This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: nGZWyB16OlxrufLw5frG5dDD6e+WNWR3LW5NMW+tneo=
Subject key identifier: AD:02:7C:84:45:4E:18:B3:9A:4B:AE:3E:C4:5F:DB:89:A2:88:7E:6C
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 019BF83F160EC2F7CF034A35B6064B9EA031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 06E9
Signing time: Mon 26 Jan 2026 03:00:42 +0000
Manifest this update: Mon 26 Jan 2026 03:00:42 +0000
Manifest next update: Tue 27 Jan 2026 03:00:42 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: MNw0yP/QPhzs/GcF7Nj36tDE4EDOWjTFS2lDndHSsCU=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3f:16:0e:c2:f7:cf:03:4a:35:b6:06:4b:9e:a0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Jan 26 03:00:42 2026 GMT
Not After : Jan 27 03:00:42 2026 GMT
Subject: CN=ad027c84454e18b39a4bae3ec45fdb89a2887e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:f6:b4:78:3a:31:40:48:f6:bb:c0:10:1b:
dc:94:6a:2a:d7:78:81:b1:77:ee:5f:39:05:b2:6c:
b3:32:0d:dc:4f:95:b8:5b:60:5d:f1:34:c3:33:c0:
5a:9e:fe:48:b2:ce:40:2c:ad:e7:c8:99:79:20:c4:
f5:ec:71:fb:d9:bd:1c:18:94:dd:18:c0:23:3c:9d:
34:8d:c2:c6:e6:b8:d7:54:17:a4:c4:88:da:ae:e3:
1b:e0:de:5c:f6:b7:32:a3:76:c4:70:41:14:85:66:
81:7e:06:85:10:01:e1:48:27:8b:65:e0:f1:65:75:
d8:d4:d3:af:95:d6:a9:26:f2:a7:3e:7b:b3:e8:47:
42:ea:c7:94:e8:5d:87:25:8d:2f:75:1e:ec:e7:63:
a0:f5:31:20:ed:1c:96:48:c8:d9:0e:a4:3c:cf:a7:
d0:a4:5e:07:47:9a:e6:69:25:27:b0:b4:78:2c:f4:
5b:11:bb:3b:a6:3d:25:ea:fe:f3:40:c6:e1:92:31:
63:1a:36:79:e7:aa:ff:d4:be:34:c1:be:08:78:e0:
2f:a1:f9:3c:60:f0:a9:6c:51:57:c2:a3:2a:e5:aa:
c6:28:81:46:dc:a0:bb:a2:3f:04:9c:ff:1d:75:f0:
2a:21:52:09:5c:a9:9b:26:99:12:39:ff:d0:88:92:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:7C:84:45:4E:18:B3:9A:4B:AE:3E:C4:5F:DB:89:A2:88:7E:6C
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f5:03:f5:33:97:35:5f:1f:58:88:d2:8b:90:fe:09:46:66:
ed:8c:3d:eb:79:ed:71:e0:c8:9a:e4:fb:11:39:13:80:45:0c:
d7:08:45:dc:0a:67:0b:f6:d0:2c:14:1c:ae:83:19:f8:1e:53:
bf:bd:4b:22:ff:84:13:3a:97:d8:c8:b7:7e:63:c8:d8:34:be:
28:1c:84:38:b1:bb:a7:f1:35:7f:47:d3:bd:6d:8c:3b:73:d7:
a5:8a:da:48:58:57:c0:30:14:be:0a:75:70:15:88:f3:fc:4c:
68:65:e4:e4:13:68:25:58:3d:56:f0:fa:5f:6c:3e:ca:7c:3c:
31:db:1d:3b:1f:a7:82:d5:2f:c1:e7:d8:d1:6f:35:cd:18:fe:
20:f5:04:bf:97:1f:be:d2:99:56:9e:91:d1:db:ac:9a:b2:b3:
33:36:28:73:17:50:9c:04:61:73:fe:4f:e0:0b:0f:c8:ef:c1:
72:94:ee:df:73:6e:e4:6c:4e:8e:45:74:e9:65:60:e9:27:8f:
8f:12:bc:43:eb:21:b7:14:1d:9e:16:28:d4:ed:50:9f:65:f3:
b1:51:14:85:11:05:79:0b:6c:a9:cb:e1:95:79:a8:a4:06:e9:
b8:dc:08:ca:2c:e6:8c:79:5d:20:16:e4:32:84:2a:6f:19:90:
24:5c:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:39:02 2026 by rpki-client