This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
File: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft (raw, json)
Hash identifier: 6DnuOKQ7FdKG4+laxHz9utCrMNZoKgcPA3UPzYpTKOI=
Subject key identifier: F5:80:10:1B:F9:88:AC:C4:E5:75:AE:1A:8F:17:60:EE:FD:01:4F:77
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 019BF386E115991E688FCCE6A4D9AF572996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
Manifest number: 17ED
Signing time: Sun 25 Jan 2026 05:01:01 +0000
Manifest this update: Sun 25 Jan 2026 05:01:01 +0000
Manifest next update: Mon 26 Jan 2026 05:01:01 +0000
Files and hashes: 1: 18LLAEyGOzDEqVOGhVOCxXqhlAE.roa (hash: hcwsbast1UClS6I7r5Yp2sr8qWj/P9phtpAzkLi6VMw=)
2: 2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl (hash: gPtZUMgprPUMiMIoquogHupTx3Fb/Yia2FzsoqL5upw=)
3: jmMWtYPg5S_tnA2cdWpf_Zexx00.roa (hash: dKIhy7fI/lqIY1llduzbpk7aDMWsC7JfkBKhXfdEng8=)
4: yb6eeUKKTu5xnfipewiooSY4ygA.roa (hash: JsoZM3IdjQEOypKxcGbJATYKZoZ7dmyzU6migcewEJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:86:e1:15:99:1e:68:8f:cc:e6:a4:d9:af:57:29:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Jan 25 05:01:01 2026 GMT
Not After : Jan 26 05:01:01 2026 GMT
Subject: CN=f580101bf988acc4e575ae1a8f1760eefd014f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:6d:1b:12:fd:58:f2:17:66:9a:76:16:ab:
c9:b4:3a:b0:68:15:63:31:b3:a2:6e:cd:99:ab:5b:
b4:af:f0:9c:22:dd:7e:10:c6:3d:bf:1e:5e:8b:31:
b8:92:f1:0e:a2:40:f5:07:f8:6f:aa:fd:79:be:fd:
3f:07:a5:81:e0:1b:dd:ba:85:8a:b6:1e:7b:43:96:
f8:27:71:53:ea:ee:23:40:ef:bc:52:9f:ce:f4:8a:
c8:99:3a:ed:b1:de:e3:ac:0f:85:2a:0c:1b:85:fd:
56:e8:e0:0d:34:c8:a2:8f:05:1a:97:5d:d2:a3:97:
51:d6:33:29:d9:a1:02:f1:ba:61:01:cd:70:98:92:
7f:03:05:fd:47:e4:54:13:4d:ea:30:49:97:15:49:
78:39:21:8e:64:69:06:ef:cf:f0:86:bb:82:99:b2:
0f:ba:32:db:07:96:9e:d3:86:f8:04:39:3d:5d:8b:
41:e6:70:54:1c:4f:b1:48:bc:ae:d4:44:90:4b:3c:
1a:65:f9:35:8b:99:74:34:79:6c:9d:21:21:d5:b0:
df:82:c2:5a:a7:4d:ac:06:be:d7:d8:4b:09:83:12:
3f:80:75:31:b3:ff:45:19:0a:6c:da:e1:f2:5d:d7:
df:ad:d9:f9:2f:fc:ed:86:9c:9a:43:d4:89:43:0b:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:10:1B:F9:88:AC:C4:E5:75:AE:1A:8F:17:60:EE:FD:01:4F:77
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:97:13:e6:f8:f7:86:2f:fb:a1:6a:b3:9f:a3:c3:a4:7e:47:
