This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json)
Hash identifier: g+7qgp8uwTDEZms+QR2yDbUkgkzSoOHeyi/mp58i1NY=
Subject key identifier: FC:3F:14:FE:58:ED:25:15:AF:27:87:97:E2:24:21:5E:53:D7:36:DF
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 019BF6F5690190316BFB655A0026FAFC50ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
Manifest number: 17EE
Signing time: Sun 25 Jan 2026 21:00:36 +0000
Manifest this update: Sun 25 Jan 2026 21:00:36 +0000
Manifest next update: Mon 26 Jan 2026 21:00:36 +0000
Files and hashes: 1: 1ms-U7GStIQWyhBvk39Pmz4mWvA.roa (hash: lEZsZW9Tv4rbrMsSytyM2px+I6/78sknyWxeRiHKwJM=)
2: 465Kcfdz-gCkfuGZh8doO_u-oWc.roa (hash: +omro3YFQE2sJ1eByZhKP6jW3x+UZ2ptJKtI+7UVFM8=)
3: FudhY_GW4msTOukhgnBFXzVYoiM.roa (hash: 7UgC+06y5UTQvkQ9UgPJMOjARzvFFXEio5n7Jvg4z+k=)
4: HK6BNNsWSLGubaZl3upPyutswvU.roa (hash: WzFjY3CdZWeDvACOL+XKBEMBzEj0lVc25php/SCslcU=)
5: IBvfpHlo0nhBmzHxQLjSRpI2BSY.roa (hash: DAVNHApbGflPu1pSl2KrRTguzWmq2zUGW0dSw+3gnZ8=)
6: LTfWXRthcASup-DyG7vEDraK0EY.roa (hash: whp6f+y/ya/1LAvlaxCVtUimjkVrV3wXO989ASjx2UI=)
7: RfF_v-9FmIipQG47sMLeSIwsCwA.roa (hash: CvFjyOB2OKSAf0EIN8oLCwNbtih0Yd+Yc2x40ZJ9uxE=)
8: XZ_A9oOFh615-GWf-jG9mLRl_BA.roa (hash: IjFd4KfJkkTKhVMOqjReLPHCLFxiAiN7OyTxurp0L6k=)
9: cqQ13TfAA2f3o1iYd5u_zHjR1og.roa (hash: PPVmtCcOrF5jhwXK7aADjsl4uaCgfyEm1Gbo+31zhCo=)
10: kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa (hash: S9J7ulFMDCXhT6uUyj2J+Qhp8QQOqTeuNdKWWsuYDSA=)
11: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: uMcGsOEzDBwgwbhL8B8sVw8PL7t0ZMwOsh3ersMJEnM=)
12: rEIw8icF5JeHNJs8hiRgw1rRnR0.roa (hash: ZktjBhuI012cqumaMif+o0oMdONZdwewIFYAJ7bf8FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:f5:69:01:90:31:6b:fb:65:5a:00:26:fa:fc:50:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 25 21:00:36 2026 GMT
Not After : Jan 26 21:00:36 2026 GMT
Subject: CN=fc3f14fe58ed2515af278797e224215e53d736df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:bb:93:73:d0:c1:cd:be:16:6c:12:08:39:
1e:fe:fd:bc:93:b9:64:b8:6f:c8:36:0e:67:7f:de:
22:b2:4e:b6:f1:4e:37:bc:d6:62:0c:0a:a5:fd:f0:
49:bf:90:ae:f4:e5:7c:35:46:b3:2c:c3:9a:ff:98:
7f:0b:10:5f:3e:11:ce:6e:89:18:e3:f5:da:f7:bc:
2b:30:ae:89:e6:ed:3d:c5:22:65:60:bc:3e:46:d9:
ec:43:fe:4b:41:ba:f2:66:a9:2a:c2:43:3b:91:0e:
34:15:62:a2:af:a2:bc:96:fe:e2:0e:98:5d:93:5a:
e1:d8:f3:ec:1d:ef:e7:94:19:7b:77:67:09:16:3b:
44:f3:12:67:f1:de:cf:fc:37:2d:b7:3d:be:63:b3:
31:75:bc:16:7b:5a:d1:fe:13:2e:24:4d:07:61:a9:
07:81:49:a9:e3:44:54:4e:05:3d:74:4c:3d:e9:9c:
80:a3:ba:7f:de:dc:d6:47:a4:e7:0b:91:6c:b8:c1:
7c:5a:36:e8:9d:1b:6d:ea:21:35:de:1d:a2:55:a8:
ea:9e:b6:70:cf:78:e8:34:2a:4c:4e:fb:33:df:a6:
1a:c2:10:fa:02:ba:7e:a3:50:78:9b:bb:1e:e3:d0:
e1:41:f2:7b:22:f7:f8:0f:34:69:a8:a3:f1:53:3e:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3F:14:FE:58:ED:25:15:AF:27:87:97:E2:24:21:5E:53:D7:36:DF
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:24:c6:b3:2d:51:f4:33:ca:44:eb:7f:8b:f3:b5:13:8a:78:
f7:e8:bb:ca:c2:29:5b:2a:39:c1:b9:d9:19:41:7a:e2:17:9f:
1c:16:71:88:70:ed:9c:de:b0:24:36:44:98:be:17:9a:b4:79:
96:5f:29:04:72:7c:95:8d:ec:47:6f:c7:33:18:23:d7:56:bb:
19:a2:2d:5b:9d:02:57:b1:57:a4:c9:dd:41:97:db:e2:42:65:
45:7b:fc:01:39:c8:61:a5:e3:4e:ba:76:70:8a:e3:79:02:f5:
80:81:25:61:6e:48:ad:00:72:05:23:96:23:e1:4b:85:9e:41:
f1:62:f8:c7:41:6e:99:57:e8:a6:47:2a:a4:df:19:f6:b2:97:
67:72:f2:e8:09:67:63:fa:1d:00:6b:f4:c0:8a:0c:11:b3:dc:
09:fd:6c:33:c0:24:bf:95:92:b9:18:f9:b4:ae:97:70:80:47:
46:d9:96:17:3b:7a:72:cd:e0:1e:d7:9f:e5:90:b6:b2:91:fb:
b2:59:52:5d:36:1c:6a:7b:2a:e4:a8:c9:d9:94:95:f2:e5:d2:
ee:4c:77:98:64:c3:3f:1f:84:12:69:7b:a4:ba:9d:db:7e:d0:
21:49:c8:7b:e2:f0:d4:66:33:17:27:ea:4b:33:66:01:6e:3e:
5d:d7:73:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:19:33 2026 by rpki-client