This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File: mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier: NZwuSW97QbKYWvVsB8ltHkqYs6Mh0yucP4sbtP+nrAA=
Subject key identifier: AE:EC:83:88:9B:CA:1A:3D:5A:AE:13:D4:8F:81:F0:FF:06:32:4B:1A
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer: /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial: 019BF6BF4DCE7520098F903205645EC0D113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number: 17ED
Signing time: Sun 25 Jan 2026 20:01:30 +0000
Manifest this update: Sun 25 Jan 2026 20:01:30 +0000
Manifest next update: Mon 26 Jan 2026 20:01:30 +0000
Files and hashes: 1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: 9hz3QaW6WTiVbLH+okV5/vsNOZAXlFMCcAjyUNpyCyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:bf:4d:ce:75:20:09:8f:90:32:05:64:5e:c0:d1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Validity
Not Before: Jan 25 20:01:30 2026 GMT
Not After : Jan 26 20:01:30 2026 GMT
Subject: CN=aeec83889bca1a3d5aae13d48f81f0ff06324b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:15:c2:ce:87:7b:d6:81:ad:4a:10:a2:80:
5b:4d:f1:15:5b:62:f4:28:7e:c7:29:11:f9:49:4d:
1f:2d:6e:b0:a7:24:e7:39:a3:22:c8:e0:83:85:17:
78:bb:d2:ab:c1:e0:c3:21:d8:bb:c2:f5:32:72:50:
7a:5b:15:93:d5:39:f5:e5:af:35:99:57:ba:3e:56:
61:22:5c:8b:b5:1c:27:dd:bd:5e:96:ad:8c:0b:c1:
61:6d:b6:98:84:65:90:35:a2:92:8e:2a:86:e7:4a:
9a:15:6c:cf:17:d1:e3:e7:cb:d5:8e:e6:55:59:ea:
2f:7c:40:58:07:df:3a:4d:24:d9:10:75:c5:b4:c6:
6f:a9:3d:7b:48:e7:f7:a6:70:43:2a:71:0c:64:2b:
d2:ec:e4:f0:ed:07:43:b7:e4:12:78:28:8f:6a:c1:
08:8c:60:74:cd:9d:dd:32:fd:e9:97:a8:8f:11:53:
62:b4:ae:4c:0b:f3:17:6f:5f:dd:19:85:0b:3c:ac:
61:5a:fc:f5:c3:cd:e5:44:5e:8f:61:b9:2c:60:fe:
f3:2b:42:18:d5:0f:8f:c4:e8:2b:a9:28:07:4a:86:
64:25:b2:77:04:bc:70:d5:50:7b:52:d5:e8:32:44:
91:b3:f9:6c:a8:97:7e:73:59:b5:41:d6:eb:d7:7b:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EC:83:88:9B:CA:1A:3D:5A:AE:13:D4:8F:81:F0:FF:06:32:4B:1A
X509v3 Authority Key Identifier:
keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4d:80:69:b8:ee:18:5c:c8:af:1b:26:d2:a9:8a:f5:a5:6f:
33:fa:b9:42:24:92:9d:c2:a2:00:c4:96:bd:97:2a:2c:cc:06:
7a:23:62:40:fb:84:32:47:1a:3d:96:f7:bf:d0:eb:52:b3:1f:
41:c9:ee:e3:66:34:0d:3f:60:34:cd:d8:44:94:1f:94:21:d8:
7f:a5:a5:a2:1f:01:a7:34:c5:62:fd:b9:b6:d8:59:3c:03:5e:
46:d7:5e:15:3a:b8:24:34:ab:2b:a7:ec:c8:42:02:d1:42:ed:
9c:28:15:23:02:1e:ed:61:f6:fc:be:5d:99:68:65:f1:5d:99:
b2:e6:67:f7:cc:68:20:45:e1:51:5d:31:f4:2b:33:84:67:b1:
ac:06:97:82:13:82:31:16:5a:2f:46:2a:24:c7:cf:df:e8:31:
60:8c:02:59:66:3b:4b:48:fa:e4:a5:be:94:2e:ea:57:cc:98:
75:ee:e3:db:a9:b7:40:12:68:d6:85:71:56:e8:72:21:90:0a:
96:11:2d:f6:64:d8:94:a6:56:b0:74:4a:fb:2a:92:ea:83:12:
b6:96:f1:d4:e7:11:2c:e2:58:98:75:9c:2f:cc:9d:97:ef:1e:
a1:94:8f:1d:30:36:d0:4d:19:60:bf:71:40:a5:eb:7b:c5:80:
e7:68:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:40 2026 by rpki-client