This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier: Ynu17r9iazGoY8RzGcTP+rjVuOSZNKjPIvc+ZiyA6I0=
Subject key identifier: 38:1E:D7:42:DB:4E:32:EB:DF:5E:CB:AA:42:BE:7A:FF:46:DC:87:CE
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 019BF274C29ADCFB8F4BAFCC7D629C56E624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number: 181D
Signing time: Sun 25 Jan 2026 00:01:36 +0000
Manifest this update: Sun 25 Jan 2026 00:01:36 +0000
Manifest next update: Mon 26 Jan 2026 00:01:36 +0000
Files and hashes: 1: 0Wr6LOc9-cDRRvk8SfBTZvB7uNg.roa (hash: UTyLCGmKuWfBIlDRUPRnAFKlYcgHZ6JkYyOZKP8cKhY=)
2: GXHV4yIeE_uXr_RNvJr8SVOFQ5A.roa (hash: tqlnNkWBmvsWCIi9jBSs1JVzONgC0EmMyLLdAg7SzVo=)
3: O5VMYBwUzg_lCUz1vF8gUa1_N14.roa (hash: OkMLH/MAmpXrPNL5QapYPDyvVrkEb9L9I2BouyFyOPg=)
4: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: pQldZSDVlnx3iaM8DSgFvX7fRLQfPKgaT0P+xxkixbA=)
5: jpqw9kyQWNXBww86kbGwbPfXFgI.roa (hash: IWd2Np2lM6IR2Rrx253rWdK0A18ykFo1zHImnqtxXzE=)
6: klCGnRobFDTStzZHH_87-rAXGCQ.roa (hash: y1ltdNIKY5eSnD7XFYZOka5u7ddS55v/gI9bnMxkSSU=)
7: oEduJAl4RTWtM6zwXdI0ziLh6rs.roa (hash: GFX4/mgYvelVvEnpmoKwgMTfCGzjJ8NR2rNnzEY3VSQ=)
8: slcKhaxRxeaCpF6VHXmttdYmZB0.roa (hash: J3V/eHX3Ccj83lCQrs3uEZ0s/c+0ECGpX2QVgnPgtrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:74:c2:9a:dc:fb:8f:4b:af:cc:7d:62:9c:56:e6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jan 25 00:01:36 2026 GMT
Not After : Jan 26 00:01:36 2026 GMT
Subject: CN=381ed742db4e32ebdf5ecbaa42be7aff46dc87ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:ba:84:f1:36:16:f9:3a:81:be:c0:6b:03:
c1:a0:94:05:af:81:4c:f5:4a:58:45:07:e0:2c:c0:
34:fb:cf:1f:79:53:d6:80:f0:e2:dd:d7:39:2a:f4:
f6:89:b6:50:7f:ab:04:a9:c5:30:4a:4c:38:ba:3a:
43:10:1c:4a:84:8a:3f:51:0c:07:8a:cb:67:a0:51:
dd:db:6a:83:c8:bb:4f:6c:f1:03:06:c5:d1:7b:22:
22:bf:f1:6d:e6:59:ba:19:0f:72:05:1a:14:40:08:
1a:26:33:ac:d8:b0:6f:e2:6d:61:31:f9:d3:fc:ae:
58:49:e6:2f:31:e9:76:4e:d3:65:ec:3a:ab:64:c9:
83:17:2a:6e:00:18:b2:4f:0a:41:10:9c:51:33:e4:
d7:8b:2f:7f:f9:b4:e6:dc:02:d3:cf:ab:be:68:65:
ce:0e:15:39:c3:4b:2f:70:1b:be:93:af:2a:02:52:
da:38:f9:c4:33:1b:72:41:b1:e6:19:4b:01:f3:11:
78:d2:71:78:a9:b4:b8:c4:78:9b:15:a1:79:fd:38:
05:a5:57:52:e5:2e:85:c4:42:36:68:90:63:f3:63:
f8:ee:44:46:89:d5:e5:ed:61:75:7d:02:08:4c:6c:
ce:fc:b3:19:5f:af:04:d9:ee:1a:a6:0a:61:42:08:
cd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1E:D7:42:DB:4E:32:EB:DF:5E:CB:AA:42:BE:7A:FF:46:DC:87:CE
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8a:b6:1c:1a:bb:34:46:7a:90:99:63:00:4f:24:42:f8:17:
71:ab:4d:45:1b:51:73:dd:5a:f8:0a:79:6f:7a:ff:bf:f9:cf:
a1:6e:fc:b5:23:bf:4c:09:50:f7:5c:99:8d:db:d8:4b:7c:b1:
ff:42:2d:0a:a3:db:28:40:2f:4c:9a:50:99:b2:6a:d8:c4:c5:
34:9d:3f:26:8f:65:1e:54:1d:b2:98:40:51:1a:b4:e5:fa:f3:
17:47:b9:47:cd:8d:61:38:52:af:92:3a:5e:b7:0f:f3:ae:93:
4c:3d:15:23:95:a8:8e:30:a8:0a:90:5b:f4:f9:86:67:93:84:
14:d4:c8:54:4d:38:38:1d:67:1f:0d:1c:f5:39:29:d9:b7:22:
b5:e1:ad:95:60:dd:9f:cf:17:5b:56:b8:d5:a6:fb:7e:41:46:
d1:b2:ed:4e:4d:b1:dc:c3:cb:c7:33:da:cd:e4:ca:9f:3a:c8:
c1:59:55:bd:f4:f7:83:98:7a:ae:ff:06:6e:80:12:ac:45:25:
fe:b6:93:73:1d:70:bf:4e:82:3c:97:42:b7:88:00:bd:50:30:
6e:25:07:09:29:73:40:ed:65:4f:6a:00:cc:ac:1c:d7:8e:31:
c2:3d:c5:6d:62:d9:3a:17:9a:6e:22:3f:6e:ef:97:fe:c5:37:
e3:2f:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:31 2026 by rpki-client