This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: na3b6APVd+JlXdxpRgkBoHugP/TfRduKXutpbK5fPvk=
Subject key identifier: A6:10:C2:E8:F3:3B:40:B2:B2:AC:82:2E:FF:6E:9B:78:92:D0:92:ED
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 019BFF1CDB99F1D5A4075AAC6EB65C7BA90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 17F0
Signing time: Tue 27 Jan 2026 11:00:39 +0000
Manifest this update: Tue 27 Jan 2026 11:00:39 +0000
Manifest next update: Wed 28 Jan 2026 11:00:39 +0000
Files and hashes: 1: Avc3DoG9n8NvJWjUCmVcnkN97O4.roa (hash: YMjpamajsCA46OT3leu0kluW3gE2qUo5wS/kP9h33r8=)
2: Ek07ovRM2Kh_Vc9JMXBQkpJ1Q9o.roa (hash: SY/fpD8jCYcf0UhkUzguL/mEf+0d9gsoahH2LNMAjv4=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: 0ZNgT7XMbOVPWVoiM3yITsALWEFjN6+hcfmHhkX4k30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:1c:db:99:f1:d5:a4:07:5a:ac:6e:b6:5c:7b:a9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Jan 27 11:00:39 2026 GMT
Not After : Jan 28 11:00:39 2026 GMT
Subject: CN=a610c2e8f33b40b2b2ac822eff6e9b7892d092ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:c5:83:1d:a6:2b:e9:c4:c3:d6:f2:d9:2c:
65:08:fb:50:63:99:c5:4c:dc:0d:e9:4f:49:31:79:
54:ce:d3:c4:53:93:84:76:a6:b5:8e:8d:fe:1e:f3:
4a:04:b4:71:db:a7:94:5c:17:be:a2:36:9c:09:d2:
46:f6:62:a2:88:1f:7c:e6:10:5d:2a:b0:c0:d1:80:
a4:55:94:f0:67:ea:84:49:a7:9a:ce:51:fc:7f:c8:
d8:38:7a:3c:c3:01:6d:36:c1:d8:5e:6c:e9:8d:f0:
4a:78:c6:51:8a:5f:12:e9:ef:10:47:08:42:14:a8:
4e:e7:b3:79:67:41:e0:c9:9a:73:15:70:9e:2e:10:
b4:eb:8a:bd:6e:f4:fb:4d:14:42:d9:6c:9e:e3:fe:
a1:f1:f5:d2:7e:b5:fc:97:99:f5:43:7c:23:21:11:
a3:bd:df:41:fe:d8:1d:23:32:1f:e4:fc:45:5c:b0:
2f:82:20:e8:0d:9f:3c:89:bc:b3:ca:27:27:10:cf:
b4:92:5b:eb:ae:83:90:ba:0b:fc:fb:c5:99:c9:19:
9e:dd:24:df:07:03:54:72:54:9e:4d:ab:a5:9d:d9:
71:b3:8f:03:ab:fa:20:23:57:e0:4d:e0:d6:02:a6:
e2:7e:f0:4d:f0:5b:d1:ef:2c:6b:bc:4e:7c:12:f9:
90:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:10:C2:E8:F3:3B:40:B2:B2:AC:82:2E:FF:6E:9B:78:92:D0:92:ED
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:54:5e:05:60:0f:56:f1:54:1f:77:b2:06:d2:37:56:fe:17:
7a:06:53:81:3c:75:d5:8a:79:b9:d8:d0:5f:a3:b9:15:d5:17:
1b:da:fa:d1:a0:ae:b1:31:1b:fc:bf:42:e2:99:2f:83:05:4d:
7c:fc:20:55:80:64:87:6a:7f:32:13:d1:ce:5b:f2:a8:24:28:
3d:0d:bc:d5:07:57:3b:82:b1:05:6e:23:ce:fe:36:0a:45:81:
9f:47:e7:2d:c4:e0:7e:29:a2:f6:f2:62:a6:48:08:e2:4a:f1:
f2:05:65:a7:cb:1e:a3:d9:fa:a2:0d:ed:44:f0:a5:3d:be:b3:
84:1a:e9:57:ee:aa:84:03:c5:30:19:5e:62:5b:95:65:87:b0:
5c:49:ee:79:92:a1:2a:cb:28:ea:bd:c5:e1:f3:6c:71:5c:e0:
e9:96:6e:20:5f:2a:b4:28:f9:99:9e:56:a0:ba:9c:b4:4e:23:
27:d1:c0:83:14:1c:fc:1e:e1:2b:f7:e0:b8:13:d7:9c:c0:8d:
0f:a4:92:0b:ef:37:d6:36:d5:59:9f:4a:c3:8c:10:e0:14:7b:
a1:54:ea:fd:d3:5f:37:52:01:a8:7d:ad:70:e6:31:e5:6e:d1:
81:0a:3c:cd:fe:22:7a:ff:62:18:53:af:cc:00:59:fe:94:af:
11:6e:d8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:18:58 2026 by rpki-client