This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
File: _2JWLK6HP0_EoyMr9J3VNDtwhPk.mft (raw, json)
Hash identifier: CEA6KEdi9IX1oonsmUwWQX/h9Rn2piM12jsmac8oPPU=
Subject key identifier: 4F:90:9E:5D:2F:8D:0D:10:D1:E4:C1:9F:56:68:21:28:FA:8F:EC:7A
Authority key identifier: FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
Certificate issuer: /CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Certificate serial: 019BF3F51C9E8BB4291E04D62D526DD690F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
Manifest number: 171B
Signing time: Sun 25 Jan 2026 07:01:25 +0000
Manifest this update: Sun 25 Jan 2026 07:01:25 +0000
Manifest next update: Mon 26 Jan 2026 07:01:25 +0000
Files and hashes: 1: A6rxUEeDAXZKd2bfFtADSoZcC1o.roa (hash: +1AJC/T1uy51K3cG4QOtn84Jtoxq5VjE/ru2294aRv4=)
2: _2JWLK6HP0_EoyMr9J3VNDtwhPk.crl (hash: +SrYkDNJLIVTYXirxcbsLnLCGL7yddzrq90/LLP+T0Q=)
3: _ZWSKkXuBHjiv-L0PixHTIHZOdQ.roa (hash: qe6ihhT3yR6t7+njBEvLfRsvgRV0ISuyHcZNmPr71D4=)
4: vMS7tozWQCg81akMpQlvwwiR_ks.roa (hash: JSFXNsgb4AQiEP8H2GgAtdgJfsJbL3EKa9NCHLcfnBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:f5:1c:9e:8b:b4:29:1e:04:d6:2d:52:6d:d6:90:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff62562cae873f4fc4a3232bf49dd5343b7084f9
Validity
Not Before: Jan 25 07:01:25 2026 GMT
Not After : Jan 26 07:01:25 2026 GMT
Subject: CN=4f909e5d2f8d0d10d1e4c19f56682128fa8fec7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:70:3f:fc:20:74:96:e0:0d:1c:1d:9c:9f:
4e:d8:af:4d:2b:de:7d:f6:71:37:1d:8c:22:82:d9:
13:3a:e3:96:20:eb:a5:df:64:b4:28:79:9d:c8:ac:
bb:ea:65:cf:f5:a6:f4:4f:c2:27:da:f1:61:d9:3e:
c3:f7:e8:4d:db:5b:68:4a:fc:83:5a:16:36:e8:76:
2f:14:0d:9c:cd:bd:15:9c:af:24:36:a7:b0:a5:73:
93:de:f2:cd:13:aa:49:23:ce:f8:ce:f3:d1:07:79:
93:63:8d:5f:f4:ec:1b:6f:fb:90:49:38:a8:b2:0c:
78:49:47:7a:47:1d:74:f7:a0:3d:89:36:84:7e:e6:
f1:0b:bf:a4:75:3c:21:7e:cf:a9:21:20:92:2d:e5:
ec:4e:57:17:dc:73:03:d1:28:19:38:25:ba:b4:1c:
f6:a7:cb:39:01:37:e8:fe:85:74:a7:2c:fe:65:e6:
c1:7d:6a:f8:d3:fd:2b:1f:c1:ca:f4:e8:f6:98:67:
3c:5f:c9:2f:df:c7:71:99:14:1a:81:2d:39:59:24:
d2:67:39:78:81:4a:48:2d:e3:49:36:9d:55:f0:c8:
2b:bf:dc:f2:64:5f:c9:57:fd:47:9f:c4:c9:59:86:
f6:65:d8:ff:8d:56:12:f2:02:ae:6b:9a:49:09:67:
0c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:90:9E:5D:2F:8D:0D:10:D1:E4:C1:9F:56:68:21:28:FA:8F:EC:7A
X509v3 Authority Key Identifier:
keyid:FF:62:56:2C:AE:87:3F:4F:C4:A3:23:2B:F4:9D:D5:34:3B:70:84:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2JWLK6HP0_EoyMr9J3VNDtwhPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3dc3c4-9c48-4a64-8fa1-88f7b91b6e32/1/_2JWLK6HP0_EoyMr9J3VNDtwhPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d0:93:d4:18:0c:82:85:be:42:d3:af:64:d3:1d:2c:d1:4b:
2f:13:f3:55:90:05:16:f2:64:5d:ed:f3:d2:7e:ec:cc:bf:ee:
f1:66:88:a0:83:79:c7:85:bf:ac:e6:4a:e5:ec:85:7b:18:8a:
0e:d0:54:6f:59:4a:62:ef:9f:d5:5e:ea:0b:6c:cc:89:99:c4:
34:83:0d:63:29:6b:39:95:b3:f6:89:59:e5:0f:18:1f:a2:ef:
8d:66:d7:9b:5d:ee:cc:d6:da:45:eb:72:f4:8a:9f:df:15:6e:
70:22:1c:dd:e2:ad:3d:0b:03:0f:f4:c9:12:d5:f7:08:f6:0b:
56:73:aa:f0:12:e8:a3:a8:bf:9c:22:8b:55:b2:41:61:89:4d:
e4:51:d2:24:e6:98:03:86:3a:17:96:3e:81:8e:8d:c1:96:7b:
a0:27:1e:19:ff:c2:6e:94:1b:13:39:24:ea:1d:52:7b:03:bb:
24:a7:a0:37:d6:ed:f4:b1:f2:8c:52:a1:7f:50:ae:56:59:22:
59:4b:bf:97:84:ae:7f:28:e8:14:a6:a4:20:55:83:08:09:25:
4c:f9:4e:0e:e7:32:ee:cf:c2:bb:31:b4:cd:9c:22:25:e6:16:
a7:d0:75:12:75:2c:95:4d:f8:a5:7d:8a:f2:34:b2:9a:03:3f:
a4:cb:db:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:48 2026 by rpki-client