This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File: lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier: tvh6Xk+VKWRoLepEuImEpghhHtpdraUSgsGKZr1pOnA=
Subject key identifier: 07:B1:E6:55:E6:E5:37:1C:B1:67:E9:35:90:30:A6:60:1E:9F:CB:9D
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer: /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial: 019BF83EFF55F4949B6F732D207B501AEB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number: 17F7
Signing time: Mon 26 Jan 2026 03:00:36 +0000
Manifest this update: Mon 26 Jan 2026 03:00:36 +0000
Manifest next update: Tue 27 Jan 2026 03:00:36 +0000
Files and hashes: 1: 6SfBDoyfsTmm1mRpfbVHUgPIiO0.roa (hash: mhMaDP22Cm+kaRi3w+odof2fSxz3QNCIZTnea/2LJgc=)
2: GLowxEJyGBp1nEMdWvtqSz0VZiY.roa (hash: ML4E9JdDZZwBbJSqUGhG3KgDDzmdzocsJW0UdpRnOpY=)
3: KpxXMtTi-pZ0mh1UsPIB5GCC_VA.roa (hash: DFWENcijqgC7xsryWlbw+k7LPwKlKMpaUsREr9258uo=)
4: VrsyNZBxGyfOA3YVVpgqeIcESVM.roa (hash: c4qHeMt/gTBhla4MWGpV3XvJ5hr3kuLWCCMFzUqgBBk=)
5: ip5vS9fNHon-mqXtQ-q53u5FWlI.roa (hash: Fs/iN9Gd0AJYsYcUoU48tZmbjn+IsjIvYWzIldNyw9A=)
6: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: 4rz0NX4qK3OpuBp7k6xLkP3ISAcSeYNx/8YjIF8DNq8=)
7: o3zw5qxbUQAN4ngJ04Ua6I_EVso.roa (hash: R6H99VUdlL3VQQMNsfOEfD5tZa5hySUkiaztWdwSB/8=)
8: sdp3C8CB4fN9rVfwq3cSWXaBt2Y.roa (hash: Pc4iJgvyu3odfRJruIllViWmrmTVoSgp0uUpk5XKRjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3e:ff:55:f4:94:9b:6f:73:2d:20:7b:50:1a:eb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
Validity
Not Before: Jan 26 03:00:36 2026 GMT
Not After : Jan 27 03:00:36 2026 GMT
Subject: CN=07b1e655e6e5371cb167e9359030a6601e9fcb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:d0:39:a3:6e:b5:ee:f2:95:32:37:11:a2:
27:c9:f2:0b:0e:13:bc:df:d7:bb:36:13:cd:4c:8c:
6d:b4:19:40:9c:d5:6c:2f:a5:3e:1d:5c:c0:57:b7:
f3:f1:2f:11:81:d9:3a:b0:50:c8:da:47:ab:86:c5:
6e:28:e3:06:99:ae:98:98:78:73:cc:9f:c2:6f:b1:
e4:dc:57:2e:35:1c:48:af:9b:4c:0a:76:a5:b2:21:
b1:d0:92:a1:f7:7a:a9:2c:33:4d:02:ac:5a:5e:b0:
ec:93:ef:c5:09:61:d3:12:a8:7d:01:df:ac:7f:e7:
6f:d2:b3:8e:30:9d:83:a0:3c:94:ea:f0:86:95:42:
6b:87:44:3f:90:a0:12:a6:81:50:57:53:3a:1d:dd:
06:6a:cf:19:e3:7e:30:03:23:26:1b:b5:c1:c2:b5:
f4:20:b1:52:7b:fe:63:23:f5:8b:75:a4:6b:ec:ba:
9d:fb:98:d3:85:d1:eb:44:7c:98:dc:ef:81:8c:ca:
a1:8d:79:a1:45:1d:8a:6d:07:c0:e9:6e:d5:55:97:
de:f4:27:60:63:2f:5c:21:94:d8:08:66:66:e9:1f:
c9:7e:36:1a:c5:6b:4d:56:79:8a:1b:a8:52:d0:3a:
a4:3c:77:26:4e:f9:37:47:d5:a6:65:55:7a:d5:d0:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:E6:55:E6:E5:37:1C:B1:67:E9:35:90:30:A6:60:1E:9F:CB:9D
X509v3 Authority Key Identifier:
keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:06:3b:37:23:27:f8:20:2e:a3:1f:6b:a5:db:24:dd:ac:a4:
f1:d7:3c:09:38:eb:a4:db:9b:b6:21:e9:65:20:26:ee:f1:f2:
17:27:d2:27:27:03:ca:a3:e0:b5:6d:7b:af:54:5c:5c:52:f4:
ef:89:b7:7d:8e:be:33:7a:da:0a:1e:e1:24:b3:b2:0d:3d:19:
9c:50:94:28:0d:f3:5e:e9:b0:e4:88:43:94:1a:bd:d7:20:3c:
ca:c5:12:b1:d3:ee:04:c8:7c:a7:17:33:d2:89:46:84:d9:e2:
28:90:8b:85:1d:3c:e8:4b:68:0f:c2:c3:86:79:9f:a6:00:0f:
01:92:45:0a:63:ec:3f:8c:b7:80:55:49:18:a5:c2:05:33:b0:
43:6d:7c:32:3d:5a:84:d8:7c:45:1d:81:14:4e:31:45:fd:46:
7e:2f:11:23:4e:95:4c:9f:11:7a:98:34:88:82:2e:ee:5e:7f:
df:80:6d:f7:9d:ef:6f:57:33:ca:16:4a:fa:5d:24:8d:b6:2d:
5c:d2:75:16:23:01:ea:6c:5a:96:5f:12:8a:19:a1:20:69:c2:
8c:cb:5c:8e:90:35:47:65:20:38:9e:1e:f5:ad:eb:ec:d5:4e:
a1:1c:b3:44:7c:ed:30:e1:0e:5c:a5:0a:0a:ba:9e:03:20:e5:
16:b9:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:32 2026 by rpki-client