This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File: ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier: tXwTNciBXfbm3Rjeg5BwCi2JWX+VNvX6vdgpfHjzQT4=
Subject key identifier: 40:3D:D5:38:CB:BF:96:1D:3C:F9:37:33:B0:6B:7B:7A:F3:8E:37:8A
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer: /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial: 019BF53E90757BB0A84D716DC81652D8C8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number: 17F5
Signing time: Sun 25 Jan 2026 13:01:16 +0000
Manifest this update: Sun 25 Jan 2026 13:01:16 +0000
Manifest next update: Mon 26 Jan 2026 13:01:16 +0000
Files and hashes: 1: 2c0jqBuEH1mHawmDju5SJrb9XO4.roa (hash: 4iGaC+nsr7eIRDAsx1YlRBvu72t0bZzh6T9oxMZT12o=)
2: 49mG2LIAGgPUY2ZzmJGz3IeznXI.roa (hash: 7aWoWG5rNXduvslZ3E4HwcG2X6Htck+37nEJTi56c7o=)
3: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: Q9U3Mj7TOsA1SqOoyci5Zp5J+MzlGmHjKT1B7ygpTpY=)
4: YAGdK9NgvIyiz7MwVPSphsKwcHE.roa (hash: YoeO10+z7W0nmsVjlcs0IP7RbonSryjBMwi0I/lLnms=)
5: dECFcKuPIDtaKYfkBtHP9FzNkPY.roa (hash: nfxA7gIFHYR0X3UKRvPVNyH71Z4WvtDgdmK9W79oICs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:90:75:7b:b0:a8:4d:71:6d:c8:16:52:d8:c8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Validity
Not Before: Jan 25 13:01:16 2026 GMT
Not After : Jan 26 13:01:16 2026 GMT
Subject: CN=403dd538cbbf961d3cf93733b06b7b7af38e378a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:f3:ee:9f:41:11:20:54:a9:38:e2:86:09:
71:45:e5:a7:94:59:14:00:27:e6:15:89:2a:e1:0e:
38:f2:46:a9:0c:d7:b5:8c:40:fe:dc:c1:17:0c:05:
de:f6:7f:59:f9:11:79:c6:6c:f7:41:be:a7:43:ee:
bf:3a:c2:32:9a:06:2a:8c:6e:9b:d4:bf:94:06:f5:
0f:f6:ee:db:22:b6:d6:06:af:03:d7:6b:70:d1:78:
68:6c:8c:54:8e:91:d7:e2:12:ac:89:69:ef:8b:6f:
a0:90:5e:da:f0:e0:8d:f8:b1:00:bd:83:85:a3:1f:
b8:cc:3b:a8:a9:7f:30:e0:8c:4e:2c:a2:b0:ff:8e:
e4:31:a3:63:8c:30:10:c8:79:98:cf:22:88:7b:db:
c4:45:b1:1b:ea:37:44:e7:e6:ba:ba:7c:ef:ce:ac:
70:96:47:c7:76:e5:72:d2:5e:2d:0a:db:d3:1d:9f:
fe:27:68:0a:28:64:ea:c4:78:d4:bc:0f:fe:59:7d:
77:2a:04:cd:54:cc:f7:1b:cd:40:05:c0:ce:2d:92:
ba:40:c2:2a:c0:6a:3a:aa:b5:2d:67:58:ec:a6:b2:
fe:0e:5a:11:b2:b4:68:8b:ad:47:ce:50:56:53:42:
56:b9:19:24:fa:a2:1e:55:b8:d8:28:5c:16:dd:cb:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:D5:38:CB:BF:96:1D:3C:F9:37:33:B0:6B:7B:7A:F3:8E:37:8A
X509v3 Authority Key Identifier:
keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b9:44:7a:1a:07:c7:e2:b6:53:6a:11:89:14:56:0f:17:57:
1e:25:82:34:18:fd:12:cb:48:7b:0f:f5:6e:23:79:92:7d:71:
46:9a:ad:f8:f6:5f:bf:3f:41:60:6f:69:8c:b5:1d:36:fe:41:
5d:a0:34:96:18:7f:18:24:34:c7:cf:5f:55:93:07:8e:cc:a0:
fb:36:bc:ac:d6:e4:20:ff:64:75:67:3b:bd:ca:c3:6d:fb:8a:
9f:38:3e:92:2c:c7:ae:f7:b8:3e:e9:d2:31:fa:bc:ef:26:69:
8b:29:44:95:0c:2d:4f:d2:2e:c1:df:bb:2e:8d:08:18:1a:fd:
fc:46:d5:fc:fe:43:7b:f8:6f:ef:78:47:5b:43:f8:5e:e4:e9:
fc:0d:c6:19:f8:75:28:2e:0c:d2:93:0b:a9:a8:0d:47:30:7d:
9b:00:32:8a:d2:6b:02:dd:2f:22:3d:41:62:82:8a:c0:4e:7e:
5f:8f:e7:05:ff:98:87:5c:d6:8a:bb:7b:7c:1e:69:54:e0:3d:
e4:b9:49:8d:80:56:1e:50:17:e9:b7:98:e7:df:58:15:f2:00:
22:71:f9:fc:87:d3:08:17:df:9c:ae:57:9a:bc:74:76:9f:fb:
ab:5e:b0:a8:32:9e:a9:47:1c:e3:30:17:8d:73:a0:65:81:4e:
da:e4:83:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PpB1e7CoTXFtyBZS2MioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2IyYzM4NzEwNjkwMDJhZDBiMmY0MmIwY2JmNWU5MmUz
YmU0YjMwHhcNMjYwMTI1MTMwMTE2WhcNMjYwMTI2MTMwMTE2WjAzMTEwLwYDVQQD
Eyg0MDNkZDUzOGNiYmY5NjFkM2NmOTM3MzNiMDZiN2I3YWYzOGUzNzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujTz7p9BESBUqTjihglxReWnlFkU
ACfmFYkq4Q448kapDNe1jED+3MEXDAXe9n9Z+RF5xmz3Qb6nQ+6/OsIymgYqjG6b
1L+UBvUP9u7bIrbWBq8D12tw0XhobIxUjpHX4hKsiWnvi2+gkF7a8OCN+LEAvYOF
ox+4zDuoqX8w4IxOLKKw/47kMaNjjDAQyHmYzyKIe9vERbEb6jdE5+a6unzvzqxw
lkfHduVy0l4tCtvTHZ/+J2gKKGTqxHjUvA/+WX13KgTNVMz3G81ABcDOLZK6QMIq
wGo6qrUtZ1jsprL+DloRsrRoi61HzlBWU0JWuRkk+qIeVbjYKFwW3cvZ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA91TjLv5YdPPk3M7Bre3rzjjeKMB8GA1UdIwQY
MBaAFAA7LDhxBpACrQsvQrDL9ekuO+SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGIt
YjM1YTBhMTQ1M2ZiLzEvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kOTY2ODgtMmQ5OC00NjM0LTg2ZGItYjM1YTBhMTQ1M2Zi
LzEvQURzc09IRUdrQUt0Q3k5Q3NNdjE2UzQ3NUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrlEehoH
x+K2U2oRiRRWDxdXHiWCNBj9EstIew/1biN5kn1xRpqt+PZfvz9BYG9pjLUdNv5B
XaA0lhh/GCQ0x89fVZMHjsyg+za8rNbkIP9kdWc7vcrDbfuKnzg+kizHrve4PunS
Mfq87yZpiylElQwtT9Iuwd+7Lo0IGBr9/EbV/P5De/hv73hHW0P4XuTp/A3GGfh1
KC4M0pMLqagNRzB9mwAyitJrAt0vIj1BYoKKwE5+X4/nBf+Yh1zWirt7fB5pVOA9
5LlJjYBWHlAX6beY599YFfIAInH5/IfTCBffnK5Xmrx0dp/7q16wqDKeqUcc4zAX
jXOgZYFO2uSDHQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:29:51 2026 by rpki-client