This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File: MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier: nXstMa3ZFXvvb+v4y5d14hmPZRoH31UEJ2b8kLr+pGI=
Subject key identifier: A5:A5:5B:56:05:DA:4A:C9:5F:58:46:E6:0D:62:BC:DB:0D:76:57:D7
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 019BF4B487E4D7490AB2AA0982ADC4FF8C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number: 1070
Signing time: Sun 25 Jan 2026 10:30:30 +0000
Manifest this update: Sun 25 Jan 2026 10:30:30 +0000
Manifest next update: Mon 26 Jan 2026 10:30:30 +0000
Files and hashes: 1: 0PROOXHWtrqTshebWInvLwz5dVE.roa (hash: kuqhwuodobpmINYueeYw21Gf/m1l+ZCaG7GCFJgXBC4=)
2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: hT1INg49Gp5a5/MRaROW77QANnLp5o5bDzZZS47MYZQ=)
3: NewAQnihHqA7BNLZDBxX7vg5CC4.roa (hash: rbbMZVaqhBZlgDHmKJbZoLzfGxiIjRIEY2aQtlKdukU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:b4:87:e4:d7:49:0a:b2:aa:09:82:ad:c4:ff:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: Jan 25 10:30:30 2026 GMT
Not After : Jan 26 10:30:30 2026 GMT
Subject: CN=a5a55b5605da4ac95f5846e60d62bcdb0d7657d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:51:67:4b:5d:e4:6e:f2:03:42:24:f6:a7:
b8:35:15:dd:17:25:39:92:d6:da:c8:46:eb:38:85:
9c:10:2d:19:e7:70:32:1e:0d:96:12:2b:ad:b0:f0:
f4:f0:86:1e:6e:2a:02:e5:62:63:ed:83:96:59:72:
d7:86:29:e4:81:05:ce:64:44:de:f0:f7:2a:c1:d7:
74:a6:68:eb:ee:3a:47:6c:52:c3:9e:c0:57:d4:f1:
8f:d8:f7:1d:3d:1a:ba:cd:ae:d4:4c:ae:a0:c0:30:
77:52:3d:a3:8c:c3:b0:ce:1d:aa:7b:92:76:01:80:
71:52:20:76:0e:83:7a:2e:c9:33:46:9a:ca:b8:82:
db:58:42:65:5a:10:9e:f5:75:54:1a:02:32:ff:1a:
9a:4a:22:8b:74:1d:a7:4d:ae:8e:b5:f8:37:cd:b9:
0a:2e:47:99:0e:da:32:96:4f:88:e6:6e:9c:4f:4d:
83:d3:d9:2d:3a:d6:93:b4:f0:88:a3:1a:d1:ea:32:
da:26:3c:5b:93:59:3b:7d:a7:37:c5:aa:37:1e:e4:
b3:73:8a:7f:bb:45:ca:eb:93:1e:47:94:65:2f:82:
fa:b4:87:25:31:54:7d:87:ff:f8:5a:00:d8:be:fc:
e3:29:86:fe:f3:b7:5c:41:84:15:f5:75:22:cf:44:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A5:5B:56:05:DA:4A:C9:5F:58:46:E6:0D:62:BC:DB:0D:76:57:D7
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d8:fd:a0:15:04:7f:e9:ab:87:58:f6:5e:52:ed:51:67:12:
f0:d4:18:22:a0:37:41:a6:ff:c8:70:ff:84:bb:a2:92:16:3f:
f5:76:c0:3e:61:c9:ca:76:32:19:dd:86:64:4e:df:d5:8e:eb:
e2:a8:35:72:8e:83:83:29:13:7c:aa:74:bf:31:17:91:8f:6e:
6f:ef:a3:74:c8:16:ef:9e:68:01:0f:85:db:cd:2c:55:17:8d:
1d:b0:12:73:8b:8a:a3:09:33:ad:12:02:35:03:f6:85:d0:2d:
35:46:ca:83:ee:10:4e:14:8a:0f:62:69:c5:dc:44:d6:56:56:
e8:ec:70:2d:13:e1:ee:79:7d:96:64:02:32:4f:da:8d:16:57:
b4:f2:80:d0:cd:57:ff:98:1c:fe:9b:89:39:57:94:0d:51:33:
9c:10:0b:68:06:30:00:36:da:0d:32:ec:4c:e8:ce:85:05:32:
ce:5b:ad:8b:0e:0b:7c:d7:32:b5:0b:67:40:14:67:0d:96:4b:
70:53:6e:02:22:04:43:59:ea:e9:ba:a8:93:ca:6d:fa:2b:a6:
53:34:d9:25:e5:38:64:03:f6:f9:c7:15:bc:f4:c2:6b:69:17:
fe:d5:c3:08:c5:f4:5f:be:49:d4:94:9b:a6:2b:6c:94:ea:66:
00:31:01:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0tIfk10kKsqoJgq3E/4wgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5
NjdhMTkwHhcNMjYwMTI1MTAzMDMwWhcNMjYwMTI2MTAzMDMwWjAzMTEwLwYDVQQD
EyhhNWE1NWI1NjA1ZGE0YWM5NWY1ODQ2ZTYwZDYyYmNkYjBkNzY1N2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9xRZ0td5G7yA0Ik9qe4NRXdFyU5
ktbayEbrOIWcEC0Z53AyHg2WEiutsPD08IYebioC5WJj7YOWWXLXhinkgQXOZETe
8Pcqwdd0pmjr7jpHbFLDnsBX1PGP2PcdPRq6za7UTK6gwDB3Uj2jjMOwzh2qe5J2
AYBxUiB2DoN6LskzRprKuILbWEJlWhCe9XVUGgIy/xqaSiKLdB2nTa6Otfg3zbkK
LkeZDtoylk+I5m6cT02D09ktOtaTtPCIoxrR6jLaJjxbk1k7fac3xao3HuSzc4p/
u0XK65MeR5RlL4L6tIclMVR9h//4WgDYvvzjKYb+87dcQYQV9XUiz0RlpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWlW1YF2krJX1hG5g1ivNsNdlfXMB8GA1UdIwQY
MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt
YmQ2ZTNiMDI2YzM3LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3
LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNj9oBUE
f+mrh1j2XlLtUWcS8NQYIqA3Qab/yHD/hLuikhY/9XbAPmHJynYyGd2GZE7f1Y7r
4qg1co6DgykTfKp0vzEXkY9ub++jdMgW755oAQ+F280sVReNHbASc4uKowkzrRIC
NQP2hdAtNUbKg+4QThSKD2JpxdxE1lZW6OxwLRPh7nl9lmQCMk/ajRZXtPKA0M1X
/5gc/puJOVeUDVEznBALaAYwADbaDTLsTOjOhQUyzlutiw4LfNcytQtnQBRnDZZL
cFNuAiIEQ1nq6bqok8pt+iumUzTZJeU4ZAP2+ccVvPTCa2kX/tXDCMX0X75J1JSb
pitslOpmADEBbg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:21:11 2026 by rpki-client