This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: Z8pOnkTpIruNfZuftXHY0/qumIIZ/DdzGpxmgNREYlo=
Subject key identifier: 3D:51:5E:02:9F:92:FC:25:0F:A4:DF:D8:B2:12:95:FB:3C:DC:A8:97
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019BF53EDD3F51FE522A51D134C7DACDF3D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 17ED
Signing time: Sun 25 Jan 2026 13:01:36 +0000
Manifest this update: Sun 25 Jan 2026 13:01:36 +0000
Manifest next update: Mon 26 Jan 2026 13:01:36 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: yJjcrkQw5dY1cxR//D5+Qun3Zq1QuEBBEzEOQKHBvaQ=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:dd:3f:51:fe:52:2a:51:d1:34:c7:da:cd:f3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Jan 25 13:01:36 2026 GMT
Not After : Jan 26 13:01:36 2026 GMT
Subject: CN=3d515e029f92fc250fa4dfd8b21295fb3cdca897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:fb:fd:75:75:da:29:8a:0a:df:f0:52:17:
58:db:0b:a1:16:c6:d7:a2:6f:f7:6e:e9:07:56:aa:
c3:de:5a:67:55:31:f8:cd:c7:31:9a:95:1f:cf:50:
15:97:eb:64:5d:1e:71:35:91:d1:e9:08:b9:cb:81:
3f:74:f3:b6:17:6b:8a:1d:a4:a6:63:56:50:e2:93:
ec:8c:6e:8f:15:b8:60:b9:99:84:72:30:89:56:b2:
29:f7:56:ea:8e:c8:12:b8:98:1a:95:68:d4:5b:96:
93:94:ba:39:fa:13:62:97:5b:d7:fa:40:38:6a:28:
db:3f:9e:04:6f:b6:f8:cc:f6:c2:a8:f1:20:47:f2:
dc:5e:10:81:b8:88:73:f5:88:2d:7b:3d:38:d3:f2:
0e:5b:80:08:fb:30:49:fd:ca:8a:ad:4e:c9:86:eb:
6d:ee:9d:4b:5c:9c:9d:14:8f:20:1a:58:b6:08:9b:
86:34:98:a0:0b:bf:68:de:24:23:d9:3c:fd:02:fa:
49:42:ea:0e:a1:4c:9b:37:6e:ef:79:79:5b:02:18:
47:28:67:2c:52:4d:09:6c:a8:bc:1d:46:67:1f:65:
b6:c9:ee:58:9a:8c:d6:21:7b:23:51:c9:44:f4:28:
22:28:9d:6e:97:96:c2:37:38:b1:17:c5:77:8c:72:
50:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:51:5E:02:9F:92:FC:25:0F:A4:DF:D8:B2:12:95:FB:3C:DC:A8:97
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1c:49:fa:74:84:2c:3b:bc:40:48:4f:3f:0e:9b:64:f4:70:
46:81:f2:d9:e4:e4:cc:ce:39:95:25:0f:6e:71:fb:03:75:62:
89:1c:82:c5:3c:f0:d3:d9:7c:6f:ce:06:43:1c:d5:6d:ef:63:
92:e2:bc:8c:88:4d:16:bd:e1:ac:3f:a9:3d:c5:80:e0:0d:ae:
ca:9d:43:45:5f:d3:58:df:f1:be:ed:5c:3b:7c:30:37:15:e0:
b9:f4:7b:5c:7d:ae:8f:03:62:f8:4e:ab:d2:8a:1f:69:07:a1:
49:3f:84:28:4b:c6:6f:b5:a4:4b:ac:9a:2a:42:d7:34:07:a3:
4b:44:00:91:26:70:27:d4:0d:52:75:e9:e9:d7:b6:67:82:44:
50:60:e6:9f:ea:ee:d4:e9:a1:23:67:b6:2d:77:e7:e0:6d:66:
26:c8:f4:c4:7e:20:33:00:f8:7a:f5:14:17:c7:19:0d:e2:2a:
88:d6:13:c6:f5:31:c7:f8:3d:bf:54:08:5d:0e:0e:ca:3a:40:
77:37:48:de:3c:b0:7d:17:15:a0:48:ad:9c:12:12:2e:69:b6:
e7:4f:0a:a6:c2:51:d5:8a:62:32:9b:3c:3e:b0:4c:6a:89:7d:
e3:b0:7a:aa:19:9b:0a:3c:92:fe:c2:69:c8:5b:73:75:d1:8d:
0a:22:8b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:17 2026 by rpki-client