This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File: m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier: 0RFZkj1xU6TLOOyPvyTSJz21XgZrDGSqAh6KSx+psCc=
Subject key identifier: 45:C1:CE:76:06:AC:32:A1:C3:6D:7D:A9:32:B1:46:94:78:D4:1E:51
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer: /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial: 019BF27518DF1C7B6B9E183575818B615583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number: 17E8
Signing time: Sun 25 Jan 2026 00:01:58 +0000
Manifest this update: Sun 25 Jan 2026 00:01:58 +0000
Manifest next update: Mon 26 Jan 2026 00:01:58 +0000
Files and hashes: 1: H8wE76fNQ2hhIjxk4MuG2V875Nw.roa (hash: g7ehk1525yVD63XA8pRRR3E8IFSxP1Zjdo5zOoEU1Rs=)
2: KxaC0ruOG2YD5n1zBRmLQRsn3WI.roa (hash: TwtwT6AH74GOn9MuLfl6jj270NvdM2yc+udW6/G1LQc=)
3: QkMzWLk5sTK1UV1ynfE6svHoE8U.roa (hash: CorPpj4zU1bBCQT6Z2Gb1cpT/IwtfHvCiSJfVqus6RE=)
4: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: uZBTkl1vsb3/aP3tyCZecwFk3Yu2sM5TGqhFJNCPodU=)
5: syri4gMUyb6a13KvMROJjwlBhZg.roa (hash: /QXVuiiMa3wjoFyt1XhRqNNgHTeCl2azKO31l+7RS+0=)
6: uyOFyGJDHMXG3t3pO277WLsoGqE.roa (hash: BzXP/08Zx0Wir6Qt4Wu5utPmmZQXa+TM9Drawn5Grls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:75:18:df:1c:7b:6b:9e:18:35:75:81:8b:61:55:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Validity
Not Before: Jan 25 00:01:58 2026 GMT
Not After : Jan 26 00:01:58 2026 GMT
Subject: CN=45c1ce7606ac32a1c36d7da932b1469478d41e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:ea:1e:de:07:66:6d:7d:e5:31:59:40:81:
bc:06:14:5e:e6:8a:c7:bd:53:27:84:8a:b6:94:70:
74:9f:47:01:d7:24:83:ca:51:0f:59:4c:3e:97:b7:
58:41:3a:53:64:d5:70:af:37:d7:55:71:19:92:3c:
fe:75:21:ea:24:7e:24:a4:8c:bc:61:a3:f6:90:c1:
81:18:a2:cc:38:2e:91:fd:83:6c:e8:e4:21:61:56:
91:e8:65:92:79:54:51:c3:31:01:51:e1:5d:eb:db:
b6:14:2f:14:d3:6e:41:d6:65:5b:70:23:af:90:81:
98:f3:28:a0:1e:0e:c5:d6:d3:46:81:a6:56:78:31:
3b:43:26:d4:91:3e:d3:4a:1d:0d:ec:62:ab:b4:f3:
bd:14:50:15:85:5b:6a:a7:6d:1b:44:18:8a:75:45:
75:93:b2:a1:0e:e5:18:4f:0d:d7:e8:55:b3:c8:f6:
68:21:a2:81:7c:8b:4b:55:ed:02:50:9c:b1:b6:e3:
5a:92:11:08:10:c8:8e:d5:37:63:f5:bd:60:80:38:
fc:18:2f:60:86:a1:dd:90:82:f5:7c:7e:07:85:85:
93:68:c0:c5:37:04:bb:c7:de:19:52:73:c3:63:8e:
70:6f:84:f4:ab:f3:5d:38:d2:a9:7b:b7:bd:75:5c:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C1:CE:76:06:AC:32:A1:C3:6D:7D:A9:32:B1:46:94:78:D4:1E:51
X509v3 Authority Key Identifier:
keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:44:c7:19:55:1d:b9:32:14:35:16:05:71:76:d2:74:bd:15:
22:d6:d8:a1:31:69:6e:10:35:b1:af:06:26:9c:df:3f:ee:5b:
5a:35:ed:47:41:86:1b:59:4a:cd:1b:fa:14:e3:07:88:47:6a:
37:16:bb:89:bb:ea:a4:cf:8e:00:d8:ef:4e:1d:d9:08:0b:1c:
af:24:30:50:05:0d:c8:0c:fb:a3:6f:31:3e:e8:e6:e8:86:1f:
b4:70:c3:cf:95:33:75:26:22:5c:0d:33:b1:22:66:9d:91:04:
0d:0d:75:8a:58:cf:19:85:40:7d:25:db:57:fd:1c:7a:75:40:
fe:7f:76:7c:a0:ff:d9:47:33:37:18:97:e3:0a:8a:9e:ce:42:
ea:91:51:09:14:9a:21:f9:30:19:97:f8:68:ed:98:4c:42:a9:
5b:fa:34:07:94:a3:a0:1e:dd:d1:90:bc:1e:cc:12:38:89:f3:
d7:a1:14:59:ad:ca:f5:13:87:ba:66:68:77:44:ce:16:d7:ce:
97:e3:be:62:5b:1c:7f:42:0e:78:a6:b5:a0:fa:68:62:7a:b7:
df:37:c5:5a:4f:aa:3d:95:68:61:26:65:af:f6:d3:77:18:5f:
42:88:fe:d9:e5:66:b7:92:3f:b6:e5:71:22:d8:c7:6f:5e:20:
b4:9c:86:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvydRjfHHtrnhg1dYGLYVWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODliOGNmNDdmN2M0ODVkNjI4ZDBhMzU5YTE2YTgxNWNk
MDA0YWIwHhcNMjYwMTI1MDAwMTU4WhcNMjYwMTI2MDAwMTU4WjAzMTEwLwYDVQQD
Eyg0NWMxY2U3NjA2YWMzMmExYzM2ZDdkYTkzMmIxNDY5NDc4ZDQxZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApurqHt4HZm195TFZQIG8BhRe5orH
vVMnhIq2lHB0n0cB1ySDylEPWUw+l7dYQTpTZNVwrzfXVXEZkjz+dSHqJH4kpIy8
YaP2kMGBGKLMOC6R/YNs6OQhYVaR6GWSeVRRwzEBUeFd69u2FC8U025B1mVbcCOv
kIGY8yigHg7F1tNGgaZWeDE7QybUkT7TSh0N7GKrtPO9FFAVhVtqp20bRBiKdUV1
k7KhDuUYTw3X6FWzyPZoIaKBfItLVe0CUJyxtuNakhEIEMiO1Tdj9b1ggDj8GC9g
hqHdkIL1fH4HhYWTaMDFNwS7x94ZUnPDY45wb4T0q/NdONKpe7e9dVyRUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXBznYGrDKhw219qTKxRpR41B5RMB8GA1UdIwQY
MBaAFJuJuM9H98SF1ijQo1mhaoFc0ASrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRtNHowZjN4SVhXS05DaldhRnFnVnpRQktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NTdmYzUtODAyOS00ODI4LTg1NDct
NjJlMjYwMzEzZTRjLzEvbTRtNHowZjN4SVhXS05DaldhRnFnVnpRQktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83NTdmYzUtODAyOS00ODI4LTg1NDctNjJlMjYwMzEzZTRj
LzEvbTRtNHowZjN4SVhXS05DaldhRnFnVnpRQktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfETHGVUd
uTIUNRYFcXbSdL0VItbYoTFpbhA1sa8GJpzfP+5bWjXtR0GGG1lKzRv6FOMHiEdq
Nxa7ibvqpM+OANjvTh3ZCAscryQwUAUNyAz7o28xPujm6IYftHDDz5UzdSYiXA0z
sSJmnZEEDQ11iljPGYVAfSXbV/0cenVA/n92fKD/2UczNxiX4wqKns5C6pFRCRSa
IfkwGZf4aO2YTEKpW/o0B5SjoB7d0ZC8HswSOInz16EUWa3K9ROHumZod0TOFtfO
l+O+Ylscf0IOeKa1oPpoYnq33zfFWk+qPZVoYSZlr/bTdxhfQoj+2eVmt5I/tuVx
ItjHb14gtJyGrA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:43:53 2026 by rpki-client