This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File: mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier: vMgn4ZYE4OPPB7oznkub3KEFE8ZG+07CrlORr1c8Mm8=
Subject key identifier: 14:00:EA:83:70:B5:4A:66:49:B6:87:9E:A7:C3:F8:0A:34:43:C4:A4
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 019BD9FDE7469E1F70FDAA82F291CD4F9DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number: 17E0
Signing time: Tue 20 Jan 2026 06:00:54 +0000
Manifest this update: Tue 20 Jan 2026 06:00:54 +0000
Manifest next update: Wed 21 Jan 2026 06:00:54 +0000
Files and hashes: 1: 9WusnEA7UsiroKwVXFKCOaUJb3c.roa (hash: fb+KrV1ZjwlDY775gAvNE53AejRLewrgw0HPLBs+ie0=)
2: EpVqLX2wGdjg6RHIKlcFAYrzxZM.roa (hash: I+GdKkkhDVqSQlbstKKL56Ml+Mm3LF7CHLrw/iB8Sm0=)
3: IkDgMGh9UUmRviqmiJ_OYP1f9S4.roa (hash: RuDafgx85YwCS+Dkl1AZk67UPodQ/qCtU6vOrFp0Dc8=)
4: ahiZqqU1sLMyuZr836gd9oxj7Kw.roa (hash: ihPj0GX7KiHEc0nRL0sGVIybPI61K8/7t6F6pKkft+0=)
5: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: cQEEnMhb19MKbu+BkLTBL/hvGu2vy6+8txBQowhnCXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d9:fd:e7:46:9e:1f:70:fd:aa:82:f2:91:cd:4f:9d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Jan 20 06:00:54 2026 GMT
Not After : Jan 21 06:00:54 2026 GMT
Subject: CN=1400ea8370b54a6649b6879ea7c3f80a3443c4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:92:22:76:54:07:c6:3e:89:03:f4:e7:fd:
85:fc:1c:50:4b:22:7f:a9:9b:1b:a4:b1:82:70:ae:
9a:3d:89:5a:ea:93:ea:3d:f5:67:d9:c9:3f:1e:74:
e0:c4:d1:8d:a2:95:d2:df:39:4e:29:95:a6:94:1f:
11:70:75:4e:99:47:76:d5:5b:fa:80:21:c1:05:ec:
69:a9:67:d6:6f:2b:df:46:a8:89:92:a5:bc:c6:c9:
ef:38:9a:95:db:98:89:77:5c:e4:a4:c2:23:c9:d9:
a8:e4:cf:d6:3c:e6:c9:24:77:e1:b5:68:af:37:1d:
47:9f:39:e2:88:b4:c9:90:68:de:99:a2:64:fd:be:
42:ab:cc:4e:ce:82:64:dd:70:2a:0d:eb:fe:f9:97:
40:83:b0:68:fd:6e:6a:f4:78:fd:8b:d8:ae:ed:00:
99:d2:f0:a1:c6:0d:04:ba:e8:99:fb:71:59:c4:5c:
a9:f0:ad:35:55:93:b3:62:0f:55:8d:09:d6:05:8f:
9b:17:e5:77:e1:6f:8a:38:42:fa:03:f9:b0:7e:20:
6c:d3:c6:86:3a:fb:dc:2d:e3:68:81:c4:4a:d5:58:
1f:16:2d:61:82:58:4e:60:b1:6e:6b:50:a1:a9:d2:
f9:d6:94:f3:52:4b:ff:e8:02:4e:51:9c:aa:f1:92:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:EA:83:70:B5:4A:66:49:B6:87:9E:A7:C3:F8:0A:34:43:C4:A4
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:53:53:78:76:2a:ca:62:48:ed:f0:60:db:0b:0a:5e:c1:f1:
8e:79:e8:7f:f5:df:35:2c:ef:94:cb:c9:49:59:d3:b1:38:a0:
d0:a6:49:f8:42:0b:d4:5a:fb:81:b1:0e:fe:dd:a1:35:7a:b9:
d3:54:e1:8a:9e:05:b8:65:1c:ae:b4:f4:82:f7:cf:ee:6f:bf:
7a:8f:9f:78:0a:85:76:4b:f6:bb:dc:b1:88:ff:33:08:d1:78:
50:d3:76:07:02:1f:8c:4e:8f:7d:32:52:85:ad:43:f0:a6:6c:
52:b6:ca:ab:e0:6c:41:7c:c8:d2:cd:42:7f:97:06:e0:5a:4d:
fc:4d:ba:ec:5e:88:af:73:18:c9:54:93:b8:54:4d:ce:9f:74:
1d:80:1d:29:c6:73:d7:75:c9:f9:46:ff:f4:4e:d1:55:ed:02:
49:90:f7:d1:f4:0d:7c:5a:59:a7:d6:29:40:40:39:b6:b7:20:
6b:b1:1d:25:00:2a:f9:1e:7b:9a:1e:27:04:42:a3:80:d0:52:
69:3c:df:47:30:bc:f4:9a:d0:15:54:b5:38:0c:9a:a1:19:56:
19:42:3c:26:e3:04:ae:3d:6d:8e:ac:e5:c0:d8:c3:d0:b8:7c:
8a:45:85:34:7d:11:b0:16:c2:8e:44:cf:6a:30:da:d9:f6:97:
e4:4b:4c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:27:09 2026 by rpki-client