This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json)
Hash identifier: W4NuCWx/CpxNkhjpALDoi+hE1NTOVwmbL6glHF6+U9Y=
Subject key identifier: 57:54:E6:9E:87:ED:55:76:19:33:B8:2B:47:8D:A7:28:A7:D2:66:C0
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 019BF3BDF546E9332827E96E30DEDF82DAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
Manifest number: 14C3
Signing time: Sun 25 Jan 2026 06:01:11 +0000
Manifest this update: Sun 25 Jan 2026 06:01:11 +0000
Manifest next update: Mon 26 Jan 2026 06:01:11 +0000
Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=)
2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=)
3: 7mvF9myTKlEKYunZpLTQD5KEFrY.roa (hash: 1UIT2TzCE1FlQDr/AW6XvHwVdir3xpnco3QCOUshSZI=)
4: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (hash: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4=)
5: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=)
6: O1GW4ziuKGxF3aTFCKn2xqIz0NE.roa (hash: ScOFNBiJmWWMmbvpEIy/O/H23s5tvByR/NPpUmMp9Tg=)
7: Z3nS0nqVZ-vslxx54klnYbz02l8.roa (hash: dO6OHSX+aPL7qnM4VP6WsbVvNbzWQqrh27kk5gBnp4w=)
8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=)
9: aBJGwoNtwjYYCfL_vY3KC-5KRiw.roa (hash: qe/bdX+L1Ag/Xhut7yjVu6KrdVE0BnulRsPIthNL1pg=)
10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=)
11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: qxBd6Ru1pVAmTtgn2UUpQpNAj0qnCNgER/VPwt0kJcM=)
12: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (hash: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw=)
13: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=)
14: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:bd:f5:46:e9:33:28:27:e9:6e:30:de:df:82:da:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 25 06:01:11 2026 GMT
Not After : Jan 26 06:01:11 2026 GMT
Subject: CN=5754e69e87ed55761933b82b478da728a7d266c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:87:84:b1:37:b6:70:e8:a8:12:cf:4c:21:
f7:32:d0:75:da:8e:48:da:75:3b:d9:78:10:c5:72:
1a:59:bd:65:4e:05:f9:58:5d:b8:5f:d9:78:10:14:
d4:f1:0c:41:93:71:f4:8e:74:8f:2e:ea:be:d5:21:
97:64:e1:b5:be:34:23:a0:00:e0:11:ac:e1:01:10:
aa:91:7d:4a:eb:76:ff:3e:7d:3c:81:4f:e5:b8:ec:
d4:50:a3:9c:8a:d5:ca:b9:a7:53:d4:54:df:3f:90:
c9:d3:9e:a7:fb:31:b5:c0:94:cc:56:81:bc:f5:d4:
8f:0a:9b:5e:3f:d0:95:fa:39:b1:a2:76:9a:73:39:
d6:84:77:0e:18:95:4f:fc:6f:be:ba:49:90:86:e4:
6a:2e:0d:71:e0:67:be:ed:f5:11:09:25:06:48:6b:
78:09:1e:5e:35:26:3a:ed:60:40:60:44:f2:42:3d:
46:67:11:28:23:f4:8c:16:c6:7a:f7:7f:c3:e1:e5:
63:0c:97:5d:42:8f:01:a8:17:24:d6:58:7f:09:26:
2b:bb:1a:3a:08:d4:f2:1d:1e:8c:ce:37:f5:15:45:
3e:a6:4f:5b:08:f5:a1:17:e0:27:a4:aa:d0:d8:5d:
00:49:31:ec:7e:a1:7b:e4:bc:5d:63:0a:cb:d5:f4:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:54:E6:9E:87:ED:55:76:19:33:B8:2B:47:8D:A7:28:A7:D2:66:C0
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:60:de:14:8f:11:e3:5c:97:ec:84:9d:23:28:bf:62:f1:b5:
03:c2:eb:6c:bb:5c:0d:c6:13:01:37:b9:97:d6:b5:87:0d:81:
b3:8a:19:a2:f9:4b:2a:87:04:a0:de:c8:30:5e:69:0a:d6:79:
58:0b:c9:fc:8d:72:bf:03:52:05:df:68:59:29:af:e4:93:ff:
ab:fd:bb:a6:c9:3e:e1:ba:d0:9f:f7:7f:e0:0a:6c:de:bb:59:
2d:32:62:df:74:c6:88:f1:99:a2:cd:2a:d9:77:1e:0d:f4:7c:
8c:10:5c:ce:97:4a:23:42:22:ef:a4:7f:53:59:b2:ff:76:76:
b8:0a:5d:64:7a:63:bc:8b:b9:5d:e8:21:5d:34:b9:de:1f:9d:
10:fd:bd:71:fd:42:5f:94:c5:05:14:30:90:2b:d4:8a:7f:1f:
a5:71:be:56:45:52:ad:2a:57:ee:ff:7d:b2:b4:da:8d:93:46:
7a:b8:6c:64:45:35:36:83:1d:ea:81:97:b4:fa:ca:f8:02:be:
4b:90:6b:75:d8:59:a1:61:3e:8f:66:92:50:42:66:d9:55:4d:
2c:94:79:d6:39:e4:a1:fc:53:b4:de:bb:d4:94:f5:3a:10:7a:
37:9c:18:36:85:be:cd:b0:01:bc:3d:cb:c0:c8:bf:2b:d0:ef:
07:61:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:30 2026 by rpki-client