This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json)
Hash identifier: UoFGibVTUrZjr69FVset3DLA8MC07/pNU4oIx5UUXBs=
Subject key identifier: DB:E7:94:26:A0:07:F4:5E:CD:23:83:A8:45:22:33:F2:74:DF:BC:A1
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 019BF499641328A4E41D8A083697D928FCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
Manifest number: 069D
Signing time: Sun 25 Jan 2026 10:00:51 +0000
Manifest this update: Sun 25 Jan 2026 10:00:51 +0000
Manifest next update: Mon 26 Jan 2026 10:00:51 +0000
Files and hashes: 1: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=)
2: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: txGwTmYN3+JO6O8chVKCXqlMgBYLk6d2MfhwysJaruM=)
3: AuuFpGckEdWDmpSli6J4EvnBEFA.roa (hash: UWwZYirMViLQ4FhWk6naRNb3lf/S07gxbtcPGiaea3M=)
4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=)
5: D_jYfwuBOjkANvdaFHDPTLr66JQ.roa (hash: vAK4Fi/RAnr6XiRotftdXv2sD1o6dY70W8WZ/V0XyK4=)
6: JRpzznWelvDGpNctUx-9YeQj91I.roa (hash: UWpK2mc+BRq0WDsXbRZApCIJ/yZuMuk8WsuIDijlk30=)
7: N8T1T4yzeC_svV7N6clN6YYuhS0.roa (hash: Zjsphs8xxbX+E2wFNgFNlo+S/FNhRonrcNCUdPBKUgo=)
8: XCau4ffd9wRsX7TYXIogzR2WqO4.roa (hash: ftqkiMajJgdI8EjDHWxMovMT410S0p0no+51o9gTIa8=)
9: YARBLfUZ9k_hQNuqCW-GW04WaQI.roa (hash: YYeeEXSa0og2pjEcv4jU32lCZBeHpaJXhmkA+TmvUbg=)
10: YfhOPAWRkHzsFNKQodjoA2IhLKM.roa (hash: 9/L6hUhQcrkiGTuXjLMFbE6LlWLBn2NBCH2Dr2RZSJA=)
11: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=)
12: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=)
13: aHuFfSOUYXmTmBwxHlPwh-EVryM.roa (hash: 4h0lpb8Jw+MnXWrJAhTnOT+WFcvU+QMAmEsFwZdu5/k=)
14: cbz_UwKygebEETks8KwAVV-eHtI.roa (hash: WJoVOrBK0/PoGMf01zl6RkMQBV3g0+LhIriyrmd4GqQ=)
15: egsOE6bZvfKQiaDurlHql4l7FQo.roa (hash: BP8wlsBgKB6wKVje/kb04PbZKDtzqCLIojy+BbhlXD4=)
16: hieYljUxWV_urT3FVt4VHwUYJHA.roa (hash: uaNQn7nDi6rwH6tpmG6o5xOJwukq6sKOWsUOpBkHxN0=)
17: v8v2OaJG7Hdhmb6VYMUj66YcSY0.roa (hash: B7Lry8kdmTHVcZ/TVSfBhCUi/wQDju0yT/ymY52jHqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:99:64:13:28:a4:e4:1d:8a:08:36:97:d9:28:fc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Jan 25 10:00:51 2026 GMT
Not After : Jan 26 10:00:51 2026 GMT
Subject: CN=dbe79426a007f45ecd2383a8452233f274dfbca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:cb:d4:e7:a7:9c:dc:80:a8:40:55:56:ca:
0f:a7:d9:86:3a:8d:a0:e7:9c:df:4f:99:fb:8f:d6:
d7:45:a8:6c:9a:8f:6d:d3:dd:87:f3:c4:f9:80:f5:
76:bf:22:37:4a:b1:ba:c4:d1:12:03:fd:1c:5c:6d:
50:e4:6c:2d:21:5c:68:e7:bc:4f:57:1f:bf:cd:02:
25:0a:e3:bb:6d:51:34:57:02:95:54:6e:28:32:87:
49:ad:86:14:bc:e7:e6:f4:06:87:a0:d9:21:e8:85:
1d:15:96:0b:cd:42:97:30:50:82:ea:b9:b6:2c:fb:
6f:43:df:63:c3:ff:63:fd:eb:37:54:c5:21:1d:0f:
d5:f4:eb:28:ff:d3:92:c6:df:a2:dd:c3:7a:a2:9d:
e1:83:dc:0a:ad:bd:f1:82:5d:42:25:8e:6c:95:9c:
c7:a5:3e:dd:79:f6:4e:96:68:49:a8:ac:ca:40:68:
b8:fe:1c:3a:ac:8c:c3:67:4b:52:5b:2b:1c:2b:e1:
9b:6b:31:99:ba:32:51:88:80:3c:9f:82:f6:41:c9:
76:96:0b:eb:1f:ff:f3:82:d3:91:24:d8:4d:10:44:
91:09:bb:65:7b:3d:08:92:59:b2:59:e2:10:c7:4e:
a9:21:90:2f:fd:3f:bb:c6:a4:4f:46:f3:19:98:38:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E7:94:26:A0:07:F4:5E:CD:23:83:A8:45:22:33:F2:74:DF:BC:A1
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:aa:e0:34:51:73:d1:13:a8:1b:ce:4c:3b:b5:3d:ac:9d:64:
3f:1f:78:04:88:48:54:6b:0b:53:3f:94:c9:75:7f:81:fd:c9:
38:88:6b:7b:f1:bb:0d:79:79:95:ca:ef:68:1b:c4:8b:49:f8:
87:5a:f4:e9:cb:12:99:0b:19:e9:c5:0e:ce:83:81:68:92:49:
9b:9c:de:f2:70:49:3a:40:b3:58:3f:e0:90:93:3e:9d:a9:75:
03:2c:93:a1:4a:42:86:7a:11:4d:10:35:4a:e9:90:7e:d3:78:
a5:69:40:78:db:87:4b:91:f0:3c:1f:0b:ee:55:6f:7d:d8:87:
8a:fd:df:ea:fc:a1:e4:79:a6:c9:e3:43:10:fa:82:3d:f6:ea:
77:4f:78:c6:63:07:e5:20:75:45:27:d3:86:7e:1c:16:1a:5d:
b6:56:bb:40:8e:3d:3d:7e:70:e8:c7:82:21:53:5e:a5:78:4c:
13:29:a8:0d:8a:8f:26:7f:9f:4a:4d:e6:7c:79:a4:8d:4c:17:
19:97:2c:d4:15:f9:46:15:f0:8a:2a:fc:22:6f:81:8e:a5:b2:
0e:95:d2:69:c3:d6:fb:62:16:06:80:bd:11:49:b0:72:f9:62:
e1:94:0d:02:0c:b0:cc:5d:97:f0:20:b6:03:de:0c:aa:6c:58:
43:ad:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:18:27 2026 by rpki-client