This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File: 977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier: 0H+RJp181RfJtGhCHttPbNPFIpi1M8JWL5Qx9clNp2I=
Subject key identifier: 3B:6F:A1:0B:D6:81:D5:F9:5C:83:3B:9A:24:BF:54:16:00:86:5C:35
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 019BF7D14377408C62B52C72D10E48D2D6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number: 17F1
Signing time: Mon 26 Jan 2026 01:00:45 +0000
Manifest this update: Mon 26 Jan 2026 01:00:45 +0000
Manifest next update: Tue 27 Jan 2026 01:00:45 +0000
Files and hashes: 1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: OjPXETkjusVORNhRoOTUM6xqj8SOhGzzTTJsXfZsPmc=)
2: K9ARhNUPke1FUpRD3jCOS20cCT8.roa (hash: xemlBpuRtqlzVTp6vvfqrvYIR9l5jVMyrtmPWS3Y4YY=)
3: uGNfdvA7X3WyOFyt75e9tVBH91A.roa (hash: 5//JVVveSwHR2hj+bfwWqReYip5bDufgsCMYkbkcBgE=)
4: w_HVWxfgMKccvm-uPAq_mXE30RI.roa (hash: nRyRk7kTehxIu33cjbfvuUdw6sNcxsEjbFzAJfWoy80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:d1:43:77:40:8c:62:b5:2c:72:d1:0e:48:d2:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Jan 26 01:00:45 2026 GMT
Not After : Jan 27 01:00:45 2026 GMT
Subject: CN=3b6fa10bd681d5f95c833b9a24bf541600865c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:77:89:53:6c:4c:85:f7:e8:3f:43:bd:12:
24:99:68:3d:2c:ca:e7:bb:40:93:4c:75:f6:ee:af:
25:d9:4c:0e:b9:06:dd:c4:cc:59:07:37:d3:79:0d:
c5:f2:5f:df:3c:c1:88:09:58:ab:ee:53:37:57:da:
e2:05:73:f8:4f:1d:f9:18:b0:92:ae:b2:cc:8d:2f:
ee:3e:b8:c8:40:c6:e2:e5:18:07:7a:42:83:30:af:
f1:53:81:8d:70:03:13:84:c8:84:b7:8d:10:d2:6f:
9a:30:95:ab:aa:be:f3:8b:85:de:ab:7f:1f:e4:1d:
0d:ed:91:79:a9:e3:45:a8:dc:7d:90:7f:23:31:10:
c9:08:a6:62:cc:69:6e:4c:54:a6:6a:d8:58:06:dc:
54:22:8a:6a:95:da:6b:d3:b1:a4:41:06:3a:db:26:
52:1a:c1:67:cb:f6:bb:c7:d2:66:4a:64:29:8e:88:
77:34:2b:42:5d:e2:24:57:30:09:25:30:bd:d8:a0:
90:4b:25:a3:04:c6:bb:91:8b:72:f0:8e:9e:21:0f:
e8:47:dc:cf:9f:db:df:22:37:0b:47:9a:84:36:13:
51:39:fc:1d:e4:ff:ee:e0:7a:c1:8e:a3:d6:f2:3a:
89:a2:03:4b:00:bd:1f:7b:f0:25:3a:56:e9:26:09:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6F:A1:0B:D6:81:D5:F9:5C:83:3B:9A:24:BF:54:16:00:86:5C:35
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b4:00:0b:97:07:d3:29:d9:1f:1c:35:62:a8:37:89:15:3e:
1f:26:e7:91:e9:34:dc:91:b5:18:d8:ff:92:46:03:51:4a:e8:
af:8e:d1:14:5a:cd:8d:90:7d:1e:07:60:ae:d8:aa:bf:a8:db:
b3:7e:5e:0f:ae:ca:19:79:39:f2:8f:d6:bd:b5:72:ec:1c:7c:
3c:cf:3e:dc:13:cd:73:2e:5b:2d:62:db:41:1c:3f:c7:0c:ed:
53:b3:05:36:5c:2c:dd:59:ef:c9:ac:24:ba:11:27:bb:88:9e:
71:93:24:29:d1:65:d7:52:01:25:5f:e1:00:fb:12:40:bd:f0:
f7:68:c5:02:f0:4d:a9:06:a1:a8:e9:df:4f:74:11:2c:57:41:
c5:6c:e9:6a:03:49:47:14:3b:fc:5f:2b:19:35:0a:02:5b:49:
54:62:32:2e:9a:6e:78:d8:74:fc:bc:d2:40:86:fc:90:0c:c6:
fd:46:31:85:3e:12:ab:c8:bc:ee:85:70:03:42:eb:42:ff:17:
d6:10:cf:46:83:67:8e:1b:7e:a7:48:f7:f5:f5:5d:88:ee:c4:
57:c6:b3:72:a6:9a:1b:02:8f:bb:f2:27:d0:40:97:e2:10:68:
6d:22:f8:5e:8f:82:d9:c2:13:1e:55:cd:d8:86:d2:70:07:e8:
03:1e:22:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:09 2026 by rpki-client