This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: Sm1+LMaQjXbEovvyfrQt7l864AMl0ydukLTr43hO7xg=
Subject key identifier: 1E:8F:D7:D4:93:EF:96:EF:84:AD:F6:9B:C5:CD:30:B9:66:7D:D0:E5
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019BF840045831634707A68B11509B97DFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 17ED
Signing time: Mon 26 Jan 2026 03:01:43 +0000
Manifest this update: Mon 26 Jan 2026 03:01:43 +0000
Manifest next update: Tue 27 Jan 2026 03:01:43 +0000
Files and hashes: 1: 3YqbB1GuntlXTN3OXE5PC6dhvpg.roa (hash: hbo6GO1fAPrpNKKJDafeakcbKbX+UjE9vJCOKLHEtOU=)
2: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: bVXehCC8y2kTOVdi8NqM0MLfo9jN35xcnLNI3Ua7NWY=)
3: oGOv0O1ixZRdG92zwrspojU0VwY.roa (hash: IjgFyfvL9U08ADh5P0ZxxkAaF6oStHyHq7QR+Yuo9FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:40:04:58:31:63:47:07:a6:8b:11:50:9b:97:df:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Jan 26 03:01:43 2026 GMT
Not After : Jan 27 03:01:43 2026 GMT
Subject: CN=1e8fd7d493ef96ef84adf69bc5cd30b9667dd0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:39:f5:dc:18:e4:90:38:b2:35:24:a6:b9:
08:72:8e:c9:b0:bf:77:5b:31:f1:c4:0c:ff:11:28:
3a:cc:cf:46:b8:31:95:b3:1a:9d:41:a0:ef:9b:ad:
a9:5a:2c:6c:d1:51:d1:c0:40:40:7c:e5:0a:33:6f:
18:01:30:5a:36:46:8d:6b:35:95:30:be:ee:d0:4c:
bc:09:95:cd:f0:a5:b1:38:7d:89:5b:68:d1:1e:cd:
64:19:b6:29:99:10:54:b4:80:0d:6a:5b:bb:19:ec:
36:37:cf:ec:e5:ba:e1:82:89:4e:36:b8:18:5e:40:
87:5d:21:6b:f2:32:3c:8c:4b:4b:f2:6b:13:60:48:
92:97:a8:2d:d9:64:2b:f5:5e:64:50:30:ca:2e:9f:
9a:14:a5:77:93:93:e6:8f:ae:97:ec:d2:70:f4:9b:
f1:25:ec:96:53:e4:00:b3:98:03:4c:47:ef:a8:59:
af:68:0f:08:7c:8e:00:b4:b4:3a:d3:e3:92:0a:29:
87:76:19:c2:2a:d2:63:3f:5c:a6:42:4c:b9:f4:fd:
9a:0a:cc:c8:7a:d7:61:78:dd:f8:58:4f:d6:0a:9c:
f8:1e:6d:f5:ef:49:b1:c0:4d:02:0e:f8:aa:7f:0c:
12:19:85:fd:c9:fc:28:07:33:2a:fa:07:8b:88:a7:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8F:D7:D4:93:EF:96:EF:84:AD:F6:9B:C5:CD:30:B9:66:7D:D0:E5
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3f:54:14:69:df:cc:e3:04:f7:93:c5:79:89:52:2c:00:de:
eb:50:d9:ce:77:ad:1a:9b:93:89:df:99:d5:13:e4:64:58:9b:
a0:15:1a:52:e1:a4:cb:eb:85:7d:e5:23:da:e5:f2:13:28:df:
e5:de:09:a4:43:a4:d5:4f:54:e9:b2:01:f1:09:46:d6:06:76:
dc:7c:f3:bb:03:88:50:1a:10:e3:60:ba:f6:2f:ff:9a:79:79:
40:a9:30:53:44:85:9f:ec:16:5e:76:37:9e:4f:4f:c5:66:b9:
e2:bf:08:63:f0:d8:d8:c4:7b:ce:27:a2:5f:9b:e8:06:c6:b4:
e2:de:60:c6:cd:33:d6:50:37:31:68:94:9f:bb:3f:2b:17:48:
c2:4e:32:50:01:77:5c:ad:d9:9f:a2:39:bf:a1:0a:51:8a:96:
3b:99:1f:71:78:14:30:d8:e5:0d:0c:50:48:52:26:cd:36:43:
0f:9e:20:2b:0e:e5:eb:24:07:80:40:6c:8b:76:e9:54:24:1f:
00:71:f3:1c:85:51:34:06:d9:92:cf:31:f2:ae:dc:1a:a7:34:
f9:8f:03:c6:1d:79:a2:4a:e6:30:18:46:75:d3:53:1b:a2:ad:
d0:50:53:1a:76:c1:f7:e3:c0:81:3e:fb:cc:0b:1a:76:3a:b1:
25:b0:12:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:13 2026 by rpki-client