This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File: m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier: IaZ3Q1ncLYgD0nnIy8cTkpIflvx8loEArVPIvuf6pUg=
Subject key identifier: 5B:27:6F:98:9F:DF:DE:86:F4:02:0C:A1:03:8C:0B:5C:51:9F:2C:27
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 019BF57583619F6AEAF4891BBB8BD8ADC77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number: 1129
Signing time: Sun 25 Jan 2026 14:01:17 +0000
Manifest this update: Sun 25 Jan 2026 14:01:17 +0000
Manifest next update: Mon 26 Jan 2026 14:01:17 +0000
Files and hashes: 1: 1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa (hash: JM6W0dxskOtwH/4wZYEeDey8i9ac93ewUEb24GlUyks=)
2: Q4oVtB_GG7eovbLinG-u2kk_sok.roa (hash: cM5qIsneZAmTqIZg9DeB6vafwKefGN204JmC+NSInLk=)
3: TRB5S_43lNyOLKzxAGsR3jba-nU.roa (hash: K/IXnKVsdiRn2o1kH+FaE/QlEeszfs0vxtMbvnwDCbQ=)
4: m4hSv_mEGl1O7CcJ0lhgjYNl4mM.roa (hash: uKi5CjgcDmOAt0F3mDiM2fjwRKRtze0jB8esHr2tRSk=)
5: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: bYEj6FvuBmutGM9mHTkNbr4S77DcbnAXeIEgmDuf0Ck=)
6: tZ7C1MYt9I9U0h7GnvEIm9NToaE.roa (hash: sb1ZYmGZNktATZIUUN0if0MQ6BfFbZD5jVek7sbME7Q=)
7: u-b7hCj6gdd6K9YCWBDHTcbmd6g.roa (hash: qRx5Ajf58qovX1XwWQ0T9y9tHlrDKVNojCTuf45PlRo=)
8: v_G295N19bDrQCJDMtlZ-ai88wg.roa (hash: ZZZ/+7GguAvkf95Ay0eDVtwD7Ey8QKEeDZLP7i4i8qA=)
9: wTjmQameKdcpA0z8PRkcVGZwuuc.roa (hash: k2WV/2PH4Kau8EV05RXYKBWzXM8y2f7UYSrD2p5Z2q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:75:83:61:9f:6a:ea:f4:89:1b:bb:8b:d8:ad:c7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jan 25 14:01:17 2026 GMT
Not After : Jan 26 14:01:17 2026 GMT
Subject: CN=5b276f989fdfde86f4020ca1038c0b5c519f2c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:a6:56:0e:09:fb:f8:0b:d4:64:5f:f1:29:
26:2c:32:a8:43:18:55:25:4e:22:dc:16:0f:ba:e3:
65:c9:08:71:fe:da:c3:09:70:21:c8:9f:e7:73:71:
34:3d:ba:9e:19:2d:df:b4:e4:5c:6d:8d:c7:0d:f8:
d5:25:5e:3c:18:47:c6:e2:b9:72:59:2c:97:13:0e:
56:ee:6a:80:25:86:8f:cd:9f:5d:00:cb:20:35:24:
5d:37:ed:88:dc:91:e2:54:d5:68:ab:ae:17:51:82:
11:58:cb:f6:b5:8e:5c:cf:74:14:68:62:87:60:0c:
8a:70:2b:25:16:bb:61:04:ef:02:a8:ec:e7:8e:eb:
13:87:65:63:26:a8:51:78:11:f0:49:84:02:d2:e8:
75:a3:61:13:70:b0:69:96:9f:13:f3:33:bd:64:a9:
2b:02:cc:7f:d6:a3:67:c3:82:da:5d:5a:0c:3f:9c:
b8:31:ec:ca:e1:e9:41:00:54:d1:8c:41:cc:36:5f:
4a:4b:65:fc:26:d2:f6:07:8c:f3:b8:e5:ae:16:59:
48:81:61:51:50:e4:da:74:13:80:c0:25:78:15:4e:
f9:ef:d2:06:a0:ff:09:0b:70:24:e1:44:8a:7d:2c:
84:9d:2f:d1:fc:49:50:ee:a5:ec:81:8e:8b:a5:5c:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:27:6F:98:9F:DF:DE:86:F4:02:0C:A1:03:8C:0B:5C:51:9F:2C:27
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5a:f0:4f:8d:00:fe:22:34:a3:8e:44:83:d1:a4:94:46:d8:
25:9a:b3:db:ff:73:09:f5:d7:74:1a:93:17:01:a7:79:a9:f6:
bd:72:06:fb:18:2e:b4:09:73:f1:d7:83:6c:22:81:d9:39:84:
b4:69:ca:1d:74:77:99:4a:1d:92:b8:3c:bd:93:21:28:25:e6:
2c:90:9e:e8:39:a3:6d:98:e0:f8:c0:b8:42:75:1b:60:de:f8:
40:21:13:fe:ea:13:18:d7:31:6d:83:88:3b:28:bd:9c:b6:02:
fa:f8:eb:db:aa:06:55:27:c0:03:9e:b0:ad:09:97:bb:91:7f:
b6:9c:75:28:7d:de:51:eb:74:c4:20:f9:73:86:a4:92:d3:66:
1c:65:80:c4:2f:bf:92:b9:67:7c:aa:21:81:1f:cc:f0:88:5a:
b2:fa:b9:12:af:70:27:4c:71:08:d3:83:d0:bd:48:41:96:c2:
23:72:41:34:3b:96:57:87:14:37:0e:d0:b2:f4:d9:b9:0d:f5:
2c:6f:18:7f:92:6e:52:30:ff:2f:cf:8c:44:da:91:f7:cf:96:
66:24:bc:b2:dc:21:c7:e9:c8:ad:d5:a2:7b:e8:91:e3:26:13:
3b:86:74:42:64:94:37:66:c0:13:70:8d:aa:69:6e:ee:b5:31:
b7:6c:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:04:28 2026 by rpki-client