This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: YapMpxShJoMYbLSCRldoskBxv2eoA7dn+tgXbcSzowk=
Subject key identifier: 37:7B:3C:0D:20:75:D3:F7:D7:A7:2C:37:EA:17:54:AA:73:4C:77:5D
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 019BF8AD74473E7E716B05A7F650017C3C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 17EF
Signing time: Mon 26 Jan 2026 05:01:15 +0000
Manifest this update: Mon 26 Jan 2026 05:01:15 +0000
Manifest next update: Tue 27 Jan 2026 05:01:15 +0000
Files and hashes: 1: 1-M17FsedROaF_Kne-5Hqf60_ZF0.roa (hash: dEdEroRDmqUptgIx5X9EfWXuPhIB2SKqFgAL57TKHAs=)
2: 8xwaS60LVGP0-okttlRwMxeXtAs.asa (hash: eEQj5lWgE4ntot+6zad5rM7H1/i9Quj9OILVi+LsDxQ=)
3: iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa (hash: 853t8WhJ4kw5HbkYp7EUF9CdroSNYLBypKw+/lvJndw=)
4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: i80nvz28l2UB0HnR0N9y+t7StKbnof+zn91W+35SAO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:ad:74:47:3e:7e:71:6b:05:a7:f6:50:01:7c:3c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Jan 26 05:01:15 2026 GMT
Not After : Jan 27 05:01:15 2026 GMT
Subject: CN=377b3c0d2075d3f7d7a72c37ea1754aa734c775d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:33:1e:2b:1e:68:ea:27:9c:71:c8:3f:c9:
f7:58:56:8c:5e:01:d8:32:34:b0:df:17:65:f3:b7:
ec:15:11:34:66:99:a2:50:08:0d:bb:7a:f5:72:bd:
e8:4f:2c:9b:e4:9d:f8:6f:9c:ee:56:a9:94:af:99:
e7:09:8f:e1:d4:fd:f2:eb:24:4f:1b:f8:46:5a:6b:
1d:59:36:54:5a:9e:d6:f3:e2:2f:15:40:4d:a4:83:
88:e3:14:60:13:d1:39:80:23:bc:cd:99:ad:4c:05:
06:08:5a:c2:54:29:cb:51:37:65:39:83:03:5b:52:
2d:94:de:de:9d:90:c7:e7:a1:fc:7a:1c:d2:cf:6d:
f2:0f:d0:e9:34:b3:84:76:13:fc:ed:2d:fa:0d:06:
b9:fa:4e:d1:00:4f:ae:05:3d:cc:49:8c:81:a7:2c:
1f:68:ef:1a:ec:ce:0e:b6:61:38:68:2a:e4:b1:b2:
6e:04:98:91:aa:4c:06:bb:68:d3:ad:c2:f0:08:c6:
f3:23:1a:06:4c:0e:88:c0:0d:f5:fc:5b:30:76:fe:
5d:bb:2f:63:e2:1b:1b:04:23:94:5a:66:f8:05:ec:
b5:99:b3:e2:37:a7:6e:eb:1f:a3:05:71:41:00:de:
93:24:7b:32:45:2b:88:f0:38:50:79:e1:b8:e2:5a:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7B:3C:0D:20:75:D3:F7:D7:A7:2C:37:EA:17:54:AA:73:4C:77:5D
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a9:0e:fc:14:f5:09:d6:6a:a4:72:38:6f:1b:d2:48:da:4d:
00:ec:de:94:2f:48:00:88:a0:5a:b3:77:32:a2:fa:bd:70:1a:
f4:5b:f5:8d:48:42:14:ce:6a:8c:86:50:6b:cf:31:6f:0e:23:
36:32:92:07:82:77:12:90:91:9a:50:f4:00:ca:09:12:43:6d:
70:4e:42:09:19:42:c6:f8:72:62:1a:36:b4:e5:17:08:d2:a7:
50:4b:06:2f:c2:95:47:89:93:64:2b:81:4c:6c:07:c2:d5:d6:
ca:2d:b1:f3:5b:4b:fa:b4:d1:70:ad:08:ae:b1:45:51:61:71:
48:a8:fa:a7:e3:6b:5e:35:fb:f4:20:f1:bc:eb:0b:84:bf:73:
e0:5f:c7:f5:c6:ef:38:b4:39:24:f8:e5:08:dd:49:2c:79:e6:
00:fb:03:80:7d:bf:f1:e5:c8:06:34:3b:b8:11:cf:4b:19:85:
04:79:eb:ca:fb:2a:c3:75:85:82:6c:c9:39:b0:80:57:89:5f:
d8:ba:58:89:b7:ef:d2:a3:42:38:b4:12:60:08:fd:7d:31:4a:
9d:8b:43:21:de:e9:6f:38:91:c5:63:6a:41:17:69:20:ad:97:
7e:19:fb:83:37:3f:ae:23:f8:dd:a3:60:fc:fb:59:86:75:d7:
bf:fe:0e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:37:09 2026 by rpki-client