This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: LjSJJPl0jihQ48piOcBe6Ynm1+dzcU7Tt75EubcotGU=
Subject key identifier: F9:3F:87:B8:84:4D:BD:BC:78:E8:0D:05:EB:14:E5:B7:2B:67:DE:17
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 019BF7D180D8A43C3BD62E08DDD3FEA38298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 17EC
Signing time: Mon 26 Jan 2026 01:01:00 +0000
Manifest this update: Mon 26 Jan 2026 01:01:00 +0000
Manifest next update: Tue 27 Jan 2026 01:01:00 +0000
Files and hashes: 1: DaMOJU-jBrrr4RoMTTYusmitb4Y.roa (hash: JaWn7XzXCxX7Vb9+fDuk+/iiSPUdUFQByfCjt0a4ezU=)
2: Gzc5BxD8yLe_aSYEhdH7qxC53Bk.roa (hash: K0PmYBi2jbuDcvq/ABfyge5LDH1NQzitSjirHjoyzGI=)
3: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: Uj0IISMNi915zFgn+pOLFwpr48ogW7jvPUZ3KKwonhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:d1:80:d8:a4:3c:3b:d6:2e:08:dd:d3:fe:a3:82:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: Jan 26 01:01:00 2026 GMT
Not After : Jan 27 01:01:00 2026 GMT
Subject: CN=f93f87b8844dbdbc78e80d05eb14e5b72b67de17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:0d:d2:b6:6e:33:f3:c2:bb:ee:5f:73:cd:
5a:02:11:95:aa:82:c7:d1:53:97:6d:5c:b9:55:10:
b5:65:6d:8f:6f:6f:e2:35:0e:84:58:68:c7:61:f9:
5f:b3:0b:2c:3d:ba:7d:5c:7b:7a:61:78:2a:70:f9:
52:1a:3f:cb:ad:04:df:e2:23:74:05:68:89:df:2b:
49:c9:f3:b9:b6:bd:4c:c3:d7:8d:4e:5e:e2:a1:56:
47:02:27:f8:19:b1:75:82:3e:ad:07:29:af:f7:48:
03:c8:8c:cc:e0:3a:d5:00:c3:77:da:83:f5:56:1d:
24:48:e1:5f:75:a6:c7:42:36:b8:c5:4e:18:48:fb:
53:6e:ab:cc:84:88:46:11:ec:48:b0:10:3d:67:f7:
ab:72:f5:a5:b3:f2:17:b0:1c:00:6e:7c:df:34:fe:
51:da:48:36:df:9a:bb:98:e2:e4:c0:6e:a3:ea:2a:
f5:1e:bd:f2:ea:99:6a:ff:07:49:69:02:51:df:68:
51:df:60:fb:66:38:b8:70:9d:cc:ed:63:c4:ee:ff:
90:a2:a7:3a:70:32:de:0f:8c:b4:b4:5e:e4:45:3e:
30:4b:7c:b8:3c:86:80:57:0d:57:bd:10:fc:47:61:
f4:bc:67:84:e0:e4:36:bf:7a:a6:94:b0:02:3a:46:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3F:87:B8:84:4D:BD:BC:78:E8:0D:05:EB:14:E5:B7:2B:67:DE:17
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f9:83:9a:94:f6:65:4f:b8:d9:a8:a0:cb:17:65:d6:72:f1:
95:1b:fa:6b:92:72:b5:25:47:8d:d3:4d:fa:92:a5:a6:d8:12:
d0:ef:fa:b6:3d:15:57:d4:3c:1d:8d:c9:39:72:96:ff:02:69:
e1:19:ee:f6:4b:a3:ad:2b:53:c6:c0:26:5f:33:a2:ee:7e:4b:
73:71:b1:b8:ec:2e:85:9a:86:43:b2:67:52:94:7d:15:f7:c9:
f4:1a:4e:93:54:36:b5:39:e7:f8:46:87:a3:0e:af:36:9b:18:
7f:9d:08:cf:cb:e4:eb:3c:f6:2d:b7:0b:ea:12:c7:ec:c5:14:
39:41:81:dd:fa:4c:ee:d6:36:77:39:3e:1a:70:8c:27:21:63:
b1:7d:38:63:5b:97:08:ca:22:a6:e2:4c:0f:24:7e:ed:df:cc:
e4:e4:4e:e0:dc:f9:85:99:34:e3:66:bd:c9:dd:a1:10:80:98:
b9:7d:6d:e0:1a:6e:6b:7e:3e:b8:5f:a8:c1:f5:b3:ce:d4:d0:
1f:e9:0f:c4:97:4d:d3:84:e8:63:38:f3:73:27:fc:b9:d9:86:
a8:1e:8c:0b:6e:c8:4f:73:13:33:0b:da:43:66:3f:fc:9e:87:
dd:09:de:a5:7f:b9:95:7d:53:2d:d3:24:24:09:92:4f:ef:c9:
06:a3:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:10 2026 by rpki-client