This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier: mzGPAdOyEMk2PJQJZyUEnfuD99e0LbGKtiGP6fkE4zY=
Subject key identifier: 8E:C2:A5:A9:58:2D:16:9F:3F:D4:97:D1:3D:96:95:0E:77:CB:82:E0
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 019C08C512E54851D4ECEF0F6A7A8A4DFF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number: 17FC
Signing time: Thu 29 Jan 2026 08:00:58 +0000
Manifest this update: Thu 29 Jan 2026 08:00:58 +0000
Manifest next update: Fri 30 Jan 2026 08:00:58 +0000
Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: IfBxxequwIHWgjXcOj0hfPEDPKuYKqfSB3gkuWu5V+A=)
2: 4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa (hash: 37kfxzMZjAEGlX1IGqlGrRZxkEO+b+KVXD2c+rB8lAQ=)
3: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=)
4: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=)
5: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=)
6: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=)
7: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=)
8: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=)
9: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=)
10: qF5xd0E9VHjEoVDgrR2EV2reNkg.roa (hash: +LVENHANP4Wm2qt1oX01yx6cEEPM3z4kpbtQOwe00sQ=)
11: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=)
12: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Jan 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:08:c5:12:e5:48:51:d4:ec:ef:0f:6a:7a:8a:4d:ff:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Jan 29 08:00:58 2026 GMT
Not After : Jan 30 08:00:58 2026 GMT
Subject: CN=8ec2a5a9582d169f3fd497d13d96950e77cb82e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:0d:90:c4:5b:02:64:74:40:aa:07:33:b7:
8c:7b:6f:dd:3f:c7:cc:8c:5a:40:81:b0:2f:1c:41:
42:1c:cf:a2:7c:14:8e:52:7c:fc:2e:58:01:2b:1e:
99:90:b0:54:4d:3d:ca:90:cf:d3:10:8b:89:20:6d:
85:78:60:d1:4f:8c:66:be:cc:52:49:c9:f5:e5:b4:
70:5b:78:19:41:23:9b:18:f7:bb:48:c7:a5:72:d6:
60:4e:4e:f7:db:07:f5:70:72:5f:c3:51:16:69:fd:
a9:61:9f:05:8b:eb:60:8d:0f:36:17:f6:c4:f6:b1:
20:ba:76:f9:87:50:f0:f6:f4:9d:4b:5a:ee:ce:46:
c6:d0:80:c3:2b:cd:d2:75:ca:ae:23:64:08:d9:29:
15:8b:dd:00:28:1c:98:33:35:44:bd:6f:85:b0:67:
63:30:d1:5a:fc:d9:ae:d0:a3:24:6b:7e:2a:98:80:
39:59:93:af:a7:03:45:43:7e:38:9d:58:1e:e0:43:
f7:22:6e:d3:59:d1:81:c3:57:d6:1a:8c:5b:12:de:
6a:2b:79:e4:14:47:46:bc:b3:a1:a7:84:91:bb:28:
83:e9:d2:c2:0e:5a:28:4e:b5:51:24:28:e9:88:58:
53:68:72:b9:0f:b2:e8:58:42:44:de:07:f1:6e:17:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C2:A5:A9:58:2D:16:9F:3F:D4:97:D1:3D:96:95:0E:77:CB:82:E0
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:64:3a:73:14:b5:32:a6:9e:68:41:50:90:c1:c8:ba:c8:0c:
51:5b:f9:c1:fa:19:14:83:dc:68:2b:42:a1:64:dd:6b:db:62:
c3:da:5a:d2:6a:a2:6f:34:06:75:3c:5a:6f:f9:49:7c:8d:dc:
54:bb:18:57:c2:6d:f6:7f:43:4c:2d:1c:57:dc:9f:11:6c:29:
37:5e:36:53:b0:3f:a7:82:3c:60:f2:17:39:cd:35:ae:70:61:
15:c4:32:05:26:62:c1:3d:97:c5:39:ff:f9:5c:6d:df:6b:cb:
84:7f:90:91:6a:56:09:bc:05:e4:6b:62:93:0c:50:4e:ec:9a:
8f:15:ea:29:e7:08:5f:9c:99:22:8d:06:a5:e1:b8:79:c3:b1:
c6:05:ff:72:48:41:bf:28:54:c7:55:1f:05:28:8d:95:1f:26:
cd:31:78:9e:ad:0b:43:36:26:d0:26:38:a2:48:e1:a7:de:f3:
60:d8:28:b5:0e:77:ed:93:93:5a:9f:98:57:bb:b2:62:10:c4:
57:d4:00:e2:ef:29:62:d7:1f:47:9d:3a:cd:27:ca:74:5c:49:
9e:56:bc:a7:58:df:ce:36:7d:e5:12:b1:6e:50:b3:8d:29:5d:
03:88:b8:48:dc:01:38:36:4a:23:a8:0e:e1:7b:aa:22:a6:3a:
40:ff:ae:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 18:10:42 2026 by rpki-client