This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier: bMd1mytbsOwV2DFY1zPw8YLPHUGG7iD0Q4WU5n3qjkc=
Subject key identifier: 0D:0D:F0:B9:69:CD:C1:46:D1:3D:55:B2:BC:71:DF:31:86:F5:4F:30
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial: 019BF5071AD2E88071359720DC03DFBAD6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number: 177D
Signing time: Sun 25 Jan 2026 12:00:42 +0000
Manifest this update: Sun 25 Jan 2026 12:00:42 +0000
Manifest next update: Mon 26 Jan 2026 12:00:42 +0000
Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: irK2Ha483WLJaRs+Ue3ONUSIEHYIF4jR8yWej/3W5rk=)
2: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (hash: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:1a:d2:e8:80:71:35:97:20:dc:03:df:ba:d6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Validity
Not Before: Jan 25 12:00:42 2026 GMT
Not After : Jan 26 12:00:42 2026 GMT
Subject: CN=0d0df0b969cdc146d13d55b2bc71df3186f54f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:87:75:be:1e:2e:3b:a0:5c:81:b9:88:f8:
49:7e:4f:34:28:4c:33:94:82:6d:c9:f9:de:1f:66:
c7:57:aa:4c:06:99:fb:1a:54:60:c9:9f:46:8d:40:
f0:2c:b9:5a:03:b3:b5:47:ea:82:49:93:ce:bd:96:
07:a0:61:95:d5:ef:b4:a0:32:2a:20:2f:48:11:2a:
54:0a:40:17:de:65:d5:be:03:a8:fe:3e:25:e1:7f:
38:e3:ae:a3:6a:87:f0:70:3a:56:83:59:cd:d1:80:
97:6a:4c:35:42:6d:5f:c2:de:ef:29:ee:d5:02:5f:
97:f3:05:28:94:41:b2:2f:0b:47:a0:0f:39:08:9d:
e8:2e:65:6e:d6:c1:0e:5f:e2:d4:e1:2f:84:01:59:
10:bb:43:6c:dc:29:08:f4:62:ac:fc:44:c0:56:e5:
ce:96:fe:8a:5d:8c:e1:9a:0d:a2:c4:25:f5:57:62:
f3:a8:ac:54:33:59:8f:18:e2:ff:a7:d2:68:8f:34:
41:07:a6:56:7c:2b:33:0c:e1:40:be:60:d5:6e:4a:
d2:3a:20:06:d6:e4:4f:9a:72:57:6b:1c:2a:b0:74:
98:39:6d:d8:8c:e1:ee:78:9f:a6:d3:66:e8:f7:1c:
85:c4:4a:49:73:b5:63:d5:c6:f5:58:e9:ab:33:e7:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0D:F0:B9:69:CD:C1:46:D1:3D:55:B2:BC:71:DF:31:86:F5:4F:30
X509v3 Authority Key Identifier:
keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b5:93:ec:64:c3:de:14:6a:69:7e:b1:76:b5:de:4a:99:41:
90:e4:c7:52:70:09:77:a7:73:03:d7:da:e4:bf:81:3c:df:5e:
3c:fa:d6:af:88:e5:5b:9b:26:11:92:8b:30:b2:62:98:59:24:
27:cb:7d:14:20:94:a8:c3:98:9b:55:68:d9:31:8f:74:78:c2:
91:91:81:b0:f7:1f:fa:2d:cd:75:2a:47:98:21:0a:ee:1f:9d:
48:21:5e:3c:3f:92:b5:c8:cf:33:01:d4:f9:c6:2f:8d:4f:11:
98:11:10:56:4f:30:be:e0:39:23:ad:20:81:c0:37:2f:86:e6:
f4:f3:8f:d3:20:ce:c6:4e:43:15:97:c5:30:1f:36:7c:06:c3:
c3:7b:eb:09:64:a0:8b:27:0c:74:85:d9:7f:18:f6:1a:7f:02:
c5:af:b7:a8:8e:8b:65:3e:a8:e4:ef:54:47:e5:37:cc:6e:b2:
52:b3:9e:2a:3a:7e:fe:f2:23:5e:6e:92:fa:81:f3:50:03:c3:
5f:46:0d:b8:ef:b9:04:56:32:e2:c7:08:e2:30:07:dd:e5:c7:
85:e4:82:7c:72:66:44:a9:0e:05:a0:65:af:2d:bd:6b:62:76:
0d:e7:ac:55:ae:fd:09:65:04:64:1a:2c:5a:c3:1b:f9:8c:a0:
3b:8c:a0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:36:29 2026 by rpki-client