This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json)
Hash identifier: P4J2a7h7cVW0A3f6EAXYMeq3Fe/LEydVTA9/Ipjpgqw=
Subject key identifier: B4:A6:68:20:E0:CF:B7:05:B6:78:DF:17:26:03:62:07:1D:7C:70:B0
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019BF61A579CE936ED0FFA8EB7813F04DC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
Manifest number: 1823
Signing time: Sun 25 Jan 2026 17:01:20 +0000
Manifest this update: Sun 25 Jan 2026 17:01:20 +0000
Manifest next update: Mon 26 Jan 2026 17:01:20 +0000
Files and hashes: 1: 1-QjCvQyEiSSrXN04KWll_jRfeW0.roa (hash: RMz19B8NK0lDXxzH2DOAYRkrqiIKDr84AiR/LHs2BHU=)
2: 1-X27IuJGjEWD538xJuX4fc13cFQ.roa (hash: h9nhsX5bhwK6F3kmXdBDjN240g4PwWDk5C/hsalPlfw=)
3: BOjpyE22EDrXW2wH5ueNqr-_t7M.roa (hash: JzVtX64VS2LC7Jo6NzhZJ9tn4S0/NMOoGFR3UGv+gFE=)
4: BvDqb9cc-WJGTsR3tIgfxMVXMzg.roa (hash: M3gvEkXIu3VF4OHCFfprYhRQqSznoxtSmwJpexYP1d8=)
5: EeCtLuBTD9Vnd2ZnCvIwFMY3lbQ.roa (hash: xhrDK2dmq7qtYkf86RQax67dAPsbZo2ArZ5UCuQLz7I=)
6: GxCZoQUkV5fBAXhSL4DEgTYGJQo.roa (hash: G9NhBuAJ9tyZxN2RMYoM+cN+FlYgn+5It9aPaKFMmf0=)
7: M88D89mcwOgwS0smNU2-YZ_Y7Ns.roa (hash: sFx8wL28VJls261Z4+Yoo4E3wUg010twMp4FzjomCF8=)
8: OFU4rYQAL-sOvU42wXKsJPFLqgo.roa (hash: gfh4xBU+FrULOBmBwbJZ1n1nb4fdCqFs8mhTRC5PTWk=)
9: PpN955svl-HLDw6fLf58eCV0ziY.roa (hash: AoTlEjxNh1f4w0jTYiNps1tCHpqZbK+PCcDLj0smKN8=)
10: SrEzEjwK-3uKVpak9gMqzGNpdCg.roa (hash: 42ZM42HvDr7NNH3ONprmjvWUIm8DwnTLbUUIzVU2/1Y=)
11: Y3NRzC9hifQe9usbuWmpK6keugQ.roa (hash: VJqsHGvkgw+GazL84ykrZQy43X4CZ0v3NwjmAtv8RIs=)
12: YRAKxO_5PDBMOVzyQuHwC3_OCD0.roa (hash: R49X3LjYIsb7KWKXblARjfqClqVhgPPU/f35T6qlbaA=)
13: b6_1YvrxO5H13PgeqX9yvKDmS8Y.roa (hash: LmP1grhJtls1Giy8pUC8zHO3rUSGz/0KggmC8aeJ/z0=)
14: bUNfA-Av4UmqF4BtunXlZ21q724.roa (hash: qQU2e8dztU2kTJC7bA4kqu6ev957L6OyeDRTaJouBzU=)
15: d0Se-Q1hirJpXCWc1a3yM36OdkM.roa (hash: WUitFtPR3eqhcQYIVu73IqaLIgnHpMyqoNV1i8MCbTQ=)
16: fJVUUHPA2PMcN0st0PbAgYkXKuw.roa (hash: aUscwIj6WUdJlI5efFgW5oAZ5dGdU9hgEbv9zQfdoL8=)
17: iznH3vVYi9D8I6W0a_m2eZRKsNE.roa (hash: wZkljNiGiuoftSlkxO1vcP+VKneTmBt0zwFDnL+VZJg=)
18: jwqLq-su-FeQFPMunwZCdpiE4yQ.roa (hash: 0DD9DnMv2SCd06HIdn93/9sFlkj49ZuqQQMpvkACvaM=)
