:c7:53:21:1c:75:d7:44:25:eb:b7:60:96:62:
45:7c:a2:d0:36:3a:60:aa:d4:82:2a:4b:1c:a2:21:f7:4c:05:
fd:86:67:66:35:8c:ce:db:3e:77:37:bb:39:9b:eb:cf:20:1b:
0f:0b:05:d4:2b:46:4d:73:56:2e:b4:3a:2d:a2:35:84:34:9e:
bb:e5:0f:6a:74:3d:96:f5:09:4b:6b:2e:59:2d:61:a7:aa:14:
21:9f:d1:93:1e:6d:52:45:3b:6c:66:5c:39:db:fb:f0:24:cd:
0b:8c:1f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:30:56 2026 by rpki-client