This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: qYMcls9aTdv1fzQzXGqrm0+5kHyLfDAtMGjtxOXmyKw=
Subject key identifier: A4:3C:8B:14:6A:FD:01:0F:02:76:97:5D:6B:19:99:0B:FB:E8:42:A6
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 019BF61A33BFFF4E8813A56F1416E8C142A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: 030C
Signing time: Sun 25 Jan 2026 17:01:10 +0000
Manifest this update: Sun 25 Jan 2026 17:01:10 +0000
Manifest next update: Mon 26 Jan 2026 17:01:10 +0000
Files and hashes: 1: DhnVxA5epBkWnt3PDulS5ypiRRE.roa (hash: cV+0Z4XARQ4usZE3nfMuQg0VGiGEUn16U9an0D+YjNU=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: XxP7I5ltDPHOWS5uVsc/Syvwbn3/RpVnkiYB8OkWJr4=)
3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:1a:33:bf:ff:4e:88:13:a5:6f:14:16:e8:c1:42:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Jan 25 17:01:10 2026 GMT
Not After : Jan 26 17:01:10 2026 GMT
Subject: CN=a43c8b146afd010f0276975d6b19990bfbe842a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:97:62:cc:92:ff:b3:e9:48:ae:97:32:d0:
93:53:40:b9:c6:24:2f:35:8e:48:0c:e0:68:89:73:
78:3d:94:05:b6:1e:2b:fe:77:67:81:41:c3:fd:08:
83:27:9b:6d:36:6e:c7:67:b5:66:bb:a5:9a:f9:c0:
87:08:0a:0a:79:30:c9:02:9d:7a:5a:73:e3:36:56:
57:1a:5e:dc:99:86:31:00:87:7d:24:0c:0d:6a:fb:
3c:1d:84:67:15:12:46:f5:c6:25:49:62:c8:19:77:
cd:6f:6e:69:23:7e:77:b4:1e:6a:e6:69:bc:63:9c:
0a:40:13:be:80:ec:68:4d:e2:7a:ea:d6:2b:83:36:
31:82:5d:9a:5b:a4:13:46:45:d4:2b:b0:3c:13:7e:
9b:28:29:f3:f9:7b:da:8a:47:04:19:a3:bf:42:38:
4f:0f:10:8f:52:24:4e:e6:3e:3a:92:09:2f:a4:6f:
29:72:cb:f5:06:51:fb:85:6e:5f:36:0b:2f:e6:4a:
74:19:8f:e3:7d:6c:ac:a5:d1:91:54:48:b2:bf:61:
11:8f:58:42:c7:81:e3:59:01:28:be:8d:95:ef:68:
cc:73:28:e2:9e:41:4d:fb:4f:4f:58:bd:30:d6:18:
fd:da:ea:4a:42:86:ad:0b:7d:e6:63:cf:d0:47:ac:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3C:8B:14:6A:FD:01:0F:02:76:97:5D:6B:19:99:0B:FB:E8:42:A6
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1d:02:00:be:fc:5d:8c:05:6e:86:65:9a:ab:a5:37:bc:3b:
e9:23:40:f7:53:9d:1b:56:ac:21:83:07:05:81:f9:45:11:3c:
50:ad:44:40:6c:af:4a:1d:da:3a:61:f0:07:88:3a:5b:83:1a:
16:df:e6:4d:f4:d3:5b:0e:fc:26:29:4a:4a:49:c1:61:57:10:
9b:17:2d:45:3a:13:a5:67:b1:21:6d:03:4a:1e:e5:c7:ad:29:
11:4a:19:77:80:78:81:a6:f0:fd:d3:cb:6c:f2:96:3b:34:53:
c1:91:62:4f:d4:87:b3:bc:b5:26:73:5f:61:da:b1:f8:13:b0:
9c:e5:28:df:fe:7f:4c:38:ac:11:7e:6c:f1:ae:1b:32:8b:3a:
7c:99:14:3d:e8:83:04:da:ac:8d:3d:19:ee:11:89:4f:0d:d5:
66:46:ce:46:de:b4:2b:6a:ea:77:79:21:f8:8b:aa:21:b9:85:
90:56:f3:a8:c1:fc:2e:a9:db:b1:48:dd:f2:65:48:df:6f:68:
17:28:f3:7c:14:e8:85:fe:d0:31:6b:f1:d3:59:e0:12:20:8c:
d0:d5:7d:bc:ba:9b:2a:59:39:33:ea:0b:7a:da:cc:95:b5:3f:
0b:04:15:85:bb:03:bf:45:e6:77:76:25:57:66:e0:a0:c8:3e:
a4:41:1a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:13:57 2026 by rpki-client