19: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: 2RhR5PiTIseH955cczchZMr2Ew81olXo7qBgj6hxrIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:1a:57:9c:e9:36:ed:0f:fa:8e:b7:81:3f:04:dc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 25 17:01:20 2026 GMT
Not After : Jan 26 17:01:20 2026 GMT
Subject: CN=b4a66820e0cfb705b678df17260362071d7c70b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:83:88:de:b2:23:07:21:af:67:94:b8:05:
0e:97:3f:3b:04:dd:4a:c3:30:40:b5:b1:0c:d3:8b:
7f:3b:73:7d:4e:b2:ee:27:c0:b0:32:ac:6b:1a:aa:
5d:54:d7:3f:27:37:78:1a:84:f5:5a:b1:2a:48:47:
ee:7f:6f:9c:05:fb:6f:ad:d2:cc:3d:c2:c7:ac:23:
43:83:a9:2c:a2:16:e2:3a:39:fc:87:94:4c:d8:4c:
9d:c3:58:bd:d7:6c:ad:e4:7b:10:1c:a7:7c:4e:1a:
a9:82:01:41:87:54:4d:f7:e4:da:8b:a6:23:31:e6:
15:c1:e7:f8:6c:e8:bb:05:38:41:70:aa:aa:af:b6:
91:4a:d0:49:ac:27:bf:31:c3:81:3f:77:72:fc:da:
36:96:d2:65:6a:f4:9e:90:56:ac:71:7d:b1:b3:9a:
0e:0e:99:25:10:23:b0:f9:be:2d:7d:c4:64:97:55:
d0:c7:16:36:13:b9:66:f0:b4:19:27:84:93:67:e9:
c0:62:01:e8:ce:2c:58:c9:99:fe:98:fc:cf:f5:51:
42:13:f2:4c:ed:ca:d7:d1:cb:4d:c1:f6:23:d0:87:
eb:11:af:0a:6e:a5:8f:d3:bd:7e:ad:30:73:55:2d:
a7:0e:5b:50:cc:54:48:1d:62:0a:f7:46:ba:05:d8:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A6:68:20:E0:CF:B7:05:B6:78:DF:17:26:03:62:07:1D:7C:70:B0
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:15:75:0a:56:31:6d:c9:a6:6f:fa:e9:03:63:66:27:63:34:
5c:b9:75:e2:28:9e:21:4a:c5:a2:30:6b:f0:5a:77:52:79:d6:
72:55:ca:8e:5a:eb:8e:8b:80:4d:b2:fd:a7:d8:e5:f8:e2:45:
33:14:5e:07:f5:5d:87:4f:56:19:6b:c7:f6:6b:0a:55:70:58:
a2:f1:81:e0:94:90:b4:bb:fc:ce:21:94:f8:65:fb:31:0b:5a:
e3:2a:43:24:95:1b:ed:f3:f7:8a:71:cd:d0:e1:4b:c9:9d:0f:
09:9f:6a:b7:5d:b7:14:5e:86:b3:a1:83:46:49:06:0f:25:fe:
b6:97:e4:9b:d5:5d:0c:0c:83:88:20:31:fc:7b:14:62:d1:eb:
82:e5:0a:a6:91:1b:64:1e:8f:c5:97:e2:1e:3a:25:b9:0b:ee:
66:3e:0e:e3:b7:b3:2d:4f:3d:c4:04:70:0d:9e:47:b7:38:e8:
c7:da:6a:a5:28:a5:f6:27:56:ef:b9:02:38:e0:c7:f4:84:c4:
bc:ca:15:4b:96:90:fb:27:5c:4c:1b:93:19:08:d2:f3:cc:bf:
7b:4b:59:be:1a:53:81:2a:4d:79:fe:48:25:42:71:10:65:bb:
5e:4f:51:1b:44:a3:38:dd:da:a2:6c:f2:42:18:4c:45:dd:c6:
21:5c:63:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:43 2026 by rpki-client