This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
File: cxU1ourrxowWV6r89aeIyHUdm2I.mft (raw, json)
Hash identifier: 6gpre43hMzhB0Iv0xSFRVGrtJqAPKCIeSyo1gf8EObo=
Subject key identifier: D8:38:8A:ED:53:BB:BA:66:B8:E8:B5:F7:D5:2D:67:51:34:51:36:3A
Authority key identifier: 73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
Certificate issuer: /CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Certificate serial: 019BF34FE180F67D3AD3DE7B638A8B346A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
Manifest number: 16C3
Signing time: Sun 25 Jan 2026 04:00:57 +0000
Manifest this update: Sun 25 Jan 2026 04:00:57 +0000
Manifest next update: Mon 26 Jan 2026 04:00:57 +0000
Files and hashes: 1: KFAbKKe7jo2XjrWvMFjbhME-DXc.roa (hash: 4OtvIQVEiPvcGG7i9r46Rvs1hJ/uhdVoDzjyfUfIYZk=)
2: TMosgBiabWiuRyi5Ssatcr00sSE.roa (hash: F+7FnUFFY40UIl2jFbgxyGZqPlinYg7PSVeRNWNABjs=)
3: cxU1ourrxowWV6r89aeIyHUdm2I.crl (hash: ytRKXJGWXNcgzQZTQuXkTpEu3V7QsHpfnSf7ChXIfcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:4f:e1:80:f6:7d:3a:d3:de:7b:63:8a:8b:34:6a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731535a2eaebc68c1657aafcf5a788c8751d9b62
Validity
Not Before: Jan 25 04:00:57 2026 GMT
Not After : Jan 26 04:00:57 2026 GMT
Subject: CN=d8388aed53bbba66b8e8b5f7d52d67513451363a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:7f:08:34:d4:bf:e9:1e:82:1b:3b:a1:7f:
5d:3e:f1:cb:55:14:75:3e:b0:0f:fe:3f:d4:9b:e8:
f9:5b:29:28:ab:70:52:73:d2:d2:dc:cb:9c:37:97:
b4:58:b9:cc:97:30:fc:ec:6f:b4:1f:92:9b:28:d8:
04:4f:63:cc:84:3d:5f:53:dc:1e:57:c3:d0:4d:a4:
1d:59:a8:18:0b:f8:31:60:6a:54:8e:d6:e0:51:10:
fd:91:89:98:5f:06:a4:89:0f:03:ad:41:3e:d0:5c:
19:15:dc:5b:75:40:48:5f:ec:e8:76:f6:65:c8:9c:
1a:bd:0f:c3:07:af:cb:13:9a:68:b9:98:54:72:c6:
02:85:d0:a4:e2:d6:20:c1:9f:2a:84:5d:da:83:09:
c3:e9:cb:fe:69:64:b7:6d:ca:14:53:c7:2c:6f:1f:
21:f8:cf:f1:87:85:7f:02:14:8c:14:b4:82:5d:8d:
86:9f:60:f0:8a:14:5f:a4:41:0b:cd:d4:c2:c2:b7:
b7:df:f1:0c:92:be:be:04:90:c4:17:19:89:9f:47:
6c:ab:41:1c:b3:d2:76:d9:f3:7c:1e:74:ee:ae:33:
9e:eb:49:8b:d1:06:29:de:87:2a:de:1a:a9:d0:52:
63:ad:44:65:d9:96:e4:5d:e4:e5:3b:f1:05:4d:bd:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:38:8A:ED:53:BB:BA:66:B8:E8:B5:F7:D5:2D:67:51:34:51:36:3A
X509v3 Authority Key Identifier:
keyid:73:15:35:A2:EA:EB:C6:8C:16:57:AA:FC:F5:A7:88:C8:75:1D:9B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxU1ourrxowWV6r89aeIyHUdm2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9620ce-43f0-42bc-af59-435bda5bd048/1/cxU1ourrxowWV6r89aeIyHUdm2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a8:ed:e0:d9:f1:35:3f:e1:e0:da:0e:e9:e8:8d:63:b0:51:
d3:d8:e5:06:c2:db:5d:bb:5b:71:6b:37:b7:89:af:0e:88:10:
ec:15:47:d8:bf:7c:34:3c:e4:f6:c8:15:91:33:05:ab:60:f8:
d2:3b:40:1f:7f:eb:9e:b9:37:b5:7a:4e:31:79:fb:ee:c5:3d:
1a:3b:cc:36:1e:00:b3:40:d0:a4:66:79:df:22:52:10:f4:d4:
a8:fa:6f:ef:82:8c:b9:82:c8:5c:87:17:d1:b4:a6:3f:d5:60:
55:d5:76:4c:01:b6:72:25:fb:79:2b:05:28:a6:f1:04:3a:57:
fc:9b:53:8d:89:54:cb:33:be:c9:14:41:05:9d:e0:f3:16:3d:
95:01:59:59:fa:5e:ef:33:77:b9:0d:d4:c4:61:00:c3:93:d7:
67:9b:e9:8a:46:bf:dd:13:11:1a:33:a9:1e:7b:aa:68:fe:18:
0a:9a:da:5b:38:e4:e2:c4:b6:21:32:40:7c:34:a1:b5:f3:41:
9c:cc:3a:29:c5:c4:d9:c8:6a:12:aa:c3:f0:1b:21:ef:db:81:
c8:bb:fd:25:9a:09:44:aa:ad:d3:91:c6:ee:cd:4e:47:38:65:
17:d2:64:f7:e7:2a:f7:de:69:20:c2:cd:72:4c:ab:9d:3b:ac:
54:9f:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:51 2026 by rpki-client