This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: 85dEmMgZ8xmxGV+u1p0O2MrP62XiPkIeTTrWg4cCzBg=
Subject key identifier: A7:4B:66:CF:BC:74:7D:23:BA:41:B0:47:9D:70:8C:C7:2A:78:FF:82
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019BF6518AF64648A49EB71D2B05DCD0E263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0DF0
Signing time: Sun 25 Jan 2026 18:01:37 +0000
Manifest this update: Sun 25 Jan 2026 18:01:37 +0000
Manifest next update: Mon 26 Jan 2026 18:01:37 +0000
Files and hashes: 1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: D9OVRiT+IwRBbEHL9A92rWlCQg/T+LDvph0LU1tGBtY=)
4: SO3BlzN82wuSE26PkAHoL9gdWK0.roa (hash: 2lTdc7W5+lUgsLYun9vUAbt/KzErih08Dxdrvh4+kG8=)
5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
6: xzU_R1urm6OQwv7-i4Miu0Lg7FI.roa (hash: 83vwjevGkm7TeLLNTTDiOn/v2zo45wBKwUV/hw2Ppgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:51:8a:f6:46:48:a4:9e:b7:1d:2b:05:dc:d0:e2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Jan 25 18:01:37 2026 GMT
Not After : Jan 26 18:01:37 2026 GMT
Subject: CN=a74b66cfbc747d23ba41b0479d708cc72a78ff82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:54:06:8b:ca:96:dc:47:ed:c5:a8:50:00:
d3:c3:4f:91:c8:3d:35:1e:f8:7b:6d:17:b0:83:3b:
89:f5:67:de:19:eb:a2:56:a4:97:0f:b3:13:b6:83:
d3:ed:f5:0e:96:d1:df:bd:c9:4e:2b:d3:e7:c4:b1:
d3:3a:83:0b:48:d7:10:87:60:c5:c9:40:83:eb:dd:
dc:3f:56:35:11:15:c1:d8:90:6c:55:93:e2:90:ea:
c1:43:da:ee:ed:54:c2:af:40:66:02:ad:50:ac:c1:
04:39:e7:9d:8d:c9:1b:97:4f:98:68:92:38:b2:04:
17:3e:ac:98:0a:8e:02:41:4d:cf:7e:08:dd:00:db:
44:83:43:a6:ca:4d:8f:26:9c:49:58:f9:88:82:68:
8b:13:1d:ac:8f:3f:7a:5d:91:a4:ad:cc:11:2e:40:
ff:7f:34:c2:6b:dc:cb:53:a7:d6:1b:11:ed:c9:37:
c6:43:32:5d:d3:a8:dc:76:1c:f7:fe:c4:f1:68:ed:
e0:81:e6:cb:de:b4:b6:82:62:a4:76:b1:d9:90:4e:
83:07:9b:4a:08:83:4e:9d:0b:d9:e1:6b:f8:ff:93:
0c:8f:51:3a:fe:51:02:d8:e4:ab:30:4c:95:b2:c2:
d7:81:1d:c9:4d:e9:d1:a8:a6:bb:4d:56:8e:f5:c5:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4B:66:CF:BC:74:7D:23:BA:41:B0:47:9D:70:8C:C7:2A:78:FF:82
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:78:a4:23:e8:ef:f9:1e:22:ba:e9:ee:ef:1d:bf:c8:73:f6:
d9:a4:93:2c:00:99:35:d2:39:c0:c6:5b:b6:ae:81:b5:1d:c6:
3f:46:93:ce:cf:e7:46:a4:0b:a7:81:51:9f:35:97:95:e9:27:
df:db:cc:ae:ce:7e:5f:5e:09:c9:91:3e:e9:0b:7c:ea:57:03:
56:f5:ba:66:60:f2:b2:b0:59:d8:18:4c:55:74:ec:e7:c9:35:
7a:67:15:e1:df:6e:cb:a8:95:de:74:e4:09:c4:3f:38:7d:45:
e7:32:af:6c:4c:e3:6f:a5:64:2e:17:f0:02:4e:cf:73:1d:78:
31:47:eb:a6:e1:c9:79:d4:d3:cb:c5:fd:9c:c0:04:c5:c4:00:
d5:58:70:82:c3:85:07:e8:2d:c1:08:00:a9:5b:89:44:15:77:
f7:ac:21:9a:94:ae:8c:f3:29:7f:1e:c5:a1:8c:37:10:f8:e4:
bc:a1:92:0b:5e:e6:8f:2d:1b:8b:67:9d:fa:2a:17:d8:aa:85:
42:0b:c2:67:55:37:0e:7a:6c:98:32:87:d8:8d:85:e4:c9:4c:
a7:57:c8:b7:e2:e4:23:16:0a:d5:c3:a4:d7:f2:ed:54:63:e9:
56:f2:13:d1:3a:2a:50:38:dd:9b:cc:6d:ed:d3:ec:16:d7:dc:
63:23:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:52 2026 by rpki-client