This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json)
Hash identifier: WbCBL9Qk7/ZvaVywizhAg82PY+yjn8dLxE/aZxuzEEc=
Subject key identifier: 0D:A0:DA:38:5C:85:55:33:10:D2:87:9F:92:36:56:B8:9D:44:A5:34
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 019BFB099C7471C78A38EB93D37C428F6C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
Manifest number: 17EC
Signing time: Mon 26 Jan 2026 16:01:09 +0000
Manifest this update: Mon 26 Jan 2026 16:01:09 +0000
Manifest next update: Tue 27 Jan 2026 16:01:09 +0000
Files and hashes: 1: 299VDXb908RrjfhJ-5_K9PQZ2OU.roa (hash: JgnN5hmKTxIWi7DhnDUs85H4h2Usx3B4vuW3SXCz/uM=)
2: 2C7pZIVJXgaWMo1Q2QgcD-hueeI.roa (hash: uGrmvXvC7gEnKXoQKKmv+XIHcuaY4v0wNeu6T5g4Gcs=)
3: 2V6XsfRamSPZfXogwVvMnoXo6tg.roa (hash: Q3F6Dyqs7far05WQ9Q0YzexpZAHRXvbvDQ++2a4+MII=)
4: 8UgGPRjkNP2twoQEGeBFfsQ8b7U.roa (hash: nwNyQ/U0qeEN54sY8h57MP/vc19V4ZZPQJybv3Z+p4g=)
5: Aht0dpZHvLlZm49PYsO1wdj9-Nk.roa (hash: f/A04MrT12ymQ0ZVfN8ubwpm0ar44+1vbL53AKqACcw=)
6: MOC2f4RvJR6RnRmqnfW5PqtkNg4.roa (hash: 5q9firvMMHnQOvC8s2mQC74BmJjzY0Z1MY4DRufuMGk=)
7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: //8hZz/DBHjXLJ6JJFYoYKW6rAMQUeSxlMNcU2jtaRA=)
8: RWS9bhHErxhI76ViZIzuvYt-AP8.roa (hash: +RnK+fCwo61WgDiJVgO/R4YOMLNWXhkMeClRUVrunnE=)
9: aGebgJD8M8SS3wqeGa7wpznHAEw.roa (hash: SHW+2zTtMi0dPN2oweeZhLWRegjAho7EwIkU2ibvhL0=)
10: hf2tUKoMhw8WDED_AN-v6f1qkZQ.roa (hash: d3wXcLDNlCq8YksJf8KYY1HAUgrO4FjfqtmhHQ5Opbo=)
11: kzw9wdxbadrqtu7kVtbu2JLu-x8.roa (hash: Qk/H5R/hSYn97VwMdoQjOSY/SWlxXEJMhW6F91uFxtk=)
12: tAXj2lTAU4pGXnl2-mD0BbXNUxs.roa (hash: hasUWhaeJW5JTZvkwGQZNe+jO3cPWANP11u9M1UpMp4=)
13: vSQBHFObZlm24Pjxv8F-VIJ_MkM.roa (hash: 7Jcl58oiu4HJUlOPjoE4zGBRrUSoIh2IHKad1h+ytgU=)
14: vqZQVORPWZ1lXlQgDCRvTJCZfXo.roa (hash: s8+Y7767O5xM4xdOIqw3TNY342+4LMjbnHyZjQIRUhA=)
15: zBkkSJX_2Njc_SNmOPAvtm3tNcU.roa (hash: IuiiHnyFxCinYCJobiY1N8cUrmDaMTAPrwer2YRYn20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:09:9c:74:71:c7:8a:38:eb:93:d3:7c:42:8f:6c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 26 16:01:09 2026 GMT
Not After : Jan 27 16:01:09 2026 GMT
Subject: CN=0da0da385c85553310d2879f923656b89d44a534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:81:a5:b0:75:98:7e:b2:b6:bd:61:51:1c:
cb:2c:44:e4:ea:99:dd:32:15:fd:e9:3d:cd:e5:5b:
aa:6b:86:ed:3c:af:c2:a2:3a:81:8a:36:df:04:92:
4b:e1:b1:e5:fe:3e:74:ac:3b:cb:92:eb:b8:ae:d8:
9e:00:d9:22:b7:c7:d5:6b:92:74:df:1b:f1:5f:91:
70:a1:c9:4c:a7:f1:1f:50:e8:a6:3d:59:ca:b1:2e:
62:3f:82:a6:75:2d:6d:b6:c0:7b:88:9b:f4:32:d4:
73:df:99:cd:a4:b6:57:d0:78:d2:56:4f:e5:d0:77:
7a:9d:32:83:39:08:00:7e:f7:5e:f4:d9:76:ce:0e:
24:04:b0:8c:c9:55:d8:f5:26:8e:1a:4c:bf:5d:d5:
5d:1b:f2:20:43:67:01:8a:8e:4c:d8:df:0f:e1:d1:
c5:2f:e5:d4:b5:91:fc:1b:70:26:18:14:c2:af:e4:
d4:3e:1c:d8:59:53:90:c2:af:a0:cf:56:27:f3:bb:
ea:f8:64:b0:99:5c:df:dc:6f:07:c1:d3:2c:fb:af:
d8:6a:13:e2:73:cc:d7:e3:8c:6f:44:8d:6f:31:0e:
75:36:8c:37:41:25:67:9c:f1:df:63:68:89:72:5e:
e0:30:04:a2:c3:0e:df:28:15:ef:88:95:19:30:8f:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A0:DA:38:5C:85:55:33:10:D2:87:9F:92:36:56:B8:9D:44:A5:34
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f7:2a:cc:4f:7b:31:fa:0b:f0:d5:67:cc:b6:e9:d4:70:bc:
8c:bb:cf:7b:23:31:78:f0:ad:0a:79:8f:1e:3d:30:79:50:a6:
d6:b9:1f:2f:b7:a1:65:e8:af:dc:19:1d:19:9a:5f:76:81:cc:
93:fa:c0:92:66:cf:2d:8f:f4:f6:53:09:64:c7:18:cb:79:f9:
d2:59:0f:15:aa:2e:0d:0d:c2:60:6f:2a:44:08:4e:6b:72:31:
23:75:a3:e8:21:71:bd:be:79:3c:48:08:1d:c4:c7:3f:0e:91:
9c:53:ce:77:52:f1:28:03:bf:7c:7d:b9:85:18:d2:1e:10:1d:
7c:38:4c:b1:de:59:ad:06:22:48:af:91:52:59:b4:7d:71:34:
2f:28:e7:96:1a:bd:b5:d8:c3:17:cd:59:64:5f:89:a1:65:61:
ed:d1:7a:7e:16:05:4a:40:36:b6:8d:49:8d:5c:76:1e:18:7c:
0b:e8:d1:ac:0a:f3:c7:98:74:b4:32:d2:15:50:6f:c5:42:55:
ed:74:ce:c2:ba:bf:64:a2:a0:10:58:14:f7:eb:f0:61:0c:32:
29:39:57:41:d7:97:08:6d:5a:30:f3:de:ae:5d:fc:18:4c:83:
89:99:35:45:3c:e3:b3:07:f1:80:e0:ad:bc:f3:4e:38:db:c3:
3b:6b:49:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:08:53 2026 by rpki-client