This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: PyQkLibaAtBSQNr6DWYVLGgJkGd1HIjkwcfrnI+gWIw=
Subject key identifier: 09:86:DE:D1:B4:FA:DE:0F:DA:66:D4:6B:CE:40:DE:F7:5D:B5:3C:D1
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 019BF79A5C6AA689A8463EB95A076730195A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 17E9
Signing time: Mon 26 Jan 2026 00:00:47 +0000
Manifest this update: Mon 26 Jan 2026 00:00:47 +0000
Manifest next update: Tue 27 Jan 2026 00:00:47 +0000
Files and hashes: 1: P_jLMjRudiodEgP9kGrX8xlbrMY.roa (hash: pHZFqcdySsOo+3kqKRPv2p7vAXOUuXEA4zp+BKSFMns=)
2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: Y/mg3aYqqLCemaI2gTVvNKKjTw34aprSeVrK8Cb2Wi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:9a:5c:6a:a6:89:a8:46:3e:b9:5a:07:67:30:19:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Jan 26 00:00:47 2026 GMT
Not After : Jan 27 00:00:47 2026 GMT
Subject: CN=0986ded1b4fade0fda66d46bce40def75db53cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:fe:85:5a:54:e0:4a:29:97:53:ba:71:c8:
a7:73:46:0e:bc:47:b7:b7:19:6a:91:7b:6b:2d:de:
54:ba:4a:42:03:9f:94:33:9f:93:e9:26:7e:42:73:
cf:19:a8:f2:57:34:7f:f5:4b:13:49:8d:44:ea:32:
2b:92:6e:ad:30:4a:e4:86:39:3f:a2:c8:db:af:ea:
6b:27:b8:fb:f1:b3:b1:55:10:0a:2f:14:07:72:fd:
fe:e8:70:b4:fe:92:8b:c2:e9:cd:f8:09:09:b6:6b:
f0:5d:1e:d5:5f:97:29:f9:b6:1d:8d:b1:72:95:99:
39:7d:b2:d9:df:f1:2a:48:9d:41:49:89:31:10:da:
8d:ef:2d:bc:ef:06:a5:02:73:f3:fa:34:ae:01:77:
6d:6a:5c:83:ce:42:0b:72:f8:7a:d7:64:45:59:36:
45:f0:0b:66:94:77:2a:40:e3:35:20:67:89:d2:0c:
87:39:0c:e5:33:10:60:f6:b5:ea:d2:58:d3:71:f6:
5b:ac:34:5a:0b:e8:dc:a7:81:b5:56:d8:54:5d:a0:
30:f9:59:16:30:27:29:e2:33:c1:37:eb:0b:71:4c:
36:11:08:25:d6:64:6f:bb:62:50:a1:20:e6:00:79:
31:a7:c6:82:6a:68:ab:22:03:38:4a:db:3d:e7:97:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:86:DE:D1:B4:FA:DE:0F:DA:66:D4:6B:CE:40:DE:F7:5D:B5:3C:D1
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0a:cf:7a:f8:7b:66:ed:b1:3f:ec:94:53:82:ad:25:d5:e0:
02:05:41:f1:cf:d0:35:3e:1f:8d:7f:39:9b:59:5e:3f:ba:15:
d4:17:3b:d6:19:73:2b:8b:39:bf:0b:30:99:78:06:b6:b6:6a:
10:61:80:fd:65:0c:b6:40:f8:c8:22:b8:df:42:f0:65:64:98:
cc:38:a7:44:70:1e:5d:3c:6e:28:4b:28:7a:f6:e9:2b:e3:84:
71:3b:69:45:2d:9a:0b:69:ee:c7:a4:d5:10:ea:a4:c4:c9:d7:
85:b4:46:c7:c0:12:c3:9a:a1:bf:de:b8:b0:dc:ce:5c:ad:b7:
c5:2c:fc:15:f5:bf:b1:9b:07:b6:21:34:f7:4c:3f:26:29:e2:
ed:04:02:83:32:4e:2e:82:74:e5:6f:41:72:fc:03:01:cf:b2:
c2:2b:4f:fb:59:f0:70:d4:12:4f:f0:ae:2a:79:2b:4f:7a:48:
75:7e:67:df:65:be:82:ea:df:45:66:62:c1:2c:bd:5c:1d:24:
c8:76:19:1c:c3:eb:4d:16:31:d7:01:82:6a:08:d5:21:60:5d:
e1:5a:b2:15:5c:aa:1c:14:46:7e:5a:f2:4d:e9:2d:6c:20:38:
8d:8a:e8:69:fa:6b:25:c0:bb:68:4e:4f:c9:f4:95:b6:b8:a9:
bd:54:ea:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:50:05 2026 by rpki-client