This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: 9GWtSK2YTqUL9nJ1ktkmBlD0S5GXpJ2TjF+iFcRx36M=
Subject key identifier: A9:7D:7D:A7:D5:0C:76:76:18:5D:0F:53:F3:56:74:49:A0:2D:6A:2E
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019C06A07342B51A8B55A6B3B596A63FDAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 12F1
Signing time: Wed 28 Jan 2026 22:01:44 +0000
Manifest this update: Wed 28 Jan 2026 22:01:44 +0000
Manifest next update: Thu 29 Jan 2026 22:01:44 +0000
Files and hashes: 1: Bik7m89vzRCco3M88nPjZHbkJFs.asa (hash: E3lk8QC7FZHK6rDbU0vSs7vixcRg0VKIQc1p3hHw6G4=)
2: Dj17YO7HbdYhrlszRZcVGHooOSk.asa (hash: VPbBekLjuZ5VGctqJAL3rNUq/TMi3GHdtgrxOZNiX2M=)
3: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: W3IQo0WItG2aDxpj72nltAjHuA+De0DuDbE+uIMWkB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Jan 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:06:a0:73:42:b5:1a:8b:55:a6:b3:b5:96:a6:3f:da:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Jan 28 22:01:44 2026 GMT
Not After : Jan 29 22:01:44 2026 GMT
Subject: CN=a97d7da7d50c7676185d0f53f3567449a02d6a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:ac:bd:c7:d5:6b:9f:c4:37:56:19:91:bf:
1b:1c:8d:0a:7c:1a:fd:46:52:fd:ef:7a:56:39:8d:
94:6e:f3:60:ae:d9:0c:ec:2e:e8:9e:89:ce:26:f3:
c2:a7:4c:6e:99:3c:3d:ce:98:d2:49:ce:0e:a9:dd:
54:95:8d:31:56:6b:69:9f:9e:18:28:e0:06:69:15:
ea:d9:88:e3:d3:a8:91:56:a5:3a:55:d3:33:55:39:
e4:6e:08:c5:fe:00:94:36:d0:58:77:c2:6e:c2:82:
05:3d:8f:ae:81:bf:ab:1f:20:cf:6f:b0:d1:f7:0e:
b7:38:11:8c:b4:13:7d:a7:5b:f9:59:0b:b7:72:e3:
c2:79:b5:5b:3e:2a:50:ad:b4:94:13:12:a4:ef:73:
b3:c5:19:09:96:65:eb:ed:9a:1e:8f:e1:a4:10:f8:
c5:44:fb:8f:a0:1c:98:57:3a:3c:1e:18:93:12:59:
8b:d7:b1:02:3b:56:54:e4:0e:22:bf:9e:98:58:2a:
4c:a4:1c:62:40:eb:ca:d3:ed:04:06:9e:7a:5b:c0:
e6:7e:20:6f:83:60:32:bd:df:2f:0c:94:e0:1f:ae:
76:f5:a6:34:42:e6:3e:0c:d1:c8:62:a9:f2:d7:ae:
d1:b9:5a:b1:91:59:a3:8f:ef:b1:63:27:f5:19:ca:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7D:7D:A7:D5:0C:76:76:18:5D:0F:53:F3:56:74:49:A0:2D:6A:2E
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:db:d6:a1:f6:e2:bf:e6:3e:96:00:f6:5d:0a:fe:b0:0a:b8:
63:3a:4c:e4:7a:63:08:42:c8:e5:09:de:e5:f8:8d:8b:df:2d:
40:af:a9:94:1d:f6:0b:cf:8c:f0:86:2d:34:ed:e5:19:99:32:
60:3b:7b:d5:71:4f:39:3d:2b:68:1a:4a:f8:c3:d9:8a:e9:40:
f6:c3:a0:c6:38:ff:7b:ca:ca:74:b4:66:f4:c3:c3:d2:ab:2b:
97:7b:ad:d7:67:1e:b1:8d:95:21:c7:e3:fa:2e:18:c4:30:1d:
e3:ce:bb:34:fa:b3:f9:46:dd:00:52:05:63:01:b7:69:02:49:
5c:c7:3f:67:62:e2:5d:53:81:02:7c:25:7f:e1:92:ae:7c:81:
15:4e:24:14:04:c1:4b:3c:5c:f4:41:32:c5:1a:c9:23:79:44:
2e:bf:9f:1d:c8:27:35:4c:ad:0d:b1:1b:b7:64:e5:85:04:f4:
6b:47:76:a9:f3:58:66:49:c3:5f:38:c3:f2:99:cd:b9:da:13:
92:c9:4c:33:a7:72:32:15:1d:06:1f:a9:1c:3a:bd:45:ab:da:
1e:b7:e1:c5:7f:77:f5:57:7e:f0:b7:0c:ff:fa:3e:fb:54:b6:
6b:ee:79:26:b4:28:64:20:e6:09:98:76:ee:b3:88:67:53:33:
f7:85:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:23:28 2026 by rpki-client