This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: p3xRGzR5Fxpg5yiBnB0X5pGQjj2szxhryQiuXZVNJsc=
Subject key identifier: 84:84:8A:73:65:0E:69:2B:2C:DD:C7:6E:56:4E:A7:3A:27:20:23:9F
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 019BF8E3CEB0ABD60B3DB018852D1CAC0C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 17F1
Signing time: Mon 26 Jan 2026 06:00:37 +0000
Manifest this update: Mon 26 Jan 2026 06:00:37 +0000
Manifest next update: Tue 27 Jan 2026 06:00:37 +0000
Files and hashes: 1: 8MCnCiuGbqnzU7k4AiuuVxxMVjI.roa (hash: 3AKQoBBhnfUzI34hMZSnvSfZtjxdcBOFKymfp/vwl0g=)
2: MnRpYakEEH_3YM8B7YjpXHZCSHs.roa (hash: As4Z8EIpoOCvUeHagBG0PnKSVumw3phPbQAL1UT50X8=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: O3zFFQ4KtEfc5lIbjHj+Yem+3ajudLHizKIADjp++vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:e3:ce:b0:ab:d6:0b:3d:b0:18:85:2d:1c:ac:0c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jan 26 06:00:37 2026 GMT
Not After : Jan 27 06:00:37 2026 GMT
Subject: CN=84848a73650e692b2cddc76e564ea73a2720239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:ec:66:af:a0:22:ef:67:96:f4:8c:cd:e7:
54:f8:b5:e5:0e:6e:eb:4a:7d:be:15:e0:23:ef:6f:
71:b2:99:16:6b:c0:69:4e:1a:2e:44:13:2f:37:7b:
2f:84:fb:5d:f8:0d:2c:84:2d:0d:a3:26:12:d3:af:
f4:66:36:13:c8:f6:6e:c9:22:6c:19:40:9d:df:39:
b8:a7:0d:e4:58:c2:47:8e:c5:69:30:49:22:46:74:
83:54:9e:40:64:04:0b:d7:3b:ce:68:e7:48:23:8a:
35:6a:42:29:53:c1:15:e9:13:4a:63:63:f0:aa:d3:
a1:1a:46:84:83:48:02:d3:28:28:2c:88:6b:21:b0:
d5:d4:2e:84:58:0a:47:17:7c:28:2f:e6:a2:dd:6b:
b2:84:1a:67:13:9c:68:2c:7f:8a:7b:35:f2:4e:38:
eb:8d:b8:07:05:c4:60:5d:b8:f1:f9:e9:67:e1:85:
e5:c3:f1:d8:23:0e:84:7b:a1:7a:aa:5c:72:18:ad:
e0:84:25:23:1a:b2:e9:78:4a:05:27:ad:3b:85:b6:
c7:64:58:a2:13:db:c8:d1:4a:96:dc:0f:5a:7b:8e:
ae:2c:c5:1b:48:3a:ef:33:6f:7f:48:3f:2c:da:0b:
91:00:c6:ee:38:d3:e0:18:4e:8d:e7:ea:5d:95:07:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:84:8A:73:65:0E:69:2B:2C:DD:C7:6E:56:4E:A7:3A:27:20:23:9F
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a0:89:9a:f4:d3:53:56:d6:aa:11:18:45:18:02:59:f2:03:
db:ed:27:d9:28:9a:1b:b6:d3:07:c1:48:d1:e6:66:50:64:31:
b9:97:33:4c:3d:8e:c9:41:1d:a0:41:bb:98:f5:98:48:a9:db:
73:00:c7:0a:6d:b5:a0:af:1b:95:36:d3:f1:8c:98:b1:40:7a:
e2:e2:29:d3:06:a0:4f:f4:d4:7b:80:5f:26:b2:54:36:9f:58:
68:fd:c2:b8:96:fe:fd:a5:8f:ae:97:4f:4a:28:32:8f:91:bf:
c9:bc:13:1e:ba:0a:3a:2f:d7:2e:40:6f:35:62:c1:be:4f:4e:
5f:4b:a6:12:af:b5:0a:a2:af:dc:cb:d8:75:e1:9b:e8:30:15:
2f:9d:8f:9c:26:07:df:45:1b:d3:36:29:76:ad:15:aa:6c:62:
35:2b:11:b3:36:12:81:d0:a7:73:72:eb:23:78:0a:c3:7d:1b:
da:6c:8f:8d:21:dd:c0:cf:84:02:2e:0a:d3:63:4e:50:19:8e:
4c:bf:86:b8:79:ef:f7:c4:89:ef:94:9a:43:5b:f9:d7:b9:c7:
9a:ca:60:de:1a:90:7a:50:73:56:38:23:43:dc:04:55:1c:45:
a1:5a:b1:2b:7a:10:66:91:a1:16:6e:bf:ed:bf:2a:8a:78:44:
74:81:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:09 2026 by rpki-client