This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
File: C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json)
Hash identifier: If8vwf07ZqULLHwjLja/RpWU7GKz6Fp8Fx4SJ6t9Gsg=
Subject key identifier: 39:E1:DF:93:AC:34:D9:2D:9C:2F:55:C9:A3:76:A6:2E:03:97:F8:A4
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 019BF651A95C6CE51B95E29BB4DDB7B55C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
Manifest number: 17F8
Signing time: Sun 25 Jan 2026 18:01:45 +0000
Manifest this update: Sun 25 Jan 2026 18:01:45 +0000
Manifest next update: Mon 26 Jan 2026 18:01:45 +0000
Files and hashes: 1: 3zbGyukfQlvWlz1rIu3MF0i9ZQA.roa (hash: C8VCXrjogu4GEXHN+4VlV1RhYCbxfqeG8eCfQQqvC/8=)
2: 4zWqGYcx90MSsSObTI71OMevGLI.roa (hash: 2KPRh6/VRnqwHzM72EcE6I/hpiMNrQvfbcobdTHvrp8=)
3: 7qF8DvtzC3jirhL3pV2eCHws_Sw.roa (hash: PlA0iR4i8nMPJDQi1dSKU0Vsn1Phg8l6qs5AKvbNobk=)
4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: YS/aTN7buUsPp/wXTIxAwOOZFx8mDkLbz6NTItbzIp4=)
5: TYL3fd3U3hdntx9HEZmBNJvIfy8.roa (hash: e+FavOHdj6PxW9K+YpaIIbMqrQ5M/B4rSbRg/GiLGdY=)
6: X36wvkpUD5ZEtmHolX5djkBU7G8.roa (hash: 1peSiVa6+f8j5mPTp+kwnGd3XE3ejw1Eh+Z8/AWETA0=)
7: f5RT_hHMbwUMnFt-JoJl9jk0aq8.roa (hash: R7CzcVcdr1m+4aUYrv9u7aRaRpqSiQ4h6Ml1XYdGdCM=)
8: jIq1ZwfYXAAqF6SypiZfEAegC9E.roa (hash: v2vJlBOD+C5w7yw+8XzyFUOoQGvh/5fPqoNiFmi6fEA=)
9: molvQvJ_lXsmLhzkv5IAyHx3jBE.roa (hash: ix0VFib2vtnH3hKp8PnHjw409S+kU6b3YPQlaCcVI/k=)
10: sE6ob5p7cvBS3YZqxyoPQMbjYxc.roa (hash: dhUKIHoGV1Pe+2e5vIvUmP73NR0v7KSZ4nk35w2qwfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:51:a9:5c:6c:e5:1b:95:e2:9b:b4:dd:b7:b5:5c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 25 18:01:45 2026 GMT
Not After : Jan 26 18:01:45 2026 GMT
Subject: CN=39e1df93ac34d92d9c2f55c9a376a62e0397f8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:15:2d:ce:b6:a4:dd:b2:0b:b1:9a:d6:b4:
58:e3:fd:a8:4d:c5:cc:fc:6f:79:5c:37:e5:7c:c8:
b3:86:64:4a:a4:72:34:c4:2e:d5:f3:3b:1c:5d:da:
3c:94:2a:c7:b2:ce:d8:ea:67:c4:63:07:e2:7d:05:
ff:2a:c8:4e:ff:64:f5:e1:19:c8:9d:73:dd:c6:b9:
d9:1e:42:13:ca:c4:97:c5:65:9b:3b:cc:8b:13:d3:
98:18:be:4b:15:bf:87:0f:54:6d:be:b4:44:c9:cc:
38:7f:cb:42:fc:1e:d3:23:de:b5:3a:e9:90:fa:0c:
28:bb:d0:7b:f3:45:10:e8:94:2b:44:6f:d6:cb:4a:
3b:be:6a:c0:b1:bb:dd:03:12:9b:77:47:33:98:21:
f8:91:45:4b:57:61:5a:d3:69:e8:55:9a:44:66:21:
01:52:6d:71:6c:ea:5a:ea:8b:fc:20:0e:8e:67:ad:
48:c3:9f:b6:ba:08:43:70:89:f9:7a:6a:32:ec:d2:
ee:ba:2e:f3:f2:d6:b0:c7:c2:63:fb:91:73:04:7c:
b0:ef:2a:f6:05:20:d1:63:93:dd:34:09:aa:a9:0e:
9f:19:c4:c8:f1:f9:e7:b9:34:23:54:44:6d:cb:44:
b8:89:d7:f3:27:0d:5f:46:5a:b4:c2:cc:7e:c6:12:
45:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E1:DF:93:AC:34:D9:2D:9C:2F:55:C9:A3:76:A6:2E:03:97:F8:A4
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7e:38:70:20:36:60:5a:14:7f:79:b2:c1:03:69:c5:08:12:
62:f0:5b:52:33:38:7b:7b:cb:7c:5c:70:66:fa:de:f5:69:bc:
e5:66:08:8e:f8:b2:b7:81:ff:77:3e:a2:f1:64:af:f8:56:27:
a0:93:23:9c:4a:b2:9c:fd:f1:60:23:af:c8:30:4e:40:31:6f:
33:53:01:70:e8:91:bb:56:3e:33:db:b6:3c:04:31:d1:7a:6d:
e1:25:5a:e4:19:d5:98:5a:12:76:25:3c:9a:c8:f2:3e:a5:a3:
8a:24:f9:3f:ee:f0:1f:bf:4b:7f:2f:a8:8e:af:35:dd:ac:b5:
72:24:93:52:f9:60:ad:f3:42:4e:d4:10:84:81:a2:71:dc:ec:
b3:68:8f:4f:f7:2b:b9:ae:41:c0:27:7c:b1:e9:7e:23:0f:6b:
91:62:09:16:f0:65:87:2d:e4:85:8c:1f:dc:b5:76:96:b5:e9:
b6:71:a9:8a:fc:73:c5:46:9c:ea:89:f5:9c:c7:28:02:b6:e8:
2e:39:f9:b6:72:3a:0d:d3:1b:02:d7:9c:73:56:55:e8:da:3b:
fb:fd:30:2c:81:fd:e2:5c:18:83:5a:3a:e2:0e:da:65:a1:f7:
58:ce:01:d8:7c:b2:8a:a9:11:39:bb:83:6c:36:38:80:69:e1:
db:a0:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:26 2026 by rpki-client