This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: o5wbFgnFWEmp+RQ+W4Nrr0v5QwiIvKFSRRL7obs9ZXw=
Subject key identifier: 67:EC:35:62:50:1D:E4:28:CD:D7:F5:9F:79:18:51:DB:FA:85:94:D2
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 019BF83FC4404B46B8EA8CECBEE90DB64966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 17F2
Signing time: Mon 26 Jan 2026 03:01:27 +0000
Manifest this update: Mon 26 Jan 2026 03:01:27 +0000
Manifest next update: Tue 27 Jan 2026 03:01:27 +0000
Files and hashes: 1: 9JSd5mLZQxTENPBnyy1O2LgxykM.roa (hash: P3ZS+YpFvi1dhS7gQBkLkLcByo9/L4kNrUtrMJzqYV8=)
2: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (hash: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: l5M1DrwqPW0dBmCvG9/C+/+4e1BLV42lFIwH2aKp8sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3f:c4:40:4b:46:b8:ea:8c:ec:be:e9:0d:b6:49:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jan 26 03:01:27 2026 GMT
Not After : Jan 27 03:01:27 2026 GMT
Subject: CN=67ec3562501de428cdd7f59f791851dbfa8594d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:99:42:a9:a2:da:ad:64:54:e7:56:e1:32:
be:93:46:1f:24:76:23:91:8f:84:8b:da:4a:5d:ec:
58:65:bd:b3:92:68:1f:f3:28:05:f1:a4:e3:94:0f:
f2:ee:57:7d:d7:3f:ca:87:61:9b:40:0a:84:8a:37:
b3:40:06:d2:9e:67:c9:0a:9c:dd:1e:95:d2:fd:8b:
f3:15:51:5b:82:fa:4b:3d:91:31:e7:d8:2b:df:a0:
2d:04:f3:53:39:8c:ae:71:fc:d0:4c:db:41:34:e0:
76:95:96:11:d7:ec:a4:c0:0f:74:25:68:7e:f2:1b:
22:2f:41:23:5d:b4:7f:b5:e2:12:7c:4e:43:f6:02:
60:99:31:ca:8e:b7:67:02:2d:50:8d:89:55:be:e4:
8a:9a:26:25:80:f8:98:bc:ed:e8:cc:e2:d9:64:4e:
69:03:c4:f7:a1:96:0d:36:fb:78:5d:0c:2f:c2:6f:
93:08:13:11:43:e5:21:58:8d:bd:39:ea:d5:11:c9:
20:a4:b7:e7:ca:10:c9:fc:0c:6c:8f:da:e4:ae:59:
e8:61:1a:e2:ee:0e:6a:9a:fb:03:04:36:a0:73:40:
ea:17:c4:ca:78:e5:50:29:6b:ee:44:cd:3d:ae:5f:
88:b5:cc:da:1a:05:50:2a:fc:69:3a:bf:3a:2e:e5:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EC:35:62:50:1D:E4:28:CD:D7:F5:9F:79:18:51:DB:FA:85:94:D2
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f4:dc:14:22:42:4e:5d:6b:ba:78:64:b3:75:77:2b:69:b3:
3f:25:70:36:28:0f:28:38:fb:78:dd:25:0f:79:d9:22:d7:96:
29:b7:b9:7d:6e:bb:18:8f:88:9e:79:77:6c:bb:a1:dd:ea:d5:
da:84:66:36:12:c6:84:2c:5a:23:9c:d8:df:37:fb:d0:37:30:
1c:65:65:3f:7c:5c:12:75:5c:ee:38:4b:a7:b0:39:21:a3:9e:
8d:6d:f6:bf:27:1d:0a:21:98:e7:3a:bc:41:59:81:b5:54:a0:
e5:53:10:cf:fd:a8:3e:9a:d5:b1:0f:bc:ef:3f:49:31:89:2f:
8b:2b:29:84:25:75:c6:86:b7:9f:2a:d3:0a:6c:24:5b:64:b0:
f1:a4:0c:8c:81:92:78:21:a8:22:b9:9c:b8:7f:b6:b6:89:ef:
47:f7:31:ca:36:0a:32:9f:b2:e6:fb:6a:d5:19:ca:85:e7:92:
4f:57:c0:ae:c7:0c:5c:57:b1:a9:1e:68:38:3c:b6:fe:9d:f6:
6f:cd:fb:de:70:32:66:f1:35:c5:94:a9:36:d8:9a:76:6a:03:
29:1f:0a:68:55:73:71:a7:5a:57:59:78:49:ae:f2:d1:00:1e:
e3:47:7f:80:62:54:97:5d:ff:9c:f0:fa:ba:31:f9:11:ad:55:
fa:10:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:09:00 2026 by rpki-client