This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File: v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier: wE/CWiwY+YstI+eQnHYnhKsijvmYF7p69V7QZiXHTMA=
Subject key identifier: E3:42:AA:8F:CC:5E:EF:63:CC:DB:B2:7F:05:23:C6:62:D4:17:E5:74
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial: 019BF2AB147BC9230FA97CFBD2D99F2735CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number: 067E
Signing time: Sun 25 Jan 2026 01:00:56 +0000
Manifest this update: Sun 25 Jan 2026 01:00:56 +0000
Manifest next update: Mon 26 Jan 2026 01:00:56 +0000
Files and hashes: 1: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (hash: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE=)
2: Wwry0pTyAtK1A6b2shrM5APPbZI.roa (hash: CHi4AVwGvGrl5tChQ0TUYjHIVyCz1akOxd1fug9TFQ0=)
3: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (hash: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4=)
4: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: NkOEmEbFd1enXwFOp0F2nCvcnqdFq+KhUN8rRiuG1PA=)
5: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (hash: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg=)
6: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (hash: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:ab:14:7b:c9:23:0f:a9:7c:fb:d2:d9:9f:27:35:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Validity
Not Before: Jan 25 01:00:56 2026 GMT
Not After : Jan 26 01:00:56 2026 GMT
Subject: CN=e342aa8fcc5eef63ccdbb27f0523c662d417e574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:df:97:f8:cd:a7:10:bf:d1:b8:ad:c7:f6:
fc:94:c7:74:d4:af:86:7a:56:d1:0d:6b:d7:31:4b:
53:a3:ee:3b:bd:c0:79:91:eb:ac:02:f6:b1:43:35:
e9:76:ef:56:9a:b2:63:13:21:3f:40:43:d2:50:71:
a0:4b:0e:f7:c8:b4:12:ff:82:ab:da:39:bd:91:a9:
18:f3:48:d6:8c:b3:32:72:ea:d7:96:ee:90:15:3f:
b2:0e:2d:10:82:10:0a:f2:1b:72:11:50:2c:81:41:
60:54:99:78:1b:fe:48:21:bf:c6:5d:44:de:f3:77:
8d:3c:d8:df:4a:81:8e:37:c0:eb:54:b3:4f:6f:ce:
a6:d7:13:dc:7a:b1:41:17:eb:32:b0:c6:28:62:fa:
90:30:24:3f:f2:34:c0:ff:57:d1:f3:ea:8e:fd:ef:
39:5a:ed:fa:9f:d4:fd:53:5b:eb:5f:d2:d4:4f:cf:
99:a9:6d:78:0b:62:3f:65:f2:d8:f5:0d:0e:77:16:
3c:a7:5d:e5:72:20:ce:54:32:42:1e:97:51:84:6c:
eb:81:d0:0d:48:7c:d8:7d:74:8e:af:70:f1:5c:02:
a2:af:3e:e7:ba:10:96:40:1a:ac:46:56:5c:75:25:
40:b1:d8:a1:c6:af:27:32:b8:eb:0e:b4:15:a9:4e:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:42:AA:8F:CC:5E:EF:63:CC:DB:B2:7F:05:23:C6:62:D4:17:E5:74
X509v3 Authority Key Identifier:
keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:29:0f:c9:5c:8e:3a:3e:51:45:fe:1c:02:94:d9:30:0e:ba:
40:b9:6f:32:1f:89:46:53:f0:5d:1c:c7:6f:63:0d:6f:19:de:
be:5f:0c:87:35:59:69:7f:51:7b:3a:88:f1:cf:eb:54:44:a7:
9b:64:e7:ba:f8:ae:7d:61:ff:b5:3e:a9:5a:b3:32:d3:99:34:
32:9d:50:11:1a:3e:93:40:29:9d:d1:3b:db:e0:be:a1:64:69:
79:d1:b5:80:53:4c:5e:30:8a:6c:1b:f6:ce:14:30:b8:d2:e1:
e9:3c:7f:b3:2e:7f:dc:ee:bc:62:b1:47:8f:a3:20:39:84:4f:
36:2f:ba:28:a0:6c:e3:c8:92:8d:2f:3a:60:3c:18:8f:c6:cc:
8a:06:0b:b9:c5:82:20:ff:36:36:02:88:d0:c2:6c:6d:90:7b:
92:65:b6:13:1d:28:b3:38:df:15:0d:24:66:2f:6e:5b:b8:34:
7e:f1:e5:08:47:29:40:9e:fb:6c:b4:0f:1e:e1:6f:fe:9e:7d:
31:35:f6:01:c9:e2:73:5c:d0:16:ff:8c:3a:dd:6c:b1:3d:2d:
a3:e4:b7:88:70:86:ed:6b:e3:f1:a0:ac:ed:32:0d:f3:78:bd:
49:29:63:f7:e6:fe:65:8b:31:9d:68:1e:3f:36:36:65:d9:e5:
4e:86:72:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyqxR7ySMPqXz70tmfJzXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk
NjdhOTcwHhcNMjYwMTI1MDEwMDU2WhcNMjYwMTI2MDEwMDU2WjAzMTEwLwYDVQQD
EyhlMzQyYWE4ZmNjNWVlZjYzY2NkYmIyN2YwNTIzYzY2MmQ0MTdlNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Lfl/jNpxC/0bitx/b8lMd01K+G
elbRDWvXMUtTo+47vcB5keusAvaxQzXpdu9WmrJjEyE/QEPSUHGgSw73yLQS/4Kr
2jm9kakY80jWjLMycurXlu6QFT+yDi0QghAK8htyEVAsgUFgVJl4G/5IIb/GXUTe
83eNPNjfSoGON8DrVLNPb86m1xPcerFBF+sysMYoYvqQMCQ/8jTA/1fR8+qO/e85
Wu36n9T9U1vrX9LUT8+ZqW14C2I/ZfLY9Q0OdxY8p13lciDOVDJCHpdRhGzrgdAN
SHzYfXSOr3DxXAKirz7nuhCWQBqsRlZcdSVAsdihxq8nMrjrDrQVqU5DrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONCqo/MXu9jzNuyfwUjxmLUF+V0MB8GA1UdIwQY
MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt
ZWVhZDUwOGJlNGVlLzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl
LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSkPyVyO
Oj5RRf4cApTZMA66QLlvMh+JRlPwXRzHb2MNbxnevl8MhzVZaX9RezqI8c/rVESn
m2TnuviufWH/tT6pWrMy05k0Mp1QERo+k0ApndE72+C+oWRpedG1gFNMXjCKbBv2
zhQwuNLh6Tx/sy5/3O68YrFHj6MgOYRPNi+6KKBs48iSjS86YDwYj8bMigYLucWC
IP82NgKI0MJsbZB7kmW2Ex0oszjfFQ0kZi9uW7g0fvHlCEcpQJ77bLQPHuFv/p59
MTX2Acnic1zQFv+MOt1ssT0to+S3iHCG7Wvj8aCs7TIN83i9SSlj9+b+ZYsxnWge
PzY2ZdnlToZyAw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:16 2026 by rpki-client