This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
File: m-02rxPaSC_feftUA-UHSGDuzQ0.mft (raw, json)
Hash identifier: aPKXFBYpHTxa72pofMgmY9v8ytEUH/ZHC9EHFvhMNxQ=
Subject key identifier: CE:F5:C4:10:E3:B9:31:16:21:9A:B4:F3:CA:0E:24:A4:A2:FD:90:D7
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Certificate issuer: /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial: 019BF9C035B835EEFAF90EAD8D386223FD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
Manifest number: 12CE
Signing time: Mon 26 Jan 2026 10:01:21 +0000
Manifest this update: Mon 26 Jan 2026 10:01:21 +0000
Manifest next update: Tue 27 Jan 2026 10:01:21 +0000
Files and hashes: 1: 1JWNv8sFY3SXOHupqC0C9HklTRw.roa (hash: SM1iX0oWnm9qPohx2WfmX3ogBGn9K4VdwqVZfDE6Oi0=)
2: aho_G5mo_Mv0ycfyDGi6Gv4LZEs.roa (hash: ddda9zUEu4ytg+67igdp0qh+qPdZ3N1XWu5qrfRPdXU=)
3: m-02rxPaSC_feftUA-UHSGDuzQ0.crl (hash: 1DaRzZPgc6YlKIkeu8nMgiCisweWZDrbMMg9moMg2X0=)
4: shLsGCsQ3GYKsx66_GQH9jhS_44.roa (hash: lvpextwl0L1UgfkWNLF1qMfokRQbiO6CVn1PLpjfaxM=)
5: ucwG4CaoAiwGKGTJqQHLPIY-zv4.roa (hash: 8PZlZM6lXcGqnU2IQOrIMigvJJRBeS8QEgrG/QSjxyc=)
6: zDLOCSi1qTaDlvm9zlxMtRreOMU.roa (hash: XRIemQPqfuXQ1CqQ2AN8C0WPUAHZMu6of/6OYKLQobI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:c0:35:b8:35:ee:fa:f9:0e:ad:8d:38:62:23:fd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Validity
Not Before: Jan 26 10:01:21 2026 GMT
Not After : Jan 27 10:01:21 2026 GMT
Subject: CN=cef5c410e3b93116219ab4f3ca0e24a4a2fd90d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:cd:0f:d4:9b:a5:f2:b9:56:88:ba:55:7c:
44:59:61:86:05:e0:f0:15:73:a9:3a:f5:33:1d:d3:
83:17:c7:6d:29:d7:7e:5c:f8:87:d0:9f:a5:d1:d6:
34:70:7e:d8:16:7b:77:c6:91:3b:b9:a6:fc:43:6d:
2b:8b:e2:7c:d4:04:ce:2d:0e:e0:7a:2e:a0:f6:bf:
56:b1:50:95:a9:4f:39:4c:ca:97:9c:af:cf:7d:ae:
74:e4:ac:80:8c:0a:c4:41:70:1e:57:f0:c4:65:07:
1c:1e:b1:5b:52:81:95:0a:b6:3d:2b:35:d4:c5:b0:
4b:00:73:7c:53:d8:6f:3c:e0:85:64:ed:f2:8b:20:
71:8a:95:26:14:f9:0d:46:8d:3d:3b:2b:ff:51:ac:
1c:d1:62:d4:79:a0:8c:2b:eb:84:82:1b:8b:e5:e0:
bc:32:83:54:2e:54:76:7d:0d:2d:34:7a:aa:76:f5:
19:33:f2:89:c3:ec:39:33:6f:8a:13:a4:1a:3e:72:
8b:dd:a4:56:7e:6c:72:ee:6d:77:8b:c2:a3:b1:b5:
df:fd:27:55:9b:f5:74:2b:ac:73:42:98:dc:50:af:
84:39:b1:a0:0f:12:7f:af:e1:a1:e4:c8:ce:44:c7:
45:3b:69:a2:f9:29:e8:dd:41:cd:ec:38:78:f8:9a:
09:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F5:C4:10:E3:B9:31:16:21:9A:B4:F3:CA:0E:24:A4:A2:FD:90:D7
X509v3 Authority Key Identifier:
keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e8:69:30:ec:62:55:b9:ef:ef:1a:45:14:d7:cd:3c:ea:e6:
ed:7a:74:eb:43:99:16:5d:4e:13:cf:24:69:6b:40:0f:29:2c:
7e:75:f8:a1:bf:ff:7b:d9:1e:c6:40:b1:1a:60:59:9c:28:ab:
23:27:40:73:22:c0:c0:fa:d3:26:01:38:70:d0:bd:9f:98:43:
20:b8:b7:3a:32:e5:bc:16:ef:13:b3:8b:99:91:99:4a:78:ac:
78:6f:85:84:b7:15:2c:90:88:7b:b3:c3:ee:d8:04:70:10:f8:
9b:10:7d:67:d1:0c:3c:d4:39:17:07:47:d6:f0:a8:4d:03:ae:
23:40:db:8d:33:a1:07:d4:c0:ac:42:fa:7c:de:75:2f:c7:a8:
05:9b:c6:36:0d:a9:87:96:31:a9:b7:32:48:47:04:55:b4:81:
75:b0:7a:52:1e:96:0e:49:26:3c:ea:f9:c1:09:d0:03:31:c5:
c1:88:83:ea:a3:3c:84:d3:99:dc:36:6d:c5:93:49:57:b3:e4:
95:84:11:ce:e3:ea:b6:06:5b:3e:20:3d:38:69:0a:ac:27:f9:
7a:d6:00:e2:5c:e7:1b:89:b9:e0:94:64:2a:82:40:62:09:f6:
a9:be:b1:37:01:07:ae:b1:f6:2d:92:66:b9:9b:6f:09:c8:91:
bb:3a:88:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:35:25 2026 by rpki-client