This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: xNDzbQPzvQr5xbMlKPuueHOGzYRIEkyWU338Z8nW/og=
Subject key identifier: 15:24:47:4F:BC:8D:05:94:5D:FE:CD:D5:55:99:F5:13:54:B8:91:92
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019BFE41CDC98F008C87041AFCA4E929564E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 07B4
Signing time: Tue 27 Jan 2026 07:01:23 +0000
Manifest this update: Tue 27 Jan 2026 07:01:23 +0000
Manifest next update: Wed 28 Jan 2026 07:01:23 +0000
Files and hashes: 1: 2v9j4cmRBKthQd69OeXDYpcV_J4.roa (hash: JIWzi0oTuF2fjfMhf5T0o4dEjhsNJCahQ3YsDnDQF/k=)
2: hpn4nKhBKlsinaN3vVc_HD13KvY.roa (hash: bzhO685+Hi3OxhZho3Lpnq5Kf5KsQHXcp5yXWuPUGs4=)
3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: dt7OuD2B5RU1R1ToyKZN+5AbMKxXysR+Um3eMveWxYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:41:cd:c9:8f:00:8c:87:04:1a:fc:a4:e9:29:56:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Jan 27 07:01:23 2026 GMT
Not After : Jan 28 07:01:23 2026 GMT
Subject: CN=1524474fbc8d05945dfecdd55599f51354b89192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:35:56:fd:62:b5:34:41:14:20:3f:0e:03:
d4:55:48:37:6e:55:81:14:6b:ea:7a:fb:19:bd:db:
91:0c:ba:1a:cd:a1:05:22:c4:5b:b9:83:4f:3f:8b:
29:48:f0:cf:8a:fa:39:b0:3d:8f:84:79:ed:dc:75:
fa:cf:0f:13:d1:74:0d:8e:4f:40:92:d2:33:c2:e3:
79:67:6f:db:a6:93:c6:17:c6:88:7b:18:f0:bf:74:
03:6f:88:52:0e:d8:53:c7:4a:85:23:04:a5:9a:52:
78:bc:5c:04:ac:be:1b:81:fe:85:c5:6f:1b:28:75:
f2:75:e6:07:13:3e:f3:14:f2:f2:a4:56:0d:f4:50:
28:c7:f8:f0:83:72:43:d0:09:e6:84:9c:fa:4a:60:
c1:74:9f:67:19:0b:2d:0c:8c:60:59:a9:b8:dd:6c:
f8:bb:8c:fc:de:a3:75:55:c0:58:b6:64:8d:1d:f1:
be:a7:32:12:58:d4:3a:2a:80:2b:a6:15:e5:f0:25:
43:09:63:e2:79:50:91:b8:7e:b9:0d:d9:ca:58:2c:
4e:05:9b:f9:89:b9:79:25:4c:48:ad:5a:40:8e:6b:
6c:26:6f:9d:48:5d:72:31:a2:c3:16:98:5f:0f:81:
fd:45:b7:63:7a:77:66:74:90:2c:09:2b:b6:3f:6f:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:24:47:4F:BC:8D:05:94:5D:FE:CD:D5:55:99:F5:13:54:B8:91:92
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c3:e7:84:ce:89:65:5e:27:80:86:31:62:38:bf:93:e6:1e:
da:28:8a:02:95:86:12:08:52:56:c9:e4:53:bf:f3:54:dd:0f:
b3:55:20:9e:6e:e0:7e:c5:fc:e4:d6:4f:f6:12:8f:1e:19:27:
76:23:49:bb:fb:6a:32:10:00:bc:4b:2f:8a:bc:50:f9:05:64:
46:7f:f8:b9:a4:14:4b:fb:a6:34:85:d3:92:f6:57:15:0e:54:
2c:92:77:e3:12:cd:dc:f8:bc:d2:5d:e3:66:85:0a:7d:8d:bb:
d0:a5:31:7b:1b:02:3b:95:4e:50:48:a0:8c:0a:9f:7b:68:b4:
ba:83:fc:f6:67:c3:35:9d:e9:e9:49:4f:50:b2:fb:58:58:55:
51:73:67:c5:82:88:e8:37:a8:f0:08:50:af:c8:7c:df:6c:4b:
26:7e:d7:b7:17:48:d2:48:6e:87:05:88:60:62:8c:01:1e:a0:
f0:d1:ec:9b:a0:34:ef:b8:22:0e:2b:7b:cb:62:ad:9e:3d:2a:
9c:bb:06:6e:00:05:78:f6:68:7d:1c:c1:93:95:0b:03:a4:ce:
50:af:5e:f0:99:42:b4:96:0e:5d:aa:20:16:75:d2:fc:7b:5f:
e3:9b:f9:39:22:87:3e:29:4a:4d:74:b7:d2:46:85:2a:78:04:
2b:6c:7a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv+Qc3JjwCMhwQa/KTpKVZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzRiODUzZGZkOTk3M2YyY2Q5OTRiMmUzYjc1NDYxZDlh
M2ZjNDQwHhcNMjYwMTI3MDcwMTIzWhcNMjYwMTI4MDcwMTIzWjAzMTEwLwYDVQQD
EygxNTI0NDc0ZmJjOGQwNTk0NWRmZWNkZDU1NTk5ZjUxMzU0Yjg5MTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQs1Vv1itTRBFCA/DgPUVUg3blWB
FGvqevsZvduRDLoazaEFIsRbuYNPP4spSPDPivo5sD2PhHnt3HX6zw8T0XQNjk9A
ktIzwuN5Z2/bppPGF8aIexjwv3QDb4hSDthTx0qFIwSlmlJ4vFwErL4bgf6FxW8b
KHXydeYHEz7zFPLypFYN9FAox/jwg3JD0AnmhJz6SmDBdJ9nGQstDIxgWam43Wz4
u4z83qN1VcBYtmSNHfG+pzISWNQ6KoArphXl8CVDCWPieVCRuH65DdnKWCxOBZv5
ibl5JUxIrVpAjmtsJm+dSF1yMaLDFphfD4H9RbdjendmdJAsCSu2P2+GzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUkR0+8jQWUXf7N1VWZ9RNUuJGSMB8GA1UdIwQY
MBaAFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQt
NjViY2M4Y2VmZGQyLzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQtNjViY2M4Y2VmZGQy
LzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsPnhM6J
ZV4ngIYxYji/k+Ye2iiKApWGEghSVsnkU7/zVN0Ps1Ugnm7gfsX85NZP9hKPHhkn
diNJu/tqMhAAvEsvirxQ+QVkRn/4uaQUS/umNIXTkvZXFQ5ULJJ34xLN3Pi80l3j
ZoUKfY270KUxexsCO5VOUEigjAqfe2i0uoP89mfDNZ3p6UlPULL7WFhVUXNnxYKI
6Deo8AhQr8h832xLJn7XtxdI0khuhwWIYGKMAR6g8NHsm6A077giDit7y2Ktnj0q
nLsGbgAFePZofRzBk5ULA6TOUK9e8JlCtJYOXaogFnXS/Htf45v5OSKHPilKTXS3
0kaFKngEK2x6jw==
-----END CERTIFICATE-----
Generated at Tue Jan 27 09:54:40 2026 by rpki-client