This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: ejGb+qjdga06c4lQz9UoKXUushjrNpRJ4wRGVeLr05o=
Subject key identifier: 65:33:0E:3F:AD:75:DE:09:D8:9B:37:68:96:87:6E:77:1E:FB:62:13
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 019BF5079BCC0D8C8187B690166C8BA51195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 17E8
Signing time: Sun 25 Jan 2026 12:01:15 +0000
Manifest this update: Sun 25 Jan 2026 12:01:15 +0000
Manifest next update: Mon 26 Jan 2026 12:01:15 +0000
Files and hashes: 1: QPbL87CmRT1ll0u9cNfWuv1QlyA.roa (hash: 8Z1WQs/0Meh/R2Q6A9r9cYWb2lmAvHlCtOd8UxHsBvk=)
2: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: JeZalib6sgMoe9ZkfwAyKSOtjEmwoGbKNhWWaoh11wo=)
3: zA-JAsK-5Dim3-SrX670VbjLnXQ.roa (hash: 8KB8obCvtfReso5cwgxqXrjE6TJfCW9MSYEyqCiQ9Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:9b:cc:0d:8c:81:87:b6:90:16:6c:8b:a5:11:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jan 25 12:01:15 2026 GMT
Not After : Jan 26 12:01:15 2026 GMT
Subject: CN=65330e3fad75de09d89b376896876e771efb6213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d1:9c:48:33:11:9e:f4:2f:52:95:c0:6a:cf:
f9:07:a0:4c:da:d4:78:11:f9:41:20:ba:5f:20:67:
6e:81:c7:6a:90:ec:93:a3:0e:05:60:ae:07:d2:97:
f0:fe:0c:59:cf:42:60:23:4f:95:a3:0d:cd:f2:3c:
d6:e3:10:fb:8b:8e:24:4e:bb:43:55:29:b1:cb:7c:
85:e8:71:f1:9f:bc:25:a5:ca:90:d1:3a:12:f3:1f:
44:0e:9e:22:95:97:67:13:a7:f5:38:ec:5d:f1:5c:
ab:64:a2:7f:9d:ef:75:7c:6e:57:30:29:ca:14:dd:
17:49:3d:04:2a:70:41:02:e1:3b:0d:63:7a:5a:2b:
98:e8:83:18:a7:2d:f2:d7:86:49:87:28:d2:fd:46:
7f:2f:cd:0e:1d:ca:4c:b4:33:e3:5e:76:22:1e:61:
89:c6:33:17:f9:04:9a:ef:e9:6a:7e:0b:56:d4:ce:
3c:40:f0:46:44:cb:ea:4f:64:15:94:ce:0c:3c:66:
56:ba:66:0a:71:5e:a1:e8:5e:77:31:f1:2a:d6:dc:
de:30:d7:ff:37:59:1d:44:0d:ef:3b:b5:e1:e2:d4:
24:48:47:c0:96:7d:08:48:29:82:da:be:76:2c:da:
15:12:44:6d:39:59:d3:2c:ae:34:dc:3b:da:3a:82:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:33:0E:3F:AD:75:DE:09:D8:9B:37:68:96:87:6E:77:1E:FB:62:13
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:df:1e:08:60:e8:2d:73:94:eb:72:b0:ba:71:96:90:31:98:
ab:e2:a0:0a:9b:ea:1a:34:a7:c8:74:11:c3:0d:03:a5:f5:61:
49:3d:00:cd:79:50:86:e8:d4:c0:58:54:ea:4d:fe:31:0c:a3:
a5:c0:0c:5d:39:0b:a6:4f:71:81:ff:ae:b0:0e:ef:f9:13:29:
27:5f:89:86:61:fe:4a:22:5d:d4:ec:c8:cd:51:36:12:df:b1:
bb:d6:7d:3d:59:40:85:d9:ba:1b:44:da:ab:44:4b:7e:e9:18:
e5:45:89:72:f7:d5:6c:6e:4f:ee:91:d7:90:5e:26:86:7b:12:
c6:ab:72:5f:70:67:ce:a2:a9:be:4b:b0:dc:f2:6a:d7:4f:b1:
26:26:c8:9e:25:69:96:db:f3:b5:f5:52:32:fa:aa:43:de:fc:
56:cb:5f:c3:4d:92:ac:b8:cc:70:84:bf:03:18:8c:7e:ca:14:
ba:11:0c:09:d8:06:89:2b:77:20:a7:52:2e:98:8d:d8:fe:6b:
3b:99:b4:28:c8:48:aa:ca:d9:51:b4:e8:aa:c3:71:a0:7e:ec:
e3:6c:b4:21:1e:76:f0:86:93:22:5d:8d:8a:e2:b5:ea:c4:07:
fa:6d:69:b2:dc:9f:c3:19:b2:1d:2e:77:2e:3c:ee:cd:12:fb:
ef:01:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:19 2026 by rpki-client