This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File: Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier: 8OtiB6p5vA7bICjUrRovwFrHPE9UVpf5qf4yvnGpdCA=
Subject key identifier: 78:40:6E:68:C9:B5:FB:2D:03:14:BA:20:D8:3C:8E:7E:9D:0C:73:4B
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 019BF53E8CC96676F59EDB2E6260E03DC7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number: 17F4
Signing time: Sun 25 Jan 2026 13:01:15 +0000
Manifest this update: Sun 25 Jan 2026 13:01:15 +0000
Manifest next update: Mon 26 Jan 2026 13:01:15 +0000
Files and hashes: 1: 1-LbhNdw_AJV43onNE0QCUpCX6so.roa (hash: dSYVcw8EiYO4/PAbhwcAgMdvgRcG7f4kUZi0vNXjJIw=)
2: 1TnF4i5MoUtLw2ntl3I5OpJDdJw.roa (hash: lCfWll/KzhdeC/p5tZ7e9XTFVVxJgs2go/WDKBpmij0=)
3: 9h9M7PjhCe5Xzh52sY19F_HCfoo.roa (hash: dKnlXAO85KhguToJuoLLUtMZOEcwIkloXdGeaFlciRA=)
4: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: PA+FUAUBMZzlLKa6wYkgh7c8iFadjVP6Hz4/ZWGBiW0=)
5: TB3TWMd6B_jTmmabHUiaE7GbxpY.roa (hash: Asm92jz966O9dWSXvo5IS2rhxQ2wThoj/frBnCQjxYo=)
6: kHyEvJhu_w11Kx9L4McOAF2P03o.roa (hash: jmuEXw0e3wCECNG5mj5zMNmwosrMAavIJYnu60jwGTk=)
7: lcClvb5lWoz5BZz6OaFdK3R9xGE.roa (hash: PsC5EzzQ7hkTxDvFDTx+fSsbRwpbMLn+Jz+ec7/QAp0=)
8: nVRKQFqB65NKNXgGDeaDG2CWX9s.roa (hash: G1k/vLczxP7i+mwCpIUz1/TIX6GTJklZuRK8CIy1k64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:8c:c9:66:76:f5:9e:db:2e:62:60:e0:3d:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Jan 25 13:01:15 2026 GMT
Not After : Jan 26 13:01:15 2026 GMT
Subject: CN=78406e68c9b5fb2d0314ba20d83c8e7e9d0c734b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:59:82:67:0f:28:ca:4b:e0:b7:e4:9c:b6:
2b:9b:89:ca:fc:18:05:3b:60:b4:22:12:19:58:36:
e7:bf:c8:21:12:16:c9:4e:be:70:84:cb:11:be:d1:
18:0c:b8:c5:dd:e1:84:bd:9c:59:f1:0d:d4:e0:0a:
29:0e:b3:45:37:9e:c8:58:35:de:af:01:4a:c9:1b:
8b:f8:25:6c:50:67:9a:91:63:8d:94:91:c9:1e:93:
36:a0:17:a7:d1:55:46:7c:7e:2b:36:bc:b3:c8:ef:
17:a3:75:28:8f:be:53:dd:93:e4:e2:06:1b:aa:47:
41:e7:bb:4e:da:dc:9e:30:f1:89:95:58:13:4d:3f:
ba:99:e2:43:9f:7b:ed:e5:de:00:ee:18:af:fe:f4:
56:64:74:9d:f9:50:c4:70:c7:80:35:44:9a:e1:14:
80:a6:38:c0:8a:12:21:68:ac:d0:3c:98:96:67:92:
e7:6d:4a:38:8e:67:e1:36:68:5a:e6:6e:9f:89:26:
99:d0:ec:63:44:7e:a8:f5:7d:31:d0:8f:0b:3e:62:
bf:d0:d9:2f:58:0f:99:94:dc:32:05:40:6e:19:4e:
d9:d9:4e:f4:ce:1c:e4:95:60:4a:40:f7:8f:bb:15:
f0:24:09:dc:c4:a9:f8:fb:16:d0:dd:51:68:ae:85:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:40:6E:68:C9:B5:FB:2D:03:14:BA:20:D8:3C:8E:7E:9D:0C:73:4B
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6f:20:46:12:43:e6:31:13:33:ad:58:40:05:c1:4f:5f:6b:
a6:4a:7e:29:6e:03:f9:f7:77:5c:1c:e9:81:33:22:13:78:8a:
27:bb:d0:1f:8c:f5:fe:c2:9c:3a:bd:12:95:91:fb:7f:69:ec:
4d:2f:db:c1:f5:17:c5:4d:23:3c:e9:e3:0a:ba:a9:4c:12:ff:
9b:ae:28:f9:d7:53:1d:17:c1:a7:ac:fa:eb:9e:38:33:09:c7:
a1:3a:e6:c6:e0:e6:9a:28:12:70:0a:cc:7a:69:a9:7d:3c:c1:
2e:70:7c:82:15:d4:83:7f:1a:57:cf:fa:02:98:b6:3d:d1:b0:
d4:e0:34:a3:42:9c:96:0b:3e:ae:bb:18:3d:db:d1:b3:6a:df:
f8:a8:80:e1:51:f5:c2:4c:7a:ad:ab:c3:5b:15:af:79:ff:e8:
21:a5:cd:b1:ba:f4:c0:f2:9b:33:c2:cd:7b:cd:79:c2:7d:f1:
9a:c8:63:9e:d1:df:af:78:5a:63:3a:18:26:23:09:33:59:43:
28:83:ac:e2:8f:a2:81:93:4c:e0:87:af:98:2e:9b:73:8a:c5:
6f:22:73:e5:f4:8a:0b:bb:dc:81:0f:58:06:8b:d3:3f:a1:8d:
e7:12:ba:1a:d4:03:93:9d:8b:59:cc:a2:72:23:a3:b6:a3:c0:
9f:6e:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:05 2026 by rpki-client