This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File: nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier: r5IRmPwEZ2z1DewyIa9Fyasr+HSFjXQ82yRRWsNkZtU=
Subject key identifier: 43:C8:68:87:F4:5B:36:67:F8:79:3E:04:91:4A:22:B7:CD:86:92:FA
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 019BF8AD07471495D8E22C73E9158B4773DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number: 17EE
Signing time: Mon 26 Jan 2026 05:00:47 +0000
Manifest this update: Mon 26 Jan 2026 05:00:47 +0000
Manifest next update: Tue 27 Jan 2026 05:00:47 +0000
Files and hashes: 1: GNmDEXAk_Y2HliZsrfR_YJwZxS4.roa (hash: q5k9K7OPxEr/ETIohhVcMQ1Er7f/1cnP4+q2GfC1RtE=)
2: ZbE102VRAczBwFbNm6WP3CfOeC0.roa (hash: rVoFQaYjG4H+zjgihkyFbOYOQwXJLuimbNMp54cfD9I=)
3: j5qNO9OtWF2RRXgNjRWTNtloj5A.roa (hash: fJCc6pLbTEzTC0FOS9YIyrBouGwIyWyYIw3gXlZ3Nek=)
4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: mJPFS2WB/4bnfF/VMRDdggSLjUF6H9R8E0VrcweRdQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:ad:07:47:14:95:d8:e2:2c:73:e9:15:8b:47:73:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Jan 26 05:00:47 2026 GMT
Not After : Jan 27 05:00:47 2026 GMT
Subject: CN=43c86887f45b3667f8793e04914a22b7cd8692fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:9a:c0:b6:5c:7e:85:84:2b:73:2f:9f:2c:
57:ef:fc:f1:98:d0:cc:4c:ed:4a:37:8e:a0:07:75:
00:1e:46:23:a6:14:ec:82:fe:1d:c4:c3:bd:8a:72:
50:5d:ff:b0:7c:5f:cb:83:ca:dc:33:3e:08:c2:1c:
26:95:62:c1:0f:b3:70:44:c5:7f:58:dc:dc:94:61:
47:b6:f3:86:87:e4:06:80:73:c3:ab:c6:c9:a8:0b:
57:54:95:60:0c:c0:ee:34:1a:d1:95:02:c9:00:0f:
e0:a5:e2:69:7e:5c:ad:7a:a1:01:59:85:ce:85:78:
5a:44:8a:78:6f:8c:9b:c0:84:fa:ab:6a:71:d3:6c:
94:8b:0e:ea:6f:72:bd:75:4f:73:df:a3:5d:fb:d5:
be:d8:15:4c:59:34:df:ab:0f:e7:5b:81:59:3b:ea:
1a:d9:df:37:0e:68:2c:5c:60:58:03:5f:67:75:e4:
1b:31:62:17:f2:d4:53:b6:17:b1:44:2b:90:4f:05:
8a:a3:f1:b8:3e:e0:a3:26:d9:e9:f9:61:ca:61:fc:
84:37:38:cd:45:ee:33:7e:c3:c3:01:82:27:3e:db:
3e:7d:04:0f:88:94:dc:db:08:d1:71:df:25:0b:b5:
cd:4d:e1:5b:b6:80:7a:aa:ec:45:7b:db:ff:01:75:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C8:68:87:F4:5B:36:67:F8:79:3E:04:91:4A:22:B7:CD:86:92:FA
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d6:58:70:ec:a5:30:66:88:ec:06:cd:0c:37:c1:11:a4:f3:
e1:de:f0:b3:bb:88:6e:e0:c2:16:3d:32:0b:0b:04:07:1b:02:
e2:b8:2d:7d:5a:74:6c:8a:2f:af:d4:c5:e3:a7:98:b4:54:77:
6f:53:52:41:db:c1:67:bd:5f:22:90:31:b5:99:3d:ae:0d:d2:
19:b6:00:7f:1c:f1:57:26:a7:d2:27:bd:e6:c0:39:65:8f:cc:
63:ae:69:2a:32:ba:b4:d9:08:d3:de:69:7f:a1:85:01:59:50:
8a:40:a9:05:3f:40:c9:55:56:c9:2d:cd:7c:32:63:17:b2:05:
10:67:71:ba:c4:95:93:ae:73:31:19:25:ce:71:94:44:ac:03:
25:65:85:b3:0b:26:02:52:75:23:7f:f7:a4:3e:e5:d6:ff:93:
1a:d3:db:e1:5c:9c:ca:e3:8f:d4:9f:de:ce:aa:0d:c9:2f:cb:
38:7e:3f:dc:8f:37:3d:4e:37:5f:74:5e:85:a9:44:36:d4:12:
46:bf:19:74:fa:d0:7a:40:83:f1:82:c0:32:9e:ba:6c:5e:f8:
1b:90:76:30:f6:bf:ef:76:40:f0:fe:6b:d1:9f:df:80:08:fe:
58:ea:62:ed:0c:50:96:d5:a0:0e:6b:00:bf:7d:4c:b0:71:c2:
32:6a:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:27:39 2026 by rpki-client