This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
File: XOGq4Mk60EtymAgraL9qVPpovPA.mft (raw, json)
Hash identifier: 1xvU1T6GPB1c6z+LaB9xN4Yw5GzldjtEuVof2Amqj08=
Subject key identifier: 47:11:D5:67:50:A4:FD:B1:B2:D6:21:E6:3C:3F:A1:AC:3E:81:DA:CD
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Certificate issuer: /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial: 019BF7D1D778AC98DD6EDBEC16112A6559CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
Manifest number: 17EC
Signing time: Mon 26 Jan 2026 01:01:23 +0000
Manifest this update: Mon 26 Jan 2026 01:01:23 +0000
Manifest next update: Tue 27 Jan 2026 01:01:23 +0000
Files and hashes: 1: 0Sfi1GQLepJdH6-nAUQ0Hu0ZdhY.roa (hash: +q6McyBv6XD45sefW820BUSULPS6zrmqGUIvxYOPOus=)
2: OADJfv4sJk1hBJpusL11pl6fFtI.roa (hash: CYKU8NdxaFNmdeaAWm70OIx6aPv3u8b/dlSWiMUH5iU=)
3: XOGq4Mk60EtymAgraL9qVPpovPA.crl (hash: BuI9egiL2nZiJy22AJE1iT1ZWTpFvUmikSL/c8COwDw=)
4: l0x0gNUieNkYXNEIZ0HnbvxPCtI.roa (hash: LOiTnDzO1qKX4OsX911ZfvLi+m4Ieb87SaoClzu9V+A=)
5: x8LHw7zDa42zMdIg9zthvEzV2kE.roa (hash: 4t3LBnliu+TFNqK0uHC8bitBdGAkSxERgzaOQAy67TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:d1:d7:78:ac:98:dd:6e:db:ec:16:11:2a:65:59:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Validity
Not Before: Jan 26 01:01:23 2026 GMT
Not After : Jan 27 01:01:23 2026 GMT
Subject: CN=4711d56750a4fdb1b2d621e63c3fa1ac3e81dacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:95:01:00:f5:d1:98:9e:2b:a2:62:f9:3b:
7b:9c:c6:ae:5b:3a:cb:e6:9b:1d:c5:b6:8b:31:90:
35:40:e5:83:fe:1c:13:74:5a:93:dc:47:3d:e3:36:
09:3d:a1:15:44:c2:39:38:67:75:ff:33:24:65:9f:
05:a9:03:e0:79:e7:43:17:57:49:4c:f9:91:a1:93:
cf:5d:bf:d2:f5:d8:f2:01:26:74:bc:b6:d6:a9:ae:
21:e8:e8:c2:78:cc:55:33:c4:a8:b2:1e:71:3b:12:
08:20:fa:b4:4a:88:47:63:87:f7:f7:30:60:63:a5:
16:2b:2c:ec:03:29:57:77:93:23:5f:32:94:01:39:
75:08:ac:32:5b:11:ba:2d:1b:2b:8c:8e:27:03:0a:
75:37:08:3c:e7:0c:57:f5:a5:3d:39:0e:42:09:df:
95:cb:95:55:24:92:a3:76:c6:2b:2e:19:15:d0:c5:
fc:0d:94:74:af:97:97:5e:68:37:a9:65:80:08:cf:
c2:d0:ec:0a:d7:3f:9a:51:ea:ce:5c:2b:db:8e:6b:
b3:ac:6c:2f:13:9b:1b:54:14:da:31:f8:da:73:f4:
cc:dc:1e:60:56:fb:50:36:c8:fe:2b:07:89:31:50:
1b:56:b0:84:42:fb:65:94:36:4e:4b:27:56:af:91:
fa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:11:D5:67:50:A4:FD:B1:B2:D6:21:E6:3C:3F:A1:AC:3E:81:DA:CD
X509v3 Authority Key Identifier:
keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:06:5e:94:2d:8d:6f:09:0b:60:e1:7a:ea:f4:38:00:e8:02:
b9:66:35:38:70:cc:3b:0a:ff:79:fa:1c:59:f8:b6:b9:a7:72:
04:39:c4:09:25:7a:91:4e:98:6c:06:39:18:ca:00:5c:b8:ab:
be:6d:19:eb:9c:19:50:5a:98:39:2d:4c:3f:eb:c0:4f:1b:17:
2f:63:17:fe:69:d4:1c:b6:4b:25:f9:36:0f:a6:be:da:d8:df:
29:32:1c:49:e8:30:9e:4f:7d:1c:0b:dd:4d:e1:fd:d8:3c:fe:
96:a6:68:46:a5:f7:6d:05:34:12:38:e8:e0:14:c2:0b:07:00:
cd:21:cf:6e:53:46:7e:91:f5:f3:1b:1d:c1:cc:94:f3:3c:46:
01:32:53:a9:a2:32:cd:80:e5:1d:52:d7:c6:0d:da:98:78:13:
67:e0:46:e9:cc:53:66:10:f1:e1:4b:62:93:a4:90:45:2a:40:
eb:68:c8:c1:09:ce:09:6e:42:61:c4:7c:3d:07:4b:85:22:71:
a1:9b:30:46:ed:82:c2:e3:a4:11:64:b9:34:f1:2d:52:98:9e:
7c:df:5f:c5:a3:c1:f4:20:27:ff:89:b7:10:02:6f:c4:4b:a4:
da:90:ad:c1:e0:2c:83:51:0f:c1:71:0f:c2:2f:58:24:3f:19:
44:98:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:35:24 2026 by rpki-client