This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File: maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier: VQRjHJtCD2BVGKHrzgYK6E0+QE4qgEnLls/Vo+1bL3I=
Subject key identifier: CD:D3:2E:27:F7:25:7C:76:6A:B3:FA:19:F6:54:7D:80:DF:83:FC:61
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 019BFEE669D88D5984F283EB7DCD5BA2582D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number: 17F4
Signing time: Tue 27 Jan 2026 10:01:11 +0000
Manifest this update: Tue 27 Jan 2026 10:01:11 +0000
Manifest next update: Wed 28 Jan 2026 10:01:11 +0000
Files and hashes: 1: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=)
2: YoLNLyuosFKuT_-ema2hiJHs0ZY.roa (hash: hWuyH98+DzBIQmHmAmY9RDKZV1I45ddKJD4en0HvYcI=)
3: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: gVVOX0AFA3uBz5OAQAXVW1BwClRPJL2OLn6HoACxwEc=)
4: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=)
5: poLUczAkpZ-X35ck8qyvSthMHVI.roa (hash: 0jkj8MirRFlW0k6UiG4ranSvkFvq8sDiHxNpMa/cyFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:e6:69:d8:8d:59:84:f2:83:eb:7d:cd:5b:a2:58:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Jan 27 10:01:11 2026 GMT
Not After : Jan 28 10:01:11 2026 GMT
Subject: CN=cdd32e27f7257c766ab3fa19f6547d80df83fc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:29:dd:2b:a3:49:80:ed:52:92:4f:a6:84:
99:cd:88:3b:fc:6b:f7:92:ce:3a:4c:8d:f9:ed:24:
a4:9a:77:4a:55:4a:68:c7:65:de:b8:2f:e4:e0:90:
89:f3:f4:fe:0d:e8:d4:40:4c:b6:01:b7:95:d6:ed:
c8:24:b4:a2:7c:39:2d:4d:c4:26:18:f1:df:3a:d5:
b1:4b:eb:0a:9d:20:d7:c8:d9:27:aa:e3:27:f8:30:
b3:45:66:25:5e:ca:b5:57:25:bc:79:b6:a5:d5:aa:
ac:e9:76:38:00:37:2e:c2:d5:f0:99:3c:56:03:94:
ec:ef:79:63:9c:a5:f0:69:93:c6:e3:42:fe:70:d5:
cf:fd:5f:88:54:7d:64:b4:29:c4:cc:ea:a0:fb:23:
ed:4e:9b:25:9c:dc:d6:28:34:39:cb:48:c5:59:f5:
f0:92:c8:15:27:a2:a1:e1:59:f6:59:40:c3:05:46:
92:b3:ca:91:49:bf:a5:b4:a5:63:4d:3d:be:a9:37:
50:b3:83:1c:c4:f7:ef:7b:31:85:26:44:10:6c:50:
4b:88:df:ac:fd:98:e5:2c:1f:a8:14:5c:f8:64:57:
72:1c:24:da:42:23:6b:3d:a4:e2:83:1e:93:5a:6c:
f7:a8:30:8b:cf:e5:06:96:fd:e8:ac:a0:d8:56:04:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D3:2E:27:F7:25:7C:76:6A:B3:FA:19:F6:54:7D:80:DF:83:FC:61
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:31:e0:46:06:4a:47:76:38:69:c9:9a:cf:e9:29:1f:62:9f:
12:13:55:e9:1f:ec:04:35:ce:2e:ba:4e:f2:0f:e5:28:a8:a8:
37:94:7c:7d:7f:55:be:64:63:bc:55:fe:50:06:1f:8e:e6:43:
9e:4f:1e:9d:4d:5c:68:3a:ed:0c:cf:f9:10:45:c0:9b:f0:f9:
6d:0a:af:60:23:af:6c:90:43:1c:24:8a:7a:47:44:a7:99:f2:
7f:57:4f:21:e9:59:25:df:62:9f:f7:6a:6a:27:44:9a:4d:ef:
01:cf:81:8b:67:db:e8:0c:47:bc:0e:51:20:fd:e1:e8:02:f5:
67:bc:e6:d8:3c:73:25:3c:1c:4d:8d:cb:c4:38:5b:cc:8d:d4:
be:80:3e:b7:50:23:d3:d1:f1:bb:ef:9d:c7:8c:d8:45:4f:91:
a7:88:49:6c:44:63:f1:b6:f7:f6:a1:f8:00:76:12:32:cc:b2:
60:a8:8d:78:73:76:1b:cf:f5:62:95:f7:52:be:08:79:b9:d6:
bc:d5:7d:37:f6:f8:b3:db:59:f7:40:ba:9d:1a:8e:5b:6d:81:
68:e8:94:d1:f4:5e:29:b8:f9:88:fa:27:27:74:7d:4d:df:1c:
b6:fa:59:3a:5e:c0:7f:f4:21:89:13:c1:f4:08:7e:c8:09:38:
00:02:fb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 13:20:49 2026 by rpki-client