This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
File: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft (raw, json)
Hash identifier: VTe2j1fQ2BntzKD6hPLULyA8Rf6LkB9lZqEm73y2RkQ=
Subject key identifier: B0:1E:CB:29:53:C0:29:DE:CA:E5:E8:D4:F4:C7:52:AF:7F:6F:7B:CF
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial: 019BF79AE144AEA9626FFEA058449250C068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
Manifest number: 17EA
Signing time: Mon 26 Jan 2026 00:01:21 +0000
Manifest this update: Mon 26 Jan 2026 00:01:21 +0000
Manifest next update: Tue 27 Jan 2026 00:01:21 +0000
Files and hashes: 1: AXJwwgLV20qOfdiRkcLp7cuyLa8.roa (hash: TJd1vyVMSaddwqO1mLObhJwRHoC09A1cxMdzGIXMVxA=)
2: JVhM3Ybetfs8u4lZCxCSpx8pJdU.roa (hash: qDG/lBnPGvBdowawU0zXsB0DnTTCTXSKOxuDVEvE+Lw=)
3: JciEJIGTlcBIQFyaMf4k2cUulG0.roa (hash: PsuB426mDHmj/nCSN0DLQAoyVz9KEoXVW/4qNh6n7rE=)
4: uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl (hash: G7O0DXH7cUn7LoVNz/kAqatJgrL5u0IfjA1qmmNVzHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:9a:e1:44:ae:a9:62:6f:fe:a0:58:44:92:50:c0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Validity
Not Before: Jan 26 00:01:21 2026 GMT
Not After : Jan 27 00:01:21 2026 GMT
Subject: CN=b01ecb2953c029decae5e8d4f4c752af7f6f7bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:c2:54:47:8a:5f:98:0e:10:48:41:1e:8d:
ea:61:fb:5d:b1:3e:86:57:b8:4e:c6:cb:f5:87:a2:
2f:b5:0d:7a:8c:25:8a:4a:6e:ad:81:84:34:c0:8c:
ea:5e:53:dc:7c:20:3d:b1:7b:db:f5:3d:34:e8:fc:
48:f4:ee:18:33:94:82:80:8f:a6:e1:74:99:27:f8:
6a:83:bb:3d:9e:b2:8f:e0:b1:95:51:a0:ea:7a:95:
ec:60:15:e3:a7:02:8c:ea:20:88:76:ea:1c:f0:ad:
f9:b0:19:1a:0b:44:37:da:c5:af:82:7b:2a:77:50:
21:35:28:eb:56:12:7a:03:a4:c0:df:8b:00:90:34:
17:15:35:38:d4:c8:3a:81:9a:d6:f3:02:e1:a2:60:
5c:77:1e:c6:8e:44:04:1a:c4:bd:1a:bf:19:c2:d2:
5d:fc:2c:54:e4:07:23:00:7e:3b:4f:74:c6:89:34:
59:77:53:51:9a:1b:b5:ea:dc:e9:21:2c:d8:fa:83:
cc:a0:44:63:4b:40:60:37:43:16:8e:f2:ae:e2:93:
42:45:78:84:db:23:b6:3e:2b:4c:99:79:47:d5:a0:
0e:fa:91:11:85:ff:34:10:e1:39:88:d1:5d:d0:5e:
26:2d:d9:50:7b:22:8d:1b:56:8c:65:5c:2d:ca:6f:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1E:CB:29:53:C0:29:DE:CA:E5:E8:D4:F4:C7:52:AF:7F:6F:7B:CF
X509v3 Authority Key Identifier:
keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:69:5b:aa:4b:92:58:da:46:8f:c4:03:9d:85:71:1a:d0:22:
b5:3e:33:12:62:93:4e:c6:4c:be:4a:fa:5f:0c:e2:9a:04:97:
29:67:1f:63:1d:bc:9b:cf:7f:47:9f:39:ef:a6:9a:98:69:21:
f0:ff:56:e0:e3:7e:fc:4c:da:11:19:6c:28:7e:8a:a2:73:78:
e7:00:bb:0e:ca:08:1a:54:80:94:b9:36:ef:f8:ea:92:c0:4d:
c2:55:b5:0c:82:d4:2e:02:2a:ab:a3:c6:13:31:cd:17:f6:50:
b6:91:90:1f:d1:0c:eb:d1:ea:4a:ff:53:fc:58:0e:af:32:ac:
11:2a:f2:a6:62:dc:9a:3d:2d:57:70:0b:81:fd:b3:cc:a8:55:
ed:ce:66:87:e7:4e:f4:89:e2:45:3c:cc:4a:2f:cb:83:95:7e:
e9:3a:9d:9a:bb:b6:00:f8:d7:ed:ab:2f:62:74:fd:50:bc:e3:
d2:3f:cc:50:0a:7e:d8:62:fe:7a:1c:0d:d5:5d:ba:13:56:b1:
b9:3e:bd:a6:2f:38:d0:1d:dc:66:66:ea:12:6b:05:4e:22:b5:
68:93:29:4c:95:04:21:12:f7:1c:9a:3c:08:8c:e5:57:62:23:
a8:b1:7b:21:2a:e1:cd:36:54:60:94:bc:18:d8:37:39:12:0c:
7b:6b:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:48:44 2026 by rpki-client