This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: aYwvu8zUphbiIXYbasR0EasnsmsdN0YEyd4OfJTuquc=
Subject key identifier: AF:38:93:BA:3E:B5:18:7E:CD:F2:65:F5:57:16:1C:F8:28:43:23:B1
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 019BF575614CB074E8052CECC0C39951DE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 155F
Signing time: Sun 25 Jan 2026 14:01:09 +0000
Manifest this update: Sun 25 Jan 2026 14:01:09 +0000
Manifest next update: Mon 26 Jan 2026 14:01:09 +0000
Files and hashes: 1: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (hash: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU=)
2: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (hash: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: PwFxdfuQbNuhJqncveVuLAvw/s9TFEMwlP4qEpyuYiI=)
4: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (hash: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:75:61:4c:b0:74:e8:05:2c:ec:c0:c3:99:51:de:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Jan 25 14:01:09 2026 GMT
Not After : Jan 26 14:01:09 2026 GMT
Subject: CN=af3893ba3eb5187ecdf265f557161cf8284323b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:e8:3d:2c:90:4d:66:f9:79:94:8e:35:f5:
bd:f7:5f:9f:fb:2e:9f:4a:65:76:19:63:86:54:82:
82:22:55:80:11:fe:d8:cf:5d:f3:81:d3:39:97:98:
df:6b:a9:3e:32:0f:56:55:a8:77:dc:3a:a8:e6:39:
61:7f:7c:a9:e1:e7:83:37:71:ff:8e:4e:28:4d:d5:
fd:02:ff:bf:7d:d3:59:8a:0a:a8:c1:43:8c:fa:bb:
7c:16:99:c6:7b:bf:ac:6d:e0:4a:73:4e:4b:d5:fc:
e3:38:43:d7:6e:46:2d:48:b9:09:75:e7:e0:88:12:
d0:45:f0:42:27:2f:ce:7a:3c:d6:e2:0d:69:15:c7:
10:56:b8:1c:4e:c3:95:7d:6c:18:7b:e8:d7:8a:84:
6c:f4:ca:99:50:1d:ea:b3:81:47:f5:79:20:d8:be:
42:39:63:dd:ce:5f:29:ba:1d:c7:55:60:a1:78:23:
51:f5:f7:af:06:fa:76:83:7a:f1:9e:05:39:c6:02:
30:28:4b:3a:7b:e8:47:11:d9:25:79:93:a4:c9:6e:
07:c2:94:f1:f0:0d:e2:06:5a:a4:11:a3:28:31:2a:
7b:b4:97:22:d0:e5:29:bd:27:22:93:56:bb:32:93:
7b:5e:22:30:f2:83:e1:20:a9:4d:b8:42:07:98:c7:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:38:93:BA:3E:B5:18:7E:CD:F2:65:F5:57:16:1C:F8:28:43:23:B1
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0f:cb:c1:d9:6d:32:02:77:6d:67:77:e8:6c:5c:31:93:e6:
f6:a1:c6:c7:7a:a0:d4:f7:3a:24:72:58:88:d0:2c:89:62:90:
71:48:f6:35:fa:f9:9f:7d:0e:97:98:de:43:a9:27:4c:bc:d8:
81:d9:71:04:20:a0:d6:8e:2c:f6:79:c5:69:87:6e:36:c2:6b:
b7:96:c9:a1:59:40:5a:5a:38:0b:78:51:bc:04:e8:8d:81:63:
36:de:1e:20:31:a9:ae:40:e1:a8:a6:a2:7f:bf:fb:ee:ce:b1:
23:e6:bc:bb:e6:1a:30:bc:0d:26:a6:3d:c7:a2:27:a3:b1:50:
d4:a0:83:9d:cb:fb:68:63:7a:51:b8:28:57:8e:34:f9:fa:be:
10:01:e2:1b:07:1a:90:13:07:3e:93:e8:b8:24:ce:bb:f5:aa:
fb:e7:17:0b:8f:26:b6:ef:40:fe:6d:50:ab:b2:4c:38:ef:61:
a3:4b:54:68:f3:e4:c5:c9:b1:d5:db:65:88:5c:65:d0:d6:68:
3f:6c:aa:b4:65:3e:cc:c1:ef:33:93:d5:df:e2:fa:e6:55:2c:
b9:ff:a2:b1:1b:25:54:f2:d3:6f:f8:6e:a5:4d:57:97:be:8e:
7d:ba:a4:41:45:ac:a4:28:5e:43:8c:34:29:b8:a2:23:96:91:
de:82:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:11:22 2026 by rpki-client