This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
File: MK_3UgloSjVGaQYdI9op-OovHV4.mft (raw, json)
Hash identifier: GAZMVD9ENzlcOhaBI22eq98IutQ6WNw607k/Kdx41vk=
Subject key identifier: DF:08:77:76:10:38:6C:B9:05:BD:09:0A:82:01:0C:37:35:A4:C8:E8
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019BF7635B4012196AA194AB8F8612B36D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
Manifest number: 17E9
Signing time: Sun 25 Jan 2026 23:00:42 +0000
Manifest this update: Sun 25 Jan 2026 23:00:42 +0000
Manifest next update: Mon 26 Jan 2026 23:00:42 +0000
Files and hashes: 1: MK_3UgloSjVGaQYdI9op-OovHV4.crl (hash: eForVvhrQUCeuII1FrweEaxyRiyMtgJRfJgWlcdIiaM=)
2: a27hhTWfb3ZPwrefxvzFE-4LpOE.roa (hash: YD2HgofzORwQjqE1QvYrEUR0cZCvAl9rAIiyQ1ikAHA=)
3: jEXsJW-dSuLpQO5YOKPLDNwuGDI.roa (hash: UIwmv+B0668akDpzT0mGvVjjYi0KKoE4bndrHcRym44=)
4: kWWdtEhqg1dCNgXGWoYGtZ9BeWA.roa (hash: VUdKbSYy58Sq3hGEUKTZb/1GA0+WdozldyShq/dEyqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:63:5b:40:12:19:6a:a1:94:ab:8f:86:12:b3:6d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Jan 25 23:00:42 2026 GMT
Not After : Jan 26 23:00:42 2026 GMT
Subject: CN=df08777610386cb905bd090a82010c3735a4c8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:3e:41:2a:b2:66:f3:7e:13:6e:d4:0e:b8:
f0:8b:59:11:26:5b:a6:82:9a:0d:e9:fb:e8:4d:ca:
48:f3:10:12:10:7b:f9:7f:bb:67:2a:b9:1f:b5:f3:
88:23:7d:a3:f8:33:2c:e0:21:f2:35:1c:06:f2:5e:
92:c7:45:f6:95:0b:57:d0:33:90:16:99:7c:77:b0:
58:ad:ae:58:fc:fb:65:c3:b7:15:d9:86:34:d8:0e:
7f:c9:08:63:bc:6f:d3:61:42:c3:b2:e7:f2:9f:64:
2d:5a:62:02:af:e5:ee:97:48:df:bc:5a:6f:6a:5a:
02:cd:f4:49:c2:82:99:30:cb:e9:63:43:f9:a1:6c:
56:c0:75:cf:64:84:02:58:b4:b3:a4:3b:21:0f:82:
77:c5:76:9c:a4:69:39:fa:3b:0b:22:a8:b7:5a:d3:
ab:bd:c6:34:19:f1:f8:41:bd:b8:4a:31:70:42:be:
52:eb:29:f9:33:a7:5f:3f:6c:2b:e3:8f:38:19:ea:
7f:ad:4e:4a:69:07:fc:ef:b8:c2:b4:f4:4b:5d:98:
ff:84:db:ed:b6:1f:16:b2:f0:f3:78:c3:c8:a9:ea:
61:9e:da:ab:93:43:d8:8e:d3:a2:27:0f:de:e4:17:
ca:55:1a:47:59:9a:1f:ec:80:2c:87:9e:5c:0f:6e:
80:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:08:77:76:10:38:6C:B9:05:BD:09:0A:82:01:0C:37:35:A4:C8:E8
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:32:65:b8:18:2f:99:13:55:43:c9:20:7e:08:e3:1f:61:e8:
2a:56:f0:74:25:f2:9b:01:ba:6d:69:e4:8e:61:6f:9b:9e:1e:
07:26:95:d2:92:7c:6e:24:0b:69:69:df:ee:40:9a:2f:c1:b9:
e8:f8:53:c4:17:b8:ae:4a:38:3b:d2:fd:bf:c1:4f:46:12:9b:
22:78:f9:a2:5e:f6:4b:6b:65:7e:c0:b4:2d:07:64:63:dc:20:
bc:f9:1e:55:f0:d7:e0:5c:ef:85:13:7b:80:bf:a3:7a:5d:4d:
6a:2f:32:43:33:c0:ce:7b:9f:81:3e:d1:68:3d:ad:e6:69:97:
81:fc:f0:05:a7:c8:56:c7:e7:d3:70:9b:1b:3b:5c:d4:e9:9e:
b9:83:23:07:67:f6:94:42:80:ac:e5:d7:72:31:aa:06:b1:cb:
e0:92:b9:54:23:35:af:28:45:9a:d5:5b:93:7d:74:aa:c1:ec:
2b:20:72:ef:15:9b:f8:27:92:08:ac:93:8c:e5:3b:75:33:72:
5a:41:c2:ba:34:88:9d:64:c9:6c:f8:aa:56:d9:a6:11:98:f2:
96:09:e0:a5:25:e3:56:ba:9a:06:e5:dc:55:56:c4:3f:cb:73:
98:5b:f9:af:3b:30:26:e7:c7:1f:37:2e:5d:27:f1:02:fc:b6:
bb:31:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:25 2026 by rpki-client