This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: rbJR4j6NmCvhYpZ2JRrgdgCFYkrIXmQkksHxoMnV5Eo=
Subject key identifier: 72:99:A1:2F:46:93:52:BB:CA:42:55:BC:23:04:05:70:F7:8F:3B:83
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019BFCC0E43B3995EFE2BA992230138CEBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 17ED
Signing time: Tue 27 Jan 2026 00:00:58 +0000
Manifest this update: Tue 27 Jan 2026 00:00:58 +0000
Manifest next update: Wed 28 Jan 2026 00:00:58 +0000
Files and hashes: 1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: YmCteRqR2y5WW0c57ugeevnNe/p/WnlaBH4d3xZsYQc=)
3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:c0:e4:3b:39:95:ef:e2:ba:99:22:30:13:8c:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Jan 27 00:00:58 2026 GMT
Not After : Jan 28 00:00:58 2026 GMT
Subject: CN=7299a12f469352bbca4255bc23040570f78f3b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:52:1b:f8:ac:cc:8c:7f:25:20:ac:e1:e4:
26:3b:b5:21:cf:c9:da:97:3d:31:c0:e3:86:33:c6:
11:f5:cc:c5:1f:ad:89:3d:60:f2:c4:6a:2e:e7:27:
6a:cd:75:f4:55:38:d7:d4:48:71:e5:d3:3c:51:5b:
e7:67:21:4f:ce:00:75:c0:9e:38:bd:33:c9:42:bf:
26:bb:7d:5f:e7:9d:26:c6:a6:da:7b:32:f7:bc:3f:
be:c4:01:10:95:5d:bd:a2:2f:4b:69:ea:73:58:e8:
e9:9b:a3:ff:e7:82:9a:51:e4:5a:b1:81:59:ca:a3:
02:50:ad:fc:8d:4e:c8:8f:7c:35:27:3b:b0:ab:ce:
29:45:2a:be:94:2d:1b:44:f3:7c:05:00:ea:02:80:
c1:ac:79:e9:f1:d0:a1:85:95:45:02:4b:d4:de:98:
7d:24:f1:4d:d5:15:eb:96:44:d9:95:06:a8:da:47:
71:b0:9f:03:eb:8c:19:7d:59:d1:7a:cb:4b:40:4b:
a5:68:c6:70:cc:62:2a:f2:4c:3b:a3:69:45:64:e9:
3b:9c:fb:b0:90:03:cb:5d:14:8c:de:2d:20:f1:fb:
86:29:b0:c3:67:61:a8:95:d2:59:c4:3a:d5:4c:26:
b7:0f:86:4a:49:8e:40:a2:64:da:2e:7a:d3:fe:6e:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:A1:2F:46:93:52:BB:CA:42:55:BC:23:04:05:70:F7:8F:3B:83
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:51:cd:54:56:46:81:c4:32:1b:91:0b:fe:f2:32:39:03:d6:
e3:a7:38:86:0e:6d:32:fd:35:24:f2:07:c3:48:bc:06:25:0a:
a2:bc:ea:3b:72:52:33:22:67:22:44:2b:d5:e3:7c:9c:4d:11:
56:8a:d2:39:39:63:3c:27:f7:8a:88:3b:8a:f0:55:de:0b:e4:
43:b4:fd:24:91:c8:b7:25:df:0b:07:57:e6:ca:6b:27:62:33:
79:81:91:37:50:c6:09:19:6b:25:0b:39:d8:c1:de:d7:e9:7c:
39:5e:ab:99:d7:42:ad:81:24:2d:be:c2:a8:41:95:16:42:66:
08:47:d9:84:97:dd:cb:a1:b4:bb:5f:23:38:46:32:04:ad:87:
6e:6e:f3:8d:3a:ad:51:a8:f7:f6:2c:c0:9c:90:b3:e9:97:b4:
89:00:e5:0b:67:8c:65:35:f3:90:21:f8:90:df:92:fb:06:b0:
15:6f:c2:1d:83:cb:e5:fb:2c:52:19:14:c6:52:ee:1f:fc:df:
03:c1:e4:ff:da:82:de:2e:41:c2:4e:49:78:b5:91:ad:fc:11:
04:6a:5a:42:aa:11:28:c2:78:e8:63:e7:c6:0f:7d:dd:48:54:
05:c0:9e:a8:25:4a:06:95:36:f6:50:a4:1a:84:da:9a:87:78:
3d:92:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:51:31 2026 by rpki-client