This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier: 0rGX0wbDxd+Po8/xoIlhLGDdUZnEtaaRhofbiAWZ9II=
Subject key identifier: 94:72:61:AA:06:B2:13:6E:B6:CD:97:21:53:0E:BD:3F:76:E8:B5:36
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer: /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial: 019BF3867ECB783E0EA6E2B0F990A6816281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 05:00:36 +0000
Manifest this update: Sun 25 Jan 2026 05:00:36 +0000
Manifest next update: Mon 26 Jan 2026 05:00:36 +0000
Files and hashes: 1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: gmArXwu1yvtiCYPUjBG1MYWrc0n+/WQdpWPX3Uf+dEA=)
2: Hn_LCCRDmjyNueRI3elE9laK5xI.roa (hash: zx3FAqcnGLkSrVH13HOmt2qFoY0EISrhfmg+joIi6tM=)
3: inZ0fZj5v4khhsdRrEDmAl61m18.roa (hash: TSaJLO6U/WjD/PJ9OHG/92HNGT3vTBc16T5ZmK6rT6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:86:7e:cb:78:3e:0e:a6:e2:b0:f9:90:a6:81:62:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Validity
Not Before: Jan 25 05:00:36 2026 GMT
Not After : Jan 26 05:00:36 2026 GMT
Subject: CN=947261aa06b2136eb6cd9721530ebd3f76e8b536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:04:63:d7:56:ef:ab:48:1f:bd:91:cf:bc:8c:
4b:46:ea:58:fe:69:46:b8:97:da:38:cd:10:07:27:
21:07:58:dc:da:bb:bc:0a:3f:e5:40:7c:82:aa:a1:
8f:02:38:c2:fe:5e:f0:e0:6c:cf:5f:80:5a:db:9d:
9a:1f:ac:f6:ab:e3:78:1e:3f:32:21:43:00:74:63:
27:eb:c2:ff:5b:46:cf:0b:65:3e:5b:d6:1b:c1:81:
41:e6:25:f5:c5:7e:93:70:0d:a9:f5:19:ff:8c:d3:
bf:c8:9e:7e:05:5d:91:38:ee:03:ba:35:e0:cd:ac:
cb:4a:63:81:bd:28:d1:b1:6c:15:c7:3d:91:0d:bc:
83:df:fc:fc:6f:1e:de:73:f7:47:8c:25:2b:44:57:
8e:82:64:c3:77:16:ce:ee:c2:b5:e6:e9:5b:8b:92:
b2:d3:66:6c:d0:44:22:58:f2:c7:a6:6e:5f:2e:0f:
0c:37:dd:67:b2:9d:f1:f9:2e:5f:d4:59:25:af:27:
e5:a3:a0:23:f2:b3:8c:b8:47:d8:b3:55:27:43:22:
37:78:6c:b7:af:1b:33:46:24:05:59:2a:25:ba:fc:
cb:69:88:ce:c1:78:af:75:ba:40:96:09:15:37:0c:
9b:c1:eb:a2:a2:6a:7d:56:fb:21:36:81:6e:4c:9e:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:72:61:AA:06:B2:13:6E:B6:CD:97:21:53:0E:BD:3F:76:E8:B5:36
X509v3 Authority Key Identifier:
keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e6:d5:f8:b0:0b:86:9d:89:09:4f:97:76:1c:9c:26:d0:5e:
95:97:84:ce:eb:70:55:3b:86:c6:89:af:c9:50:c1:e9:7d:74:
71:29:05:7c:04:48:71:83:50:07:95:61:4d:f4:e3:99:d6:ca:
6e:96:37:c0:29:1d:22:31:5d:27:7d:1e:41:56:13:1e:de:dd:
ce:ac:88:fe:8a:9c:11:f7:8f:4e:ac:b8:cd:67:e8:e7:37:ba:
7e:93:93:1a:ec:35:2a:6d:a7:03:e4:64:a2:27:aa:b8:71:d6:
72:7a:7f:04:c6:fe:c0:e9:13:a5:0d:0b:ee:c8:12:bd:11:89:
4b:61:ef:13:8b:d5:1b:58:1c:1d:10:0f:cf:16:89:39:c1:28:
33:df:6c:a1:8a:e6:66:7c:b5:d2:d2:38:4d:aa:40:e8:f1:fa:
91:3f:d5:fa:51:75:8f:3e:95:4f:d7:25:d0:5a:29:70:1b:3a:
02:fd:88:b8:ae:8d:b9:6b:58:82:26:ef:96:51:34:e8:16:6d:
9f:d9:23:12:a4:10:4b:79:f0:f7:2f:b9:97:5a:16:df:e9:25:
7f:be:57:00:e2:02:14:05:73:da:5d:bd:58:55:7f:71:df:6d:
12:54:4d:94:ea:84:7c:29:8e:ca:6a:2d:8e:09:e3:29:3d:80:
53:f2:0b:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzhn7LeD4OpuKw+ZCmgWKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NTk2NzZmZTEzOGQ0ZWIyYWFlMTliYjY3MzFmZWU2Mjky
ZDc5M2QwHhcNMjYwMTI1MDUwMDM2WhcNMjYwMTI2MDUwMDM2WjAzMTEwLwYDVQQD
Eyg5NDcyNjFhYTA2YjIxMzZlYjZjZDk3MjE1MzBlYmQzZjc2ZThiNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QRj11bvq0gfvZHPvIxLRupY/mlG
uJfaOM0QBychB1jc2ru8Cj/lQHyCqqGPAjjC/l7w4GzPX4Ba252aH6z2q+N4Hj8y
IUMAdGMn68L/W0bPC2U+W9YbwYFB5iX1xX6TcA2p9Rn/jNO/yJ5+BV2ROO4DujXg
zazLSmOBvSjRsWwVxz2RDbyD3/z8bx7ec/dHjCUrRFeOgmTDdxbO7sK15ulbi5Ky
02Zs0EQiWPLHpm5fLg8MN91nsp3x+S5f1Fklryflo6Aj8rOMuEfYs1UnQyI3eGy3
rxszRiQFWSoluvzLaYjOwXivdbpAlgkVNwybweuiomp9VvshNoFuTJ5UdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRyYaoGshNuts2XIVMOvT926LU2MB8GA1UdIwQY
MBaAFNlZZ2/hONTrKq4Zu2cx/uYpLXk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEt
NGM3NGQzMzJlYTU4LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jZjAyOGUtNzU3ZS00ODQzLWExZWEtNGM3NGQzMzJlYTU4
LzEvMlZsbmItRTQxT3NxcmhtN1p6SC01aWt0ZVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+bV+LAL
hp2JCU+XdhycJtBelZeEzutwVTuGxomvyVDB6X10cSkFfARIcYNQB5VhTfTjmdbK
bpY3wCkdIjFdJ30eQVYTHt7dzqyI/oqcEfePTqy4zWfo5ze6fpOTGuw1Km2nA+Rk
oiequHHWcnp/BMb+wOkTpQ0L7sgSvRGJS2HvE4vVG1gcHRAPzxaJOcEoM99soYrm
Zny10tI4TapA6PH6kT/V+lF1jz6VT9cl0FopcBs6Av2IuK6NuWtYgibvllE06BZt
n9kjEqQQS3nw9y+5l1oW3+klf75XAOICFAVz2l29WFV/cd9tElRNlOqEfCmOymot
jgnjKT2AU/IL1g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:35 2026 by rpki-client