This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
File: 46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json)
Hash identifier: AYZ4zaqId6hSl45ohYTBc3xNesmfbFC8HIvuOGkc/94=
Subject key identifier: 92:D9:3C:E5:D4:F1:51:FC:97:38:3C:13:94:5C:7B:8E:9F:7C:20:46
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Certificate issuer: /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial: 019BF72D5659E7F841298AF6E7656616EDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 22:01:42 +0000
Manifest this update: Sun 25 Jan 2026 22:01:42 +0000
Manifest next update: Mon 26 Jan 2026 22:01:42 +0000
Files and hashes: 1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: FyfZcOfMw3xrQlkfsQ30p+KUUwXj0Z5aQ6MqACkHl24=)
2: gM8ofdQeGubU92gq-aGGa-zvY6Q.roa (hash: 3xpADweqEfrOHaBnc8vO2OLZLCKpNhwxUy/JAhbOyTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2d:56:59:e7:f8:41:29:8a:f6:e7:65:66:16:ed:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Validity
Not Before: Jan 25 22:01:42 2026 GMT
Not After : Jan 26 22:01:42 2026 GMT
Subject: CN=92d93ce5d4f151fc97383c13945c7b8e9f7c2046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:59:70:22:c6:12:bc:8d:f4:55:94:04:54:
fc:b2:78:40:5a:44:1f:cf:f1:59:e0:a7:8a:8e:8e:
0c:fe:ee:71:88:5e:cf:7c:1c:df:5d:4d:3a:14:51:
71:29:07:3f:7b:6b:80:01:b9:db:9c:6a:e7:ea:b7:
c2:b7:ec:75:f4:0e:96:11:e0:75:e3:95:eb:8e:30:
5c:86:bd:c9:7a:72:7f:2a:86:df:fb:38:ad:b8:4c:
67:de:56:fa:59:e1:e7:48:73:81:85:83:68:ac:4b:
35:cd:ed:db:f1:52:cc:d4:5d:a9:13:52:8b:ae:70:
cc:99:37:4a:8a:4f:fa:65:cf:50:be:23:6c:55:04:
b6:b0:f2:b4:0b:24:10:c7:7b:c8:ba:c0:b6:20:cf:
0a:07:97:bd:1c:2c:c5:0c:c1:c7:db:fc:db:6a:ff:
98:d6:63:91:f7:14:3a:60:72:7b:62:77:8f:4b:eb:
a6:e6:ba:01:92:a7:be:ce:dc:b6:0a:0c:cb:06:63:
97:22:cd:b3:76:ae:36:a3:c0:db:63:65:07:ce:22:
d4:0a:be:12:4a:87:44:1b:93:c1:cb:35:b0:73:92:
04:6e:cd:6f:ea:ed:1e:ba:5b:7d:3b:2b:2a:52:84:
96:bc:ea:f3:82:67:c2:5b:bd:19:d6:14:3d:98:dd:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:3C:E5:D4:F1:51:FC:97:38:3C:13:94:5C:7B:8E:9F:7C:20:46
X509v3 Authority Key Identifier:
keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ed:70:47:27:c5:fb:8d:d8:c8:4e:5a:29:47:78:07:38:e8:
6c:e5:0b:91:c3:47:00:65:77:59:dc:0c:6d:b5:10:b4:5f:6f:
04:eb:44:fd:83:79:8b:53:a0:10:fe:2b:05:e3:62:8c:6f:f1:
45:d2:78:9b:43:99:0f:14:b5:7b:df:ad:4f:65:76:52:2d:62:
58:54:c8:1b:30:db:f3:f5:f8:09:6c:75:22:17:e6:7e:31:a8:
34:7a:a8:91:6c:8f:e5:68:45:06:48:7c:fa:9d:9f:b8:64:58:
9d:0a:19:3c:86:c5:24:37:a9:63:b9:a6:95:03:47:5b:76:c1:
a2:b0:0b:0d:2e:1f:19:8c:ce:3f:71:67:96:14:77:5d:0f:ac:
25:b8:e3:a5:e8:15:82:a1:7f:52:85:f7:3a:d4:c3:0b:6e:3d:
26:a1:ab:4a:10:2d:03:0f:64:6c:37:01:8f:24:52:df:91:c2:
7f:24:23:1f:6f:86:af:1b:a8:8c:38:39:dc:a8:32:8b:55:f4:
b8:22:47:7a:52:cb:29:75:c0:dc:d9:4b:dc:03:92:e9:ec:3a:
60:ff:be:44:e2:33:50:85:67:ab:59:4b:11:f8:d0:79:ef:ef:
0c:21:7a:b4:4b:6e:5d:91:a1:06:a0:0a:5f:d8:44:31:d7:27:
fa:c2:4a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:23:35 2026 by rpki-client