This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File: C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier: AzqPDpHCmYVBYcKar2xV0AeNKxWN/BVXOVEv1XJ1bf8=
Subject key identifier: 04:A2:7F:D3:56:77:6E:21:05:98:18:64:3A:85:36:C8:1A:DE:7D:CE
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 019BF5E313A1AFA4D822B408F674B562779F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 16:00:58 +0000
Manifest this update: Sun 25 Jan 2026 16:00:58 +0000
Manifest next update: Mon 26 Jan 2026 16:00:58 +0000
Files and hashes: 1: BsVMQCwzb6fLZN9IOEUj8HBMBlA.roa (hash: gKYj8cm9ixiRan4+/ZNTVTfJExcSD4j/qJmLYu6r0l0=)
2: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: u3pSK/XUVShTx9IfOeRPiL2zW7MagNvtaI2d0prZzJQ=)
3: OWJuJrNuwbbFDFgA56uuuJeCvL8.roa (hash: /ZFH55PDC4s2E7M5LW3jwm4Uto4IlWIhyCzpet8FzZY=)
4: kN99vFdbAempQ2A2_gxGNJ7ed64.roa (hash: 1v+1gMi8uf5SBhW1FJK7tf586/slgxWuh9VuZL56b4M=)
5: qqChK2CC--XfiqQ3itiiXN4ZaLk.roa (hash: vw2QX5EDda3N6rfxeaGaRSjR39gSe4erxpGMw/tBzeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:e3:13:a1:af:a4:d8:22:b4:08:f6:74:b5:62:77:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Jan 25 16:00:58 2026 GMT
Not After : Jan 26 16:00:58 2026 GMT
Subject: CN=04a27fd356776e21059818643a8536c81ade7dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:b2:84:ba:48:4d:2d:71:0a:00:f3:55:65:
9d:bf:96:a6:30:02:20:0d:85:0a:d5:78:77:fa:c7:
1e:c0:c7:52:2a:d2:ff:08:4c:90:14:9f:8f:bc:74:
bd:5c:0f:2b:22:97:ce:67:20:bf:36:00:c2:35:ee:
f2:01:04:51:6e:16:31:0a:70:38:d2:87:56:0a:b5:
13:37:0e:76:7c:3d:68:bc:ec:da:3d:ba:8f:5a:f3:
0b:f8:d9:09:e3:6d:d1:b4:2c:b3:e7:1a:f6:69:e0:
37:91:11:f3:50:52:6e:48:8b:0c:c4:08:cd:0d:93:
bd:32:9a:09:d6:f1:8d:91:83:81:12:2a:a3:89:8b:
37:73:cd:d6:d4:72:44:2d:17:04:3c:a5:a0:28:b0:
47:15:12:1f:76:23:8b:f8:cc:53:57:e8:9b:e4:8b:
c8:12:7b:b3:0d:1b:9b:ef:92:a5:96:c0:65:53:0a:
9b:e6:d1:d0:40:fc:00:df:90:c1:69:40:03:84:d6:
37:d8:e9:3d:dc:6e:76:8c:19:10:64:17:cd:8c:7a:
2a:eb:d6:ad:f2:e1:ff:7a:56:4b:be:9b:df:9e:dc:
36:f1:d7:c1:98:ae:23:b3:c6:25:8e:a6:d9:6b:dc:
f7:49:44:d0:f3:9c:6a:6a:a2:51:8b:6e:22:4c:f8:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A2:7F:D3:56:77:6E:21:05:98:18:64:3A:85:36:C8:1A:DE:7D:CE
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:80:68:8d:f3:bc:0a:0a:d6:47:cb:70:79:55:a3:21:8a:3d:
95:0b:c3:3a:4d:b5:40:04:f4:ab:be:f3:bc:29:8d:4b:1d:45:
3b:e6:ce:84:cc:3a:5c:6c:b0:01:96:3b:5d:5a:ae:24:d2:ba:
b7:fb:c7:e5:81:02:ab:5a:74:0e:49:69:64:14:e1:eb:eb:42:
5a:42:0d:9a:97:d6:2e:6c:06:d0:9c:7e:ef:02:fe:1f:12:71:
5c:49:86:e1:41:ac:e7:88:f8:a2:85:59:b7:ef:6d:1c:b9:2e:
23:c6:48:74:bf:81:8b:02:c9:06:cf:d2:6c:42:fc:96:89:7b:
f7:f4:95:b3:83:32:60:43:fd:43:b5:c5:3c:a9:06:5e:fb:05:
dd:b9:b3:ce:8e:46:2d:5f:a6:94:32:a4:89:ef:06:a8:a9:ce:
9f:06:7e:fb:da:7a:34:e5:02:63:db:29:50:04:50:29:6b:30:
5b:0c:54:b0:ad:68:56:4d:52:6a:b5:37:70:5f:65:28:ed:92:
e5:fd:ef:f6:71:c6:c3:89:73:77:e0:a6:74:14:43:a5:c7:04:
d3:53:60:78:f5:b6:16:83:32:9b:b6:ab:80:22:f3:a4:6c:6f:
48:7f:10:bd:32:b5:8a:cf:d2:98:3e:f4:1c:49:4e:48:10:48:
6a:08:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:10:04 2026 by rpki-client