This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File: sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier: 3k2FI/1lXjOdMR/jTWdcbjF9NOcAWueoFumYxrI9oPw=
Subject key identifier: B3:02:14:98:79:77:CB:76:E6:0F:3B:6B:3A:34:9A:BE:05:C7:D7:6F
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial: 019BF72CD041C6B29B2741A0CAFAD6F038FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number: 0B54
Signing time: Sun 25 Jan 2026 22:01:07 +0000
Manifest this update: Sun 25 Jan 2026 22:01:07 +0000
Manifest next update: Mon 26 Jan 2026 22:01:07 +0000
Files and hashes: 1: 2zzlpKPODdf8hF4555DoYKgQ_0Q.roa (hash: sdARz4Jh+abp/1GTc1LjA7oFLnqDLJUlfwULONlwmOM=)
2: Uz9TM-baJ3XQHq98E4_sczvBhQU.roa (hash: rSZ//pyykhfyoXS+8XiZOdmRQameb6KqxCKCpnB3YUw=)
3: aZFOkLjs0r0-rRh1vdE-DfBMgvw.roa (hash: 59/7mJvpFngGfl1MeWjTYVHHdedKaNfpchig8vCqutM=)
4: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: ZNFJmoh7kj9vGbIDJqQ0i4jM3904oU3+MKYymF7fK0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2c:d0:41:c6:b2:9b:27:41:a0:ca:fa:d6:f0:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Validity
Not Before: Jan 25 22:01:07 2026 GMT
Not After : Jan 26 22:01:07 2026 GMT
Subject: CN=b30214987977cb76e60f3b6b3a349abe05c7d76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:92:ba:31:e0:4d:52:a7:b0:24:b8:a5:cb:
31:5a:1e:8f:1e:c3:90:74:df:2e:9d:ca:06:0b:26:
ef:58:83:53:d7:6a:a3:22:7f:b2:d9:52:f4:52:c9:
94:df:57:d7:91:3d:cb:d9:ac:9d:25:56:24:c0:cf:
65:43:ab:e3:12:6c:ed:7b:0a:b9:4f:b1:1c:1b:fe:
61:b9:ee:01:f2:21:de:a0:27:53:c7:bd:fc:09:05:
8b:c8:48:c7:7c:5e:40:ed:53:59:14:bf:57:21:a4:
7b:5e:e5:36:21:6d:a1:2c:45:60:5d:9a:a8:03:37:
7c:ab:08:60:70:c6:6e:f2:0e:66:eb:57:34:34:ae:
1d:52:23:ba:07:fc:a8:8d:70:02:96:5d:a4:8e:7d:
09:c8:51:dd:60:16:9b:ab:7c:39:97:fa:7a:4d:7f:
c3:b9:e4:56:83:86:55:27:eb:60:e0:0f:a5:93:b1:
21:e8:eb:fe:ea:45:bd:2b:33:21:9a:2c:00:d6:32:
d0:ea:de:a6:18:15:42:f2:bd:a4:08:f6:f0:a6:43:
86:08:7a:bc:b3:1b:2e:93:81:ef:1d:1c:4c:c1:6c:
57:1c:eb:a9:70:39:39:5e:e7:21:56:38:53:c4:ea:
3f:b0:2a:f3:4e:cf:60:b1:0f:c7:c4:5f:e3:2a:e1:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:14:98:79:77:CB:76:E6:0F:3B:6B:3A:34:9A:BE:05:C7:D7:6F
X509v3 Authority Key Identifier:
keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9a:46:98:04:49:52:d0:34:21:c3:d6:b8:39:35:ff:5c:60:
05:85:90:f2:39:1d:75:4d:ac:cf:5e:a5:83:7a:f7:c7:4c:b8:
7e:cf:0d:73:af:b1:4b:ca:db:7c:a6:dc:46:ea:9d:28:3f:dd:
a9:ce:8e:dd:be:31:32:60:12:d5:92:55:6a:ba:61:52:69:a2:
0c:f0:a7:02:9d:36:cb:7c:53:45:a2:db:e0:9e:b0:54:be:95:
18:4e:6c:5b:02:3f:81:79:e4:e3:2b:33:31:45:f1:39:c9:89:
da:c4:94:bd:ea:73:31:81:74:61:9e:91:4b:34:2b:25:f0:93:
ce:a7:35:f1:b9:c1:31:ee:5b:bd:b6:a6:8c:46:97:1f:f0:4e:
ff:a2:57:5f:56:f2:c6:0d:bf:57:c9:2c:06:55:89:1a:71:10:
3d:98:90:74:ee:5a:ce:96:34:de:17:5c:5e:66:72:83:31:b1:
cb:40:2e:e8:b6:62:97:5e:38:40:ad:fc:18:a2:39:ba:20:ec:
70:3d:38:b3:96:59:7e:a0:be:c1:5b:4d:2c:51:90:63:cd:c7:
83:30:09:68:0c:0d:01:a7:dc:49:ea:3c:bf:6e:80:2b:f0:80:
a7:55:7e:55:ea:43:81:0f:ee:9e:82:14:fc:5a:41:42:45:9d:
04:08:47:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:28 2026 by rpki-client