This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: D8yFiECH3dFIvXH4IyMfyz5jkHqXa4eZmAvJ0nYHIXM=
Subject key identifier: 40:59:00:D4:C8:E7:B6:09:EE:1A:26:38:6D:F9:1F:60:60:AD:2D:D2
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 019BF619AAC4100C881BBCF9E5621346F35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 07A6
Signing time: Sun 25 Jan 2026 17:00:35 +0000
Manifest this update: Sun 25 Jan 2026 17:00:35 +0000
Manifest next update: Mon 26 Jan 2026 17:00:35 +0000
Files and hashes: 1: 3ehZu4iMUfcPfFG_lH5I5KE8DpU.roa (hash: s49ndrQJ40YayQJgFBDJ5AW3+BdIOwIQqaaClazI6fw=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: 3yBfTbhaw7oiLGjXJVu2qC9u4KHTsKAcjdNrOS425V0=)
3: sltPVYNXyX3HM6mTIe2E6MEOa4Q.roa (hash: myvFYoXQz/pPQaI+zt/UsJxjmt7PUBokhbr3Wq0mEHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:19:aa:c4:10:0c:88:1b:bc:f9:e5:62:13:46:f3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Jan 25 17:00:35 2026 GMT
Not After : Jan 26 17:00:35 2026 GMT
Subject: CN=405900d4c8e7b609ee1a26386df91f6060ad2dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:51:b3:db:b4:f4:53:ef:1b:bb:19:4a:a2:
90:53:cb:59:bc:cb:f5:5c:dc:c4:14:c0:2b:c3:0e:
c5:e3:81:25:98:46:0c:c1:61:2e:4a:82:71:8d:a8:
8a:c4:8e:ac:45:99:d4:95:e1:3e:cb:af:ed:e1:2c:
1d:82:55:49:fd:b6:e7:a9:c5:ab:48:c1:8c:97:85:
64:b1:3c:3e:c1:72:78:1e:19:d3:a3:5d:09:ae:be:
bd:a8:04:14:4e:59:83:4b:00:bb:f7:ee:91:e4:ee:
b6:40:ea:b1:bf:f5:20:e9:86:9a:f4:d3:41:13:77:
69:22:a9:1e:44:c3:8a:4a:e9:d3:ee:e3:e3:11:76:
e0:1b:54:c8:15:0d:02:c2:ad:46:ff:01:ce:0d:4c:
97:27:e9:9c:f7:ca:6b:1b:90:37:84:fd:ee:4f:e4:
13:6d:5c:ba:b5:ab:6a:35:1c:af:c5:03:46:12:9e:
f4:0c:6a:12:93:96:47:03:c3:28:33:9f:2d:56:49:
a2:e5:bc:40:5c:c8:72:2e:ad:35:80:af:ed:bd:ad:
e8:2b:9f:4c:1e:f9:78:18:0e:d2:a1:0a:cb:da:43:
06:7a:1d:a7:39:f3:27:75:37:fd:77:76:dc:7a:a5:
78:a2:18:11:e0:73:fa:2b:f1:51:a0:3e:f4:0a:86:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:59:00:D4:C8:E7:B6:09:EE:1A:26:38:6D:F9:1F:60:60:AD:2D:D2
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:69:70:92:e5:40:a7:1e:6f:61:08:70:5d:73:f0:05:6e:af:
48:17:1c:8e:df:e8:12:65:2c:fa:39:7d:b0:95:5d:7f:0f:6e:
84:5f:18:f2:ab:37:47:e2:b0:b0:6a:59:bb:8c:36:3c:9a:2b:
2f:23:41:eb:0d:94:63:4c:55:69:15:df:6c:ac:83:ac:88:74:
c8:f9:52:72:a5:2f:34:be:ce:4b:79:ca:24:ae:37:d9:12:d5:
35:4c:48:18:28:36:a8:34:e6:18:a2:88:fd:33:58:52:12:44:
c1:02:7d:0e:98:e1:50:52:6c:00:b6:9a:5c:f9:4b:2b:3b:31:
cf:34:35:04:39:15:bf:17:95:2c:4e:80:d8:cd:21:26:63:66:
0f:72:33:ea:80:40:1d:28:7b:3c:ec:54:5c:7b:94:a1:71:f5:
3f:80:f0:bc:4c:08:06:06:42:ac:ce:16:1c:9e:22:ad:63:85:
ad:b6:e9:51:e8:30:da:8b:86:9d:5a:e4:b7:80:ca:dd:3b:30:
2d:be:77:8d:62:a6:cf:81:76:fe:a4:df:be:fa:0d:b5:ad:bb:
36:79:a2:8f:94:f6:3f:1e:1a:ae:ba:72:fd:f2:0c:e7:70:91:
46:e0:2b:78:23:cb:39:fa:65:bc:ba:c9:67:a3:91:8e:3a:2c:
c2:ff:e5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:34:57 2026 by rpki-client