This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
File: 37htXnTBI0828hmwXXQ7s6Lir9o.mft (raw, json)
Hash identifier: k0pJkQ8MPtBHEFq6/qXPIEmaJp9M32ABHbCNzI/d2Vw=
Subject key identifier: DB:75:DC:D1:E0:3A:8B:26:37:B1:F7:22:F7:A7:B7:84:C5:B7:65:FB
Authority key identifier: DF:B8:6D:5E:74:C1:23:4F:36:F2:19:B0:5D:74:3B:B3:A2:E2:AF:DA
Certificate issuer: /CN=dfb86d5e74c1234f36f219b05d743bb3a2e2afda
Certificate serial: 019BF574D9DE20AF0B1A6A2953ACE080C2ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
Manifest number: 09
Signing time: Sun 25 Jan 2026 14:00:34 +0000
Manifest this update: Sun 25 Jan 2026 14:00:34 +0000
Manifest next update: Mon 26 Jan 2026 14:00:34 +0000
Files and hashes: 1: 37htXnTBI0828hmwXXQ7s6Lir9o.crl (hash: xG9frXlei5+W82oiJWgYxH5vL+JUjPqxGs8J20OPPpA=)
2: McDDjQMho8Ga-dYCijDyzcVZhNM.roa (hash: xcKQ5uX7QQf/1EySaIcDmPqvWpMNL97bfyAO9r8/grI=)
3: ytMTe1i-Zu4pTW79lT5TRfVwPSI.roa (hash: t6h4ViXM4qx0dmLb5H+6fMPRAHTWlfkzeWfqOFIQypQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:74:d9:de:20:af:0b:1a:6a:29:53:ac:e0:80:c2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb86d5e74c1234f36f219b05d743bb3a2e2afda
Validity
Not Before: Jan 25 14:00:34 2026 GMT
Not After : Jan 26 14:00:34 2026 GMT
Subject: CN=db75dcd1e03a8b2637b1f722f7a7b784c5b765fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:a4:11:46:b5:26:09:de:a8:27:87:6a:8f:
8d:54:b0:10:4e:f6:dc:43:24:7b:10:09:33:31:f1:
ae:4a:f5:de:ad:77:db:32:06:c5:21:4b:f2:80:4e:
b2:15:06:14:ea:bc:5e:d0:0c:e3:7f:cd:03:33:51:
ff:78:8c:2b:20:b3:ca:d6:16:8a:7f:0d:f6:41:d5:
e7:f0:0e:d2:48:47:34:c1:2f:0e:69:c5:b1:68:41:
57:8d:4b:42:fc:40:71:ea:da:58:be:e2:4e:a8:a0:
16:6a:6d:91:35:8b:2b:90:48:56:33:f6:f1:a2:a2:
35:b5:05:76:64:8c:2d:c0:75:8f:23:96:90:06:a8:
b3:7a:0a:2d:cf:e8:9c:cd:24:58:cc:90:d8:4a:b8:
ad:65:5b:3c:3a:6a:76:27:a3:2d:2a:cd:ee:be:3e:
6b:49:08:9a:cd:ee:30:e5:72:35:54:3c:7e:18:de:
0e:1e:a4:be:ac:f6:f2:a6:89:30:5e:22:ca:bf:d5:
73:70:3a:6b:f2:08:7a:79:b5:80:62:b4:82:d9:95:
a0:ff:89:10:5b:2b:3d:08:ee:85:c7:77:76:72:f5:
d1:9c:08:10:38:b7:f1:9b:af:62:6f:a8:7d:d3:4a:
bb:37:64:44:ec:93:6f:ec:52:b3:82:ea:4a:8a:c7:
2e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:75:DC:D1:E0:3A:8B:26:37:B1:F7:22:F7:A7:B7:84:C5:B7:65:FB
X509v3 Authority Key Identifier:
keyid:DF:B8:6D:5E:74:C1:23:4F:36:F2:19:B0:5D:74:3B:B3:A2:E2:AF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:79:64:ea:cd:8b:3b:e6:69:14:4b:3c:f8:f5:b8:c5:26:9a:
e1:0a:40:97:87:34:4a:4b:ce:80:cd:a6:bd:ca:09:db:57:79:
e1:85:3c:3a:0f:05:1d:8e:57:95:37:bf:f2:34:e0:2f:79:2a:
7c:b6:44:4c:27:67:35:eb:00:0a:97:4e:cb:22:af:eb:b3:c9:
e2:97:83:49:02:fa:cd:08:dc:91:04:40:63:75:bc:83:df:cb:
b5:82:35:7d:cb:db:9d:6c:db:f7:76:fd:45:96:dc:31:2d:c9:
44:6c:77:ee:a0:98:8c:24:b3:e1:d6:da:5c:a9:75:e2:09:a8:
c2:02:1f:8d:b1:b8:cb:5c:37:ff:e4:86:14:ab:26:82:fa:ae:
cf:3b:b7:93:9c:6a:cb:46:33:15:64:b8:cb:65:b4:81:18:67:
61:5e:41:55:d5:3d:fc:87:b5:b4:60:91:8a:6c:c3:c0:c7:d4:
ae:cc:72:8d:42:db:c5:0f:30:0c:68:ad:ee:40:57:e5:de:6d:
22:9a:79:8f:e7:74:14:2c:58:2d:ca:96:e6:65:50:92:ec:db:
51:d3:dd:54:8f:f0:cb:db:ef:1b:b2:4a:b8:b2:a9:e0:d6:f8:
c5:26:69:d3:d6:9e:64:1d:75:42:c7:9a:65:01:ea:b6:96:16:
fe:c6:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:43 2026 by rpki-client