14:8a:5e:c6:9c:45:57:de:36:0e:26:5c:72:36:e0:26:54:4e:
12:99:60:c9:46:81:26:e0:c1:7d:ea:ad:cf:6e:6a:ec:ae:f6:
73:bc:8d:03:2a:65:99:24:e0:ee:f3:db:a6:21:80:88:39:33:
c4:f3:50:42:71:6d:66:1d:91:d8:ca:f9:2c:2c:63:53:81:fc:
e5:8c:06:b6:df:1e:ce:b1:c8:f8:89:92:41:8e:2c:67:f5:9c:
3e:52:c9:03:db:25:ed:70:b1:3b:dc:d3:5d:7d:85:e7:f3:4e:
65:6a:10:23:73:df:22:70:b7:63:f3:c2:d8:92:d5:1b:14:00:
94:aa:6a:81:90:4a:c2:54:b3:c7:7a:71:d2:85:9b:2c:f9:7e:
be:e6:81:b6:f7:4d:cb:06:6c:54:44:6a:b7:1a:bd:59:e4:40:
21:b1:5c:f4:8d:9f:40:9f:5d:d5:be:48:1a:70:98:67:f2:f4:
52:af:ef:06:9b:f3:80:72:79:5e:45:b5:6d:ba:dc:76:ba:d6:
44:0b:cb:2a:74:7c:70:68:99:5a:cc:df:9b:41:4f:72:7a:ad:
fb:56:0b:34:ae:3c:f3:f6:ea:32:89:a0:29:90:da:a4:ee:6d:
26:6f:df:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzhuEVmR5oj8zmpNmvVymWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOGE5NzhiOWNlNWQyNmViY2FhZDBjY2I2NzkxOGE5ZGYz
MThmODYwHhcNMjYwMTI1MDUwMTAxWhcNMjYwMTI2MDUwMTAxWjAzMTEwLwYDVQQD
EyhmNTgwMTAxYmY5ODhhY2M0ZTU3NWFlMWE4ZjE3NjBlZWZkMDE0Zjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGRtGxL9WPIXZpp2FqvJtDqwaBVj
MbOibs2Zq1u0r/CcIt1+EMY9vx5eizG4kvEOokD1B/hvqv15vv0/B6WB4BvduoWK
th57Q5b4J3FT6u4jQO+8Up/O9IrImTrtsd7jrA+FKgwbhf1W6OANNMiijwUal13S
o5dR1jMp2aEC8bphAc1wmJJ/AwX9R+RUE03qMEmXFUl4OSGOZGkG78/whruCmbIP
ujLbB5ae04b4BDk9XYtB5nBUHE+xSLyu1ESQSzwaZfk1i5l0NHlsnSEh1bDfgsJa
p02sBr7X2EsJgxI/gHUxs/9FGQps2uHyXdffrdn5L/zthpyaQ9SJQws40QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWAEBv5iKzE5XWuGo8XYO79AU93MB8GA1UdIwQY
MBaAFNqKl4uc5dJuvKrQzLZ5GKnfMY+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEt
Yjc4ZGFjMzdlYWM4LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8xOGU0OGYtNTk3Mi00ZDNmLWJiNmEtYjc4ZGFjMzdlYWM4
LzEvMm9xWGk1emwwbTY4cXRETXRua1lxZDh4ajRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJcT5vj3
hi/7oWqzn6PDpH5HFIpexpxFV942DiZccjbgJlROEplgyUaBJuDBfeqtz25q7K72
c7yNAyplmSTg7vPbpiGAiDkzxPNQQnFtZh2R2Mr5LCxjU4H85YwGtt8ezrHI+ImS
QY4sZ/WcPlLJA9sl7XCxO9zTXX2F5/NOZWoQI3PfInC3Y/PC2JLVGxQAlKpqgZBK
wlSzx3px0oWbLPl+vuaBtvdNywZsVERqtxq9WeRAIbFc9I2fQJ9d1b5IGnCYZ/L0
Uq/vBpvzgHJ5XkW1bbrcdrrWRAvLKnR8cGiZWszfm0FPcnqt+1YLNK488/bqMomg
KZDapO5tJm/faQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:47:15 2026 by rpki-client