This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: I94JxbFoIbPszd5BpNzYC3+wg4mNzj0NA2NQ8QXK5YA=
Subject key identifier: 9E:26:93:AD:AB:52:5D:D0:FB:B3:83:66:5D:72:A1:00:5F:CD:72:55
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 019BF76334C878E12F23BB775513BDFB6E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 17EC
Signing time: Sun 25 Jan 2026 23:00:32 +0000
Manifest this update: Sun 25 Jan 2026 23:00:32 +0000
Manifest next update: Mon 26 Jan 2026 23:00:32 +0000
Files and hashes: 1: Avc3DoG9n8NvJWjUCmVcnkN97O4.roa (hash: YMjpamajsCA46OT3leu0kluW3gE2qUo5wS/kP9h33r8=)
2: Ek07ovRM2Kh_Vc9JMXBQkpJ1Q9o.roa (hash: SY/fpD8jCYcf0UhkUzguL/mEf+0d9gsoahH2LNMAjv4=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: AN5AwYQ+/eRvs/vtEI6xhaUpHFoCrM4l0cjT5nx/aFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:63:34:c8:78:e1:2f:23:bb:77:55:13:bd:fb:6e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Jan 25 23:00:32 2026 GMT
Not After : Jan 26 23:00:32 2026 GMT
Subject: CN=9e2693adab525dd0fbb383665d72a1005fcd7255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:1b:68:ec:f9:7f:14:20:ae:64:ea:8c:0d:
67:2e:45:26:cf:87:2b:02:94:d4:55:57:c3:7f:bc:
bb:a4:da:b1:24:6a:e2:c2:d1:f3:2a:80:3e:b4:c5:
b6:d3:28:48:86:c4:92:57:a2:a7:65:f7:3d:3e:0e:
ff:a9:2f:c9:3e:dd:b0:bb:ad:7f:31:1e:b9:9e:6b:
e6:67:b8:ac:f6:50:13:b6:da:d3:29:2b:4b:b2:0e:
ec:e5:1c:ce:65:83:04:ca:e8:d4:b3:2c:17:17:88:
53:bd:e9:68:42:c1:90:38:1a:ca:90:f3:4a:68:f1:
61:0c:86:17:b6:89:dd:fa:0d:af:8d:56:77:99:09:
1c:f8:b3:c9:65:a1:a9:c2:e2:bb:9f:ba:e4:ef:55:
20:d6:2b:22:b9:6c:80:29:af:06:5c:7f:43:39:ec:
c4:cb:96:32:50:91:73:a5:aa:32:66:e9:69:5a:a6:
ce:e9:b9:bb:90:0e:86:91:f9:37:a4:62:01:01:16:
c4:08:07:fa:0d:a4:e3:c4:d7:8a:7a:d3:3b:bd:17:
27:15:05:46:cf:2e:0c:d6:dd:10:2c:c6:4b:c7:fb:
5c:63:15:5b:7c:98:a2:35:2e:53:d7:6f:2b:db:42:
96:45:16:57:ec:56:c3:e6:e2:5a:1a:e3:c0:df:57:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:26:93:AD:AB:52:5D:D0:FB:B3:83:66:5D:72:A1:00:5F:CD:72:55
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:41:78:eb:4d:46:ea:57:6c:35:3d:6e:2e:fe:31:1c:71:1d:
6e:10:ac:3e:29:6e:f8:ce:67:04:bb:e3:20:d0:86:82:41:71:
7d:88:d5:9d:2b:b9:66:f0:d6:13:87:3c:91:c9:4f:aa:1d:97:
fa:d7:40:f0:14:49:da:df:46:94:62:a5:d2:8c:e3:05:85:08:
eb:e5:b2:59:39:a1:a2:53:f6:14:67:77:3c:d9:a5:5e:61:ce:
59:8f:e2:a7:cf:db:90:80:d3:12:30:03:2f:37:61:94:10:62:
62:09:04:1d:88:23:91:d4:dd:82:50:b6:0b:9f:bc:6f:f5:b6:
00:95:d9:32:aa:cf:c9:46:91:64:e5:cd:89:b5:bd:54:b4:97:
fe:2b:23:89:c2:29:e9:e0:d7:1e:a5:91:d5:52:12:f3:cd:be:
80:be:90:f5:fb:b9:9d:5f:c9:ab:c4:c6:79:68:13:99:d6:c4:
99:fd:0b:56:c6:2f:9b:1f:5f:1f:7f:1b:c3:80:71:5c:e3:fb:
ee:a1:86:12:64:18:4f:53:e0:c4:fc:fe:a2:f1:7d:8b:7f:8d:
38:75:c1:3e:34:99:bf:d3:be:13:37:3a:60:34:c9:51:ec:f4:
39:e6:6b:b3:42:6f:43:8d:56:90:86:90:5a:7f:0d:f6:a2:5f:
a0:c3:3a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3YzTIeOEvI7t3VRO9+25DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk
Y2MyMjQwHhcNMjYwMTI1MjMwMDMyWhcNMjYwMTI2MjMwMDMyWjAzMTEwLwYDVQQD
Eyg5ZTI2OTNhZGFiNTI1ZGQwZmJiMzgzNjY1ZDcyYTEwMDVmY2Q3MjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+AbaOz5fxQgrmTqjA1nLkUmz4cr
ApTUVVfDf7y7pNqxJGriwtHzKoA+tMW20yhIhsSSV6KnZfc9Pg7/qS/JPt2wu61/
MR65nmvmZ7is9lATttrTKStLsg7s5RzOZYMEyujUsywXF4hTveloQsGQOBrKkPNK
aPFhDIYXtond+g2vjVZ3mQkc+LPJZaGpwuK7n7rk71Ug1isiuWyAKa8GXH9DOezE
y5YyUJFzpaoyZulpWqbO6bm7kA6Gkfk3pGIBARbECAf6DaTjxNeKetM7vRcnFQVG
zy4M1t0QLMZLx/tcYxVbfJiiNS5T128r20KWRRZX7FbD5uJaGuPA31dTewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4mk62rUl3Q+7ODZl1yoQBfzXJVMB8GA1UdIwQY
MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt
Y2JjMjc5N2MxZDBhLzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh
LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUF4601G
6ldsNT1uLv4xHHEdbhCsPilu+M5nBLvjINCGgkFxfYjVnSu5ZvDWE4c8kclPqh2X
+tdA8BRJ2t9GlGKl0ozjBYUI6+WyWTmholP2FGd3PNmlXmHOWY/ip8/bkIDTEjAD
LzdhlBBiYgkEHYgjkdTdglC2C5+8b/W2AJXZMqrPyUaRZOXNibW9VLSX/isjicIp
6eDXHqWR1VIS882+gL6Q9fu5nV/Jq8TGeWgTmdbEmf0LVsYvmx9fH38bw4BxXOP7
7qGGEmQYT1PgxPz+ovF9i3+NOHXBPjSZv9O+Ezc6YDTJUez0OeZrs0JvQ41WkIaQ
Wn8N9qJfoMM6qw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:14:39 2026 by rpki-client