This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: 8R4sJnM2eiuQzWje+gMDOzMHfNw62yyNfFBJSag1Rh0=
Subject key identifier: EA:3C:41:74:C0:9E:20:56:21:75:42:57:D8:5F:34:4C:08:E8:8A:52
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019BF875EDCE10D148EB8D64F76C53651F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 10AA
Signing time: Mon 26 Jan 2026 04:00:36 +0000
Manifest this update: Mon 26 Jan 2026 04:00:36 +0000
Manifest next update: Tue 27 Jan 2026 04:00:36 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: eX4R+l3Bu9bPzrSDfHBcg9ybxUdr5C5pzveFQMhVS94=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:75:ed:ce:10:d1:48:eb:8d:64:f7:6c:53:65:1f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Jan 26 04:00:36 2026 GMT
Not After : Jan 27 04:00:36 2026 GMT
Subject: CN=ea3c4174c09e205621754257d85f344c08e88a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:bd:c0:0f:2a:ae:79:9d:e0:df:21:35:77:
71:40:a5:d5:22:53:44:80:52:0c:79:60:75:4d:3a:
1d:48:52:e2:ad:39:ad:b9:7c:41:e5:0c:10:55:af:
ae:e3:95:57:66:6e:bf:5d:98:a5:15:fd:07:49:18:
81:ee:0d:8e:15:28:c1:2d:63:c5:9f:97:2a:c9:fe:
0d:91:a0:1c:2f:8a:98:d4:37:f7:01:96:40:37:a7:
e0:e1:56:eb:66:27:ec:e7:39:c7:f2:47:c3:61:0c:
9d:5a:ca:e9:ef:d7:31:28:07:ad:de:3a:74:31:3a:
bf:57:c2:19:81:de:71:f1:6e:73:e5:37:04:df:66:
e1:ca:79:4d:72:3f:db:5c:cf:39:42:d8:d7:b3:a6:
0b:98:45:ce:6c:6c:18:71:ee:cf:dd:4d:b9:ba:79:
fd:c3:00:6f:32:14:f9:7e:33:bd:cc:57:9f:71:8e:
28:8f:e3:70:0f:67:b5:98:ec:f1:ee:e8:38:c1:f4:
b6:4a:64:3a:18:5f:4d:9b:35:7c:a7:9f:09:86:da:
ad:31:cf:17:a1:06:19:bc:41:63:b2:58:ad:1e:02:
aa:76:c1:80:61:7a:91:89:d0:c3:55:0e:21:a5:68:
75:07:83:ff:28:8a:bb:c0:c8:35:59:4f:b3:7d:7f:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3C:41:74:C0:9E:20:56:21:75:42:57:D8:5F:34:4C:08:E8:8A:52
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5a:2c:24:da:61:19:8f:82:53:d3:7d:60:2e:23:62:6b:a8:
f3:90:08:97:24:f9:e7:f3:91:fb:65:5d:df:5d:f3:f2:28:c3:
ad:a7:53:9f:7d:cc:10:c8:11:ce:1b:a7:20:a2:3a:0d:db:e9:
12:af:1a:88:f2:15:f5:23:f0:5e:6a:fe:78:cc:cf:9a:9e:12:
65:5a:e1:11:00:1e:e3:08:14:18:a6:54:ea:47:24:56:4a:fb:
d2:18:00:e7:5c:03:63:46:f7:0d:f3:91:d5:73:b7:b9:1c:c1:
90:82:68:a3:d3:2c:a5:f4:bb:f8:0b:ac:31:ab:66:ad:47:44:
89:73:ba:50:59:8f:e1:17:53:4e:05:16:d8:a8:5a:8a:91:08:
a7:5d:8c:d8:a5:19:c7:54:55:e6:29:1d:82:9c:5b:b5:78:d0:
50:01:38:77:d1:70:22:92:dd:bb:74:81:f6:d4:bb:d1:d8:2c:
21:10:c6:46:1d:23:9d:f4:93:c9:ca:24:6a:65:be:76:6d:ed:
f9:06:c8:f5:79:ad:a6:0e:30:da:06:ae:54:70:26:9b:96:b7:
bc:f4:d5:45:50:0d:23:da:e9:b7:75:d9:ea:2f:78:25:4a:6f:
71:46:e5:51:45:84:9c:fb:b5:a8:3b:54:c8:e9:bc:2e:10:3d:
0b:ba:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:24:11 2026 by rpki-client