This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier: +HY6R23cXPztuiMu/dlhrziB4FjR+vVy2qs2i9LyEtI=
Subject key identifier: E1:E8:6A:38:CD:DF:75:24:23:C6:98:CC:F4:9B:2B:21:01:46:25:F9
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 019C0E901F9B637DFB28CEA6123C4C64D1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number: 1815
Signing time: Fri 30 Jan 2026 11:00:52 +0000
Manifest this update: Fri 30 Jan 2026 11:00:52 +0000
Manifest next update: Sat 31 Jan 2026 11:00:52 +0000
Files and hashes: 1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=)
2: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (hash: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w=)
3: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (hash: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE=)
4: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: 56nJdOI6YFqKxwRHVAO6OXZg5DJVmWIqxCeBIkHdPT8=)
5: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (hash: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE=)
6: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (hash: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4=)
7: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=)
8: mWfbcxQdC8J-VBP4j7EBWfW3Qb4.roa (hash: osYbMfspLkdv49SbR62yA1rUcvBEuqW1/Mq+AH8uZCU=)
9: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (hash: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Jan 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0e:90:1f:9b:63:7d:fb:28:ce:a6:12:3c:4c:64:d1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jan 30 11:00:52 2026 GMT
Not After : Jan 31 11:00:52 2026 GMT
Subject: CN=e1e86a38cddf752423c698ccf49b2b21014625f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:92:f3:8f:d4:94:46:99:89:65:68:9f:55:
57:0c:c8:ef:54:17:b1:b0:8e:41:fd:dd:47:8e:a9:
9a:a8:e2:97:65:a9:5d:7c:42:fa:48:d1:df:f8:9a:
d4:11:21:5c:67:06:c2:29:66:06:ae:b9:2a:a5:b4:
7f:2d:25:0b:2b:49:cd:91:0d:54:b1:c9:42:36:d7:
c6:70:87:58:b1:d1:48:08:8c:08:9d:5f:fe:8f:e0:
1b:3a:3d:66:6f:41:94:0f:70:7a:98:54:1e:e5:4c:
3b:f6:33:dc:52:d3:6a:4a:69:e4:cd:e4:6a:a7:2b:
9a:3d:5b:ec:3b:8e:02:98:76:5d:28:00:28:6f:65:
1f:81:1c:cd:c6:05:a7:4b:4d:b1:3e:2e:9a:64:7a:
80:3b:16:a4:c1:b3:29:62:de:fe:4f:4f:f7:49:9b:
82:36:03:2b:2f:c5:cc:46:f5:a1:3a:e6:2d:0f:72:
57:d1:a7:03:25:cb:e8:69:da:4a:42:d3:08:89:57:
41:d3:e8:c1:13:19:27:02:0a:26:2d:83:d7:cb:a1:
4b:59:5d:02:0a:1e:a1:23:62:b5:ed:62:5b:ca:f2:
57:5e:92:d0:8b:5f:51:1f:e8:44:5c:3a:40:f9:e5:
98:12:f3:19:81:1d:31:c7:c0:db:9c:ef:e7:3a:49:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:6A:38:CD:DF:75:24:23:C6:98:CC:F4:9B:2B:21:01:46:25:F9
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5a:aa:5e:12:60:10:72:0f:1b:a1:d7:e8:03:ca:c5:8c:2b:
f7:f4:88:c5:8a:53:a8:2e:38:c9:28:0e:63:e0:fc:52:64:b4:
b2:3a:0e:63:23:ec:59:81:c4:9c:c7:94:1b:72:ec:8a:93:77:
9f:9d:d6:e8:a9:47:01:0a:fd:2c:12:05:6e:b0:86:e0:39:b1:
2c:1c:fc:4b:3a:a5:e1:7c:87:3d:55:66:19:2d:d9:98:b4:4e:
da:1d:8c:d3:e0:c7:51:48:d2:ba:21:47:5e:bb:d3:23:0f:2d:
7a:a5:fa:f7:5f:3a:5d:6f:58:a5:af:43:92:f3:fc:e4:46:26:
c6:a9:df:b6:e6:84:08:38:60:b5:7c:ad:f4:93:0e:23:32:13:
34:e7:69:49:cb:7b:1b:90:2c:fb:d9:ce:8b:66:dc:b1:f7:48:
6b:9d:ca:9e:74:39:d9:09:b6:51:8c:c4:3c:00:2a:5e:f8:05:
8f:33:8a:10:11:0e:99:10:a6:0a:18:39:05:9e:d9:e0:37:52:
ba:3e:8e:21:c0:8e:5e:b1:e6:f0:23:f7:03:7b:dd:0b:bf:00:
0d:4d:a1:67:53:d9:e2:2e:50:76:41:1c:84:e1:53:5c:cf:4f:
8e:04:81:20:d9:1d:cd:86:bd:a3:4c:b3:60:8f:99:ad:65:69:
58:88:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 21:28:44 2026 by rpki-client