This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File: kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier: LJA9FVBRuGp3HHsSd3NdgPfbEQkuVJINL+q0hS9nBaw=
Subject key identifier: 65:F3:58:33:C0:EF:F6:82:E2:07:9C:A8:78:60:B6:58:0A:B4:18:DA
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 019BF619C4A75AE99F2A1D980C1C067C3EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number: 17ED
Signing time: Sun 25 Jan 2026 17:00:42 +0000
Manifest this update: Sun 25 Jan 2026 17:00:42 +0000
Manifest next update: Mon 26 Jan 2026 17:00:42 +0000
Files and hashes: 1: HgVTCqxTI2p7CB3_pzYOlBKbewI.roa (hash: Vx3tDFhqH00mNA0Sjbw5LLVQH5B1ifF/KkPAwaHsXVk=)
2: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: 6r3niG/QLHTC1FW0hp+U6kmdKppBG2m1CkVkH6oE3Pg=)
3: uoml1ooKIpEwGVQcgm0COMGf22M.roa (hash: j6yV3AvezVwVR9BGMG8Xa/if460puXKoVMqsrCe3beo=)
4: yYRNMp4_8tPWVd55Ov35Q5FSlnI.roa (hash: 0/ssvW/ngUlJqY3PbldVkn5N/q0lSB25o7gaAX3Yo8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:19:c4:a7:5a:e9:9f:2a:1d:98:0c:1c:06:7c:3e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Jan 25 17:00:42 2026 GMT
Not After : Jan 26 17:00:42 2026 GMT
Subject: CN=65f35833c0eff682e2079ca87860b6580ab418da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:af:a4:e7:ce:1d:fd:4d:22:46:1e:3c:95:
f8:77:06:75:a1:37:56:8e:cf:ed:17:4c:2c:8f:b4:
e0:03:1c:dc:89:d4:0a:cf:45:9d:c8:2e:65:5b:08:
d0:e6:a5:d5:08:b8:3b:7f:d2:dd:95:d3:64:bc:6d:
60:75:68:c3:f2:26:61:33:cc:c4:a7:f1:ec:04:ac:
42:3b:f0:94:19:e4:20:ef:3f:87:4d:89:2b:6c:59:
22:d4:49:91:aa:2b:51:31:2f:b2:c4:4a:ea:69:58:
c0:74:3c:64:08:aa:c8:52:9a:06:99:13:db:a9:4d:
e6:6f:a8:e7:75:9f:38:7c:fe:af:5f:65:f3:c7:be:
e4:17:5e:76:e1:81:20:d6:4c:2b:8f:74:76:f1:ec:
86:67:5d:cb:b2:2e:c8:8f:62:df:a6:3a:77:4d:b1:
4c:2c:b1:88:c9:29:24:30:8a:70:8a:6e:5d:dc:55:
33:88:72:f0:bd:b8:7e:d8:c6:b6:c8:18:3c:4d:1b:
bc:e8:fd:cc:83:ba:a3:f2:26:b7:0f:16:2f:80:5c:
e6:bf:5e:12:dc:54:de:f0:6c:aa:9e:9b:b6:6c:86:
2e:80:63:82:cc:a3:01:18:b2:ca:b1:47:19:37:f0:
8e:cc:75:11:34:65:b9:ce:5b:c1:55:3d:7f:ec:ec:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F3:58:33:C0:EF:F6:82:E2:07:9C:A8:78:60:B6:58:0A:B4:18:DA
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e8:91:f4:c2:ec:65:55:77:01:5f:21:21:2f:d7:53:10:e0:
59:ef:f7:76:db:2c:c6:b2:58:8b:9c:02:69:1a:51:3c:e1:88:
59:a3:a8:56:05:59:d7:59:0d:9b:bc:f6:d5:69:0f:a7:e6:71:
50:62:be:c0:53:b2:f0:73:88:93:40:61:bd:aa:26:dd:5d:73:
28:c9:06:ff:a2:80:6d:44:ee:ad:d5:d7:d2:25:6d:8e:e9:39:
9c:61:04:2a:ab:b1:f8:28:06:0a:35:4a:01:f7:3c:6d:ea:b0:
33:d0:c0:08:25:11:f7:ce:e5:33:c8:79:17:91:1f:8a:ff:b6:
c7:29:90:d5:c3:29:67:be:ca:df:0e:7f:f3:84:37:60:7d:9a:
8d:06:1c:96:f4:e1:d8:a3:8b:46:43:c0:f9:af:2b:5a:d5:1f:
11:af:f2:ce:6f:8d:16:18:68:39:b1:1a:b7:69:cc:7e:4b:db:
ed:e0:73:5c:6d:56:7b:fa:a8:dc:d3:86:89:e5:e3:cf:ac:52:
f3:3d:a8:c7:89:e6:41:4c:18:49:8a:3f:bc:d1:c3:20:bd:3e:
db:96:27:93:ae:d6:43:06:da:b8:1e:39:d1:b1:56:a7:ff:d2:
42:83:80:30:87:93:1b:7c:31:7b:ac:89:80:aa:84:9c:36:c9:
d1:7e:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:15:17 2026 by rpki-client