This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: GpL3zle+imTfJ1pZ0jivNLau+oMsNVH8sjRNbYGWfbo=
Subject key identifier: 6F:D8:FF:1C:46:2C:3A:C7:91:5C:35:8E:BB:25:68:E9:AE:53:4C:D7
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 019BF4631D1AC45B6AD6C7DD879AC8C7D94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0EA3
Signing time: Sun 25 Jan 2026 09:01:34 +0000
Manifest this update: Sun 25 Jan 2026 09:01:34 +0000
Manifest next update: Mon 26 Jan 2026 09:01:34 +0000
Files and hashes: 1: DIcKsq12i9EBZxhMXx8yAM86cK8.roa (hash: 5zSqEpoGXNoeUDfmGdOAD78MAxgM2DTHwLaUQmzX0AA=)
2: Rujp2Pgf2PYWHGfy3I8rc3wpBk8.roa (hash: +tPqUaxyRYHt9CUS9VC0WOvsrqcfp72H66In7PoQhxw=)
3: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: ZTLVVnx6P2pDaU7fK5vaYjnfgZi2tpVNRjdrZSJFL6U=)
4: V78nEVrkCr-6qVq2YThSOW0v9hQ.roa (hash: xNhsyzIzttzlPtpbDSsbaMS/afTumd4QgcW09/sybCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:63:1d:1a:c4:5b:6a:d6:c7:dd:87:9a:c8:c7:d9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jan 25 09:01:34 2026 GMT
Not After : Jan 26 09:01:34 2026 GMT
Subject: CN=6fd8ff1c462c3ac7915c358ebb2568e9ae534cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:26:a4:1d:2e:26:70:93:de:b3:bb:bd:df:
86:cf:28:05:d2:36:45:94:48:b2:c4:36:b4:69:6a:
88:8f:b6:5f:30:b8:83:09:11:c9:1c:d6:6a:ea:21:
a6:5e:60:e7:a6:32:1f:c2:af:81:ac:f9:f2:34:40:
f8:96:06:09:90:8a:f7:61:39:7a:fa:8c:8d:d4:ae:
6a:32:1e:6d:0a:55:da:54:ac:e8:56:05:a1:bb:fa:
db:fb:6e:9f:3d:59:81:91:47:18:34:89:99:5d:ed:
ac:cb:42:dc:2d:c8:f4:1b:15:d8:c8:04:f8:a2:4e:
4b:41:97:e9:5f:3c:1f:09:45:c2:df:7a:f7:3c:ab:
fa:cc:81:98:7e:b4:cc:00:6e:50:b5:4c:a0:61:94:
2f:e7:9d:80:53:c9:65:ef:4c:7e:50:9c:b4:29:ae:
93:40:00:b1:19:79:f8:2a:41:18:1b:28:ca:03:68:
c2:1a:52:c0:af:b0:ca:fe:1e:1b:43:07:e8:5a:0e:
39:f9:82:26:65:0b:7b:b6:56:a3:c4:f8:2b:b0:7a:
21:3a:a2:db:f6:4c:5d:85:3f:7f:b0:af:db:1d:b7:
aa:04:26:70:4e:91:4d:a9:51:06:21:d0:d4:76:78:
be:cc:0f:ba:99:13:a1:6b:9c:cc:2c:68:d7:5f:a1:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D8:FF:1C:46:2C:3A:C7:91:5C:35:8E:BB:25:68:E9:AE:53:4C:D7
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a2:29:86:c5:e6:fb:2c:28:02:20:a7:45:54:c8:55:d0:fd:
e0:06:c3:d7:28:bd:ec:ce:8a:4d:0c:8e:25:3d:09:7f:fa:e5:
71:65:65:1e:fd:09:2b:90:c0:fa:21:e4:e9:17:54:18:47:13:
8c:86:22:9d:4a:99:50:11:aa:92:0f:4e:4a:1b:0f:57:f3:c8:
f5:a9:6b:7f:95:c8:e7:fc:bf:72:fd:7b:0f:00:00:bf:6c:9c:
8d:60:fb:ec:4e:08:7b:6a:f3:e6:99:fe:b5:ec:d1:b1:93:8f:
67:e3:aa:75:ef:59:11:b3:0c:55:45:4c:39:0e:ab:9d:04:76:
ae:2a:33:c5:42:d9:7d:55:60:b9:4f:6b:6c:e3:ae:a5:eb:0e:
39:fc:53:74:fe:9d:37:2b:e9:fc:0e:be:d5:b1:7d:4a:67:7c:
b0:2a:c4:cc:50:d1:ee:79:5d:8d:02:48:f3:08:1d:49:75:44:
aa:7c:cb:25:2f:ab:b4:6c:b4:71:29:a0:f6:41:41:45:2b:c5:
2a:2a:a8:09:d5:9e:6e:1b:46:72:9a:fc:55:cc:c0:3c:b0:4e:
2c:65:18:8d:21:fc:17:7b:3d:a8:8b:f6:dc:3a:c9:45:07:5b:
eb:be:8f:bd:e5:ca:2f:3b:e4:35:d1:b5:a4:59:55:73:0a:bc:
62:49:ba:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0Yx0axFtq1sfdh5rIx9lKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz
MzhmZmUwHhcNMjYwMTI1MDkwMTM0WhcNMjYwMTI2MDkwMTM0WjAzMTEwLwYDVQQD
Eyg2ZmQ4ZmYxYzQ2MmMzYWM3OTE1YzM1OGViYjI1NjhlOWFlNTM0Y2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxywmpB0uJnCT3rO7vd+GzygF0jZF
lEiyxDa0aWqIj7ZfMLiDCRHJHNZq6iGmXmDnpjIfwq+BrPnyNED4lgYJkIr3YTl6
+oyN1K5qMh5tClXaVKzoVgWhu/rb+26fPVmBkUcYNImZXe2sy0LcLcj0GxXYyAT4
ok5LQZfpXzwfCUXC33r3PKv6zIGYfrTMAG5QtUygYZQv552AU8ll70x+UJy0Ka6T
QACxGXn4KkEYGyjKA2jCGlLAr7DK/h4bQwfoWg45+YImZQt7tlajxPgrsHohOqLb
9kxdhT9/sK/bHbeqBCZwTpFNqVEGIdDUdni+zA+6mROha5zMLGjXX6EEUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/Y/xxGLDrHkVw1jrslaOmuU0zXMB8GA1UdIwQY
MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt
Y2VlYzQ5MTI0YzBmLzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm
LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaIphsXm
+ywoAiCnRVTIVdD94AbD1yi97M6KTQyOJT0Jf/rlcWVlHv0JK5DA+iHk6RdUGEcT
jIYinUqZUBGqkg9OShsPV/PI9alrf5XI5/y/cv17DwAAv2ycjWD77E4Ie2rz5pn+
tezRsZOPZ+Oqde9ZEbMMVUVMOQ6rnQR2riozxULZfVVguU9rbOOupesOOfxTdP6d
Nyvp/A6+1bF9Smd8sCrEzFDR7nldjQJI8wgdSXVEqnzLJS+rtGy0cSmg9kFBRSvF
KiqoCdWebhtGcpr8VczAPLBOLGUYjSH8F3s9qIv23DrJRQdb676PveXKLzvkNdG1
pFlVcwq8Ykm6Zw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:07 2026 by rpki-client