This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File: 2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier: K7TkmxzXfHASwAo/5yZm+3vSRV5nkKDpd7v/QPgIbVA=
Subject key identifier: 97:C0:5E:40:68:5A:B6:D7:87:B3:5B:2D:29:D6:21:7F:2D:A2:27:50
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial: 019BFB40B4C1A4ADE46BAA39FC4AE5D688FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number: 14EA
Signing time: Mon 26 Jan 2026 17:01:20 +0000
Manifest this update: Mon 26 Jan 2026 17:01:20 +0000
Manifest next update: Tue 27 Jan 2026 17:01:20 +0000
Files and hashes: 1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: tAepvIv+Yk1xUvgwrD94ZIvmEDf9nT2vf5mfclVC2kA=)
2: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (hash: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk=)
3: K7KxlLY2WatJsywG92R4ecjbJts.roa (hash: 8xdVDeeroKkICVR29LmlWFlFnGabZ7Twpz4B/6DfSks=)
4: NDgqCtDrOUYcmZnr7ZqMrN3yeTM.roa (hash: aFsHKPD3aDqi8AsyYFkl+KwMr/91eKpghE7dmjN+xQ4=)
5: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (hash: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:40:b4:c1:a4:ad:e4:6b:aa:39:fc:4a:e5:d6:88:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Validity
Not Before: Jan 26 17:01:20 2026 GMT
Not After : Jan 27 17:01:20 2026 GMT
Subject: CN=97c05e40685ab6d787b35b2d29d6217f2da22750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:f3:eb:e1:83:9c:43:cc:60:34:e5:d2:39:
df:86:2d:14:85:3d:c3:d6:05:b5:e4:03:35:3e:5e:
af:de:98:92:93:c2:4d:3f:fb:97:b7:73:b1:51:a8:
21:82:6e:8f:d5:66:0b:70:79:5a:fb:9e:fb:86:c5:
0e:00:35:b5:5c:1d:41:85:4e:f5:ec:bf:3a:1a:a9:
45:66:e3:01:44:25:e0:52:64:b2:67:20:6c:31:ff:
99:d6:26:04:c2:d9:af:41:d8:f0:6b:b9:65:19:b8:
23:0c:68:d0:22:0c:8f:ea:d4:20:cf:a9:af:11:45:
5b:c4:58:f9:e5:42:48:3c:61:3c:b3:4c:e5:6d:0f:
59:5c:69:f1:74:ae:18:ac:b3:b4:e8:d1:c0:f3:20:
e3:5c:7c:7c:04:f2:2c:74:88:9e:ec:99:97:a3:70:
7d:b7:1c:b1:7a:39:b1:17:1e:88:1d:7c:7f:9d:6d:
bd:82:f2:1f:68:26:0c:e1:70:27:68:dc:d6:92:4b:
ad:ee:6d:e2:1d:02:eb:11:81:09:dd:75:aa:8d:42:
b3:2b:f8:72:4b:b6:51:3b:bf:ad:91:5d:53:73:50:
cf:8b:66:ae:0e:05:74:d2:8b:ae:8f:75:27:29:32:
8a:11:38:5c:fc:bd:af:40:1f:39:a4:99:e1:1f:98:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C0:5E:40:68:5A:B6:D7:87:B3:5B:2D:29:D6:21:7F:2D:A2:27:50
X509v3 Authority Key Identifier:
keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ee:87:8c:be:bb:d2:0a:fd:fa:d4:46:b9:27:be:9b:e8:b9:
62:00:7d:6a:ec:44:fc:bd:58:f3:8f:8f:6d:27:b4:ef:0c:af:
c8:0e:71:40:6f:20:8a:70:18:39:0e:58:46:88:d4:bb:a4:81:
3a:79:67:64:b0:14:f9:7d:a7:05:4f:19:86:7b:5a:41:4c:64:
07:30:8e:e8:51:52:97:fb:4d:f1:fe:19:70:0b:92:c3:45:d8:
d2:8b:16:70:6f:69:e1:27:cd:fe:21:44:42:6d:3e:cc:0f:6c:
c2:66:35:bd:3c:98:51:08:0d:b5:58:7c:55:90:5d:ec:b9:6e:
6f:6f:2d:3c:3f:d7:0d:7a:7d:98:95:3e:82:06:fc:b0:d4:ee:
a3:ee:a9:46:43:36:32:23:8e:6c:96:cc:dc:4c:66:06:bb:ba:
fa:31:8d:d9:d8:9b:c6:09:24:de:a7:f6:f8:3d:55:62:52:e0:
ed:d7:20:4a:97:c1:a4:09:d3:2d:24:10:78:6c:58:b3:d9:32:
e4:d0:0a:6a:86:00:ac:4a:af:70:b9:2f:a9:80:2b:fd:08:6e:
1a:d3:52:53:e4:b7:57:25:0d:11:a8:ef:39:df:cf:09:56:26:
eb:0e:85:39:52:4d:05:e7:bb:23:81:f8:14:fa:6d:3c:8e:4c:
c9:ce:68:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv7QLTBpK3ka6o5/Erl1oj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YTk4ODkxNmQ1MTQwNmY5YTI2OWYzMGEwMmQwMDg2YjU3
ZjRkNWEwHhcNMjYwMTI2MTcwMTIwWhcNMjYwMTI3MTcwMTIwWjAzMTEwLwYDVQQD
Eyg5N2MwNWU0MDY4NWFiNmQ3ODdiMzViMmQyOWQ2MjE3ZjJkYTIyNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIXz6+GDnEPMYDTl0jnfhi0UhT3D
1gW15AM1Pl6v3piSk8JNP/uXt3OxUaghgm6P1WYLcHla+577hsUOADW1XB1BhU71
7L86GqlFZuMBRCXgUmSyZyBsMf+Z1iYEwtmvQdjwa7llGbgjDGjQIgyP6tQgz6mv
EUVbxFj55UJIPGE8s0zlbQ9ZXGnxdK4YrLO06NHA8yDjXHx8BPIsdIie7JmXo3B9
txyxejmxFx6IHXx/nW29gvIfaCYM4XAnaNzWkkut7m3iHQLrEYEJ3XWqjUKzK/hy
S7ZRO7+tkV1Tc1DPi2auDgV00ouuj3UnKTKKEThc/L2vQB85pJnhH5isCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfAXkBoWrbXh7NbLSnWIX8toidQMB8GA1UdIwQY
MBaAFNmpiJFtUUBvmiafMKAtAIa1f01aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDIt
NGQwNDlhMWVhZjJmLzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDItNGQwNDlhMWVhZjJm
LzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHu6HjL67
0gr9+tRGuSe+m+i5YgB9auxE/L1Y84+PbSe07wyvyA5xQG8ginAYOQ5YRojUu6SB
OnlnZLAU+X2nBU8ZhntaQUxkBzCO6FFSl/tN8f4ZcAuSw0XY0osWcG9p4SfN/iFE
Qm0+zA9swmY1vTyYUQgNtVh8VZBd7Llub28tPD/XDXp9mJU+ggb8sNTuo+6pRkM2
MiOObJbM3ExmBru6+jGN2dibxgkk3qf2+D1VYlLg7dcgSpfBpAnTLSQQeGxYs9ky
5NAKaoYArEqvcLkvqYAr/QhuGtNSU+S3VyUNEajvOd/PCVYm6w6FOVJNBee7I4H4
FPptPI5Myc5ofA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 20:29:47 2026 by rpki-client