This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
File: IKpgywAkMyottomT8zVxWK9gyN4.mft (raw, json)
Hash identifier: Ol+tibuAitS4VnuvTfQMSEbhmSBoVhJ40Ta8ocONAiY=
Subject key identifier: F7:BF:8E:63:EF:9D:3B:E3:57:4B:F0:B1:48:7A:91:89:6B:14:45:A8
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 019BF499B6CE42B854DF97600D5A50B7FE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
Manifest number: 181C
Signing time: Sun 25 Jan 2026 10:01:12 +0000
Manifest this update: Sun 25 Jan 2026 10:01:12 +0000
Manifest next update: Mon 26 Jan 2026 10:01:12 +0000
Files and hashes: 1: IKpgywAkMyottomT8zVxWK9gyN4.crl (hash: DgoIXPmJ1O46btCh0CWdyYB3jluEn1ReR+mmKlYxvTo=)
2: QiXcXG4EDIRSf-VSNpu4RHBWAV4.roa (hash: 0qXAcwhMmlvzkuMEiWShTeGZUNL6+ryDi7ehHbJ1xl8=)
3: Tar1g33LvZCdpcq_JVPYhAJSdEk.roa (hash: QMkYB+0q1+Lk5nvo2OLotb9QUYic5rNjwNkq1hEO+78=)
4: ixwpJztfYUlUnPQNZhnkMR7K_yU.roa (hash: McdR8UEnDJLQe/Y5De9k6/QzPqtdNiKRIqwLfpPLq6I=)
5: rPnkzMR46g2upeGLwnbyd0fXnb4.roa (hash: flmLV+/lWpi4M1ZIkwy5iom73MDu5dXcw9z52gR1sjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:99:b6:ce:42:b8:54:df:97:60:0d:5a:50:b7:fe:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Jan 25 10:01:12 2026 GMT
Not After : Jan 26 10:01:12 2026 GMT
Subject: CN=f7bf8e63ef9d3be3574bf0b1487a91896b1445a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:14:54:d1:dc:05:d6:97:5e:7f:5c:cd:ff:
3a:ba:7b:a5:59:ed:69:72:3f:d6:13:01:59:a0:c9:
05:0c:a8:9a:f0:c1:d1:7a:71:2e:87:01:ee:c4:a6:
48:62:64:d6:3c:11:5d:b0:16:c0:65:53:2b:fc:a3:
8c:7f:bb:e8:b9:bb:9d:f8:23:75:17:8d:ae:f3:f1:
46:d1:a7:98:96:bc:40:23:34:60:ce:9b:2e:df:c2:
98:4f:bc:e5:40:6a:bb:af:15:c6:72:df:dc:6c:cf:
00:1b:0e:7d:ec:a9:56:23:8e:70:fb:61:ad:66:e9:
04:61:3f:f6:43:3f:a5:24:be:a5:e3:9b:02:8a:ae:
d9:61:3b:86:0f:c9:f1:55:d3:d2:f6:7e:08:9d:86:
e9:f5:25:e4:34:8f:8f:73:b0:3a:d2:48:d2:bf:de:
51:cc:0e:4b:ca:e8:ce:3f:f6:99:a3:95:a8:9b:14:
7c:a6:d7:08:d1:26:4c:82:f6:12:96:4e:1d:0f:5f:
1e:90:31:f9:8e:f9:24:94:b0:df:2c:65:6a:cd:52:
e8:2e:ba:80:5f:fd:2a:c3:88:de:2f:50:2c:33:c4:
a1:f7:c9:27:15:a4:61:8c:f8:ca:2e:e0:d8:a0:42:
1b:fc:fc:9d:de:1e:2e:53:64:82:8f:ff:d6:ae:2d:
3a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:8E:63:EF:9D:3B:E3:57:4B:F0:B1:48:7A:91:89:6B:14:45:A8
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:60:79:0f:83:0a:5d:e5:4d:81:51:5b:69:fe:67:9d:8c:80:
38:0a:65:29:b2:1b:d0:4e:7f:75:e8:f5:68:d1:8b:4d:60:70:
06:59:39:cc:ab:62:62:45:2f:43:4f:2e:78:1c:6a:9c:74:fc:
1e:43:cc:3f:5d:53:60:d7:a4:fa:f2:a0:a7:9c:e2:a3:9a:5e:
98:98:fe:f5:f8:b6:53:d3:d7:7f:17:78:0b:fc:6f:d2:4a:ad:
0a:b0:85:b7:18:1e:c6:57:59:e3:b4:fb:70:4b:7a:b4:d5:78:
93:4a:55:28:5d:c5:5d:8e:91:9e:db:ee:dc:13:f4:bc:00:fe:
d0:d1:05:14:0b:d8:03:44:50:a0:0e:bf:7d:23:ce:5b:8c:fc:
a4:f7:8c:97:1b:87:34:79:01:ce:7b:9a:b2:b6:ba:c9:27:7e:
fe:67:c6:85:79:54:18:fb:8d:bd:45:49:fd:52:06:5c:85:bd:
df:81:35:a8:d1:1d:7d:27:13:00:41:c8:0b:13:8c:63:ee:2d:
d0:63:ef:e3:30:4e:b8:07:a1:3e:07:bd:09:19:d7:92:7c:67:
e0:31:11:ce:e8:71:0a:71:b8:fd:08:04:f5:a9:96:f8:b1:d2:
45:bb:7d:07:91:15:82:78:80:6f:84:45:fc:98:13:45:82:88:
da:88:3b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:20 2026 by rpki-client