This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json)
Hash identifier: rvK4NRG+DMNgMHrv2nANJX+uFpUXBHLsXLFp3bKWtY8=
Subject key identifier: 4D:E1:F3:DA:48:B1:28:DD:BE:2F:27:CF:CB:42:87:16:5C:D3:5A:3C
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 019BF3F56F7F3EF28EFACD47E1E03F7A058D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
Manifest number: 17FC
Signing time: Sun 25 Jan 2026 07:01:46 +0000
Manifest this update: Sun 25 Jan 2026 07:01:46 +0000
Manifest next update: Mon 26 Jan 2026 07:01:46 +0000
Files and hashes: 1: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (hash: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM=)
2: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (hash: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0=)
3: 5gizdFY-AQlhbCdYV0MHkXmuq7M.roa (hash: k9r1XdI4/Lx+2gwOSiva8ziRNB2yu8viuLXNYvO5Vys=)
4: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (hash: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M=)
5: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (hash: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw=)
6: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (hash: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4=)
7: KLNITSlV517b4Qan6MKLyoM8iFI.roa (hash: sXR+lvLvVIC2TEhhA+WkxHLrslGZwv5EeqK9Ngr2eS0=)
8: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (hash: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4=)
9: pAF8GSze9ehTbgJAIF3FBa54cNk.roa (hash: PvFwSg+H0WDB7gVfETtfHniBE9Eh+MMRXqrqan++8pg=)
10: qrK8l-uIuryQmH_-AqhZga8WNz8.roa (hash: eI1rOqGrZ+k2KHlXxvPdF7xmA3oDCvTfj+3Q37y0Fi8=)
11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: lmlnv8lU5ed6ujYbsqmer2Fh3/D9XR5kh7eNKUpT5kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:f5:6f:7f:3e:f2:8e:fa:cd:47:e1:e0:3f:7a:05:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Jan 25 07:01:46 2026 GMT
Not After : Jan 26 07:01:46 2026 GMT
Subject: CN=4de1f3da48b128ddbe2f27cfcb4287165cd35a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:d6:0c:95:a9:32:1e:15:60:9e:3f:30:a4:
19:7c:3b:b5:7a:7b:44:5b:07:f8:e8:67:7c:74:31:
bb:25:9b:eb:04:59:e9:c2:30:30:13:cb:3f:f5:9b:
46:7d:c6:0f:c5:ae:f3:e1:e2:74:67:a2:3d:71:aa:
f9:df:49:d9:a8:da:a8:cf:eb:3a:65:97:26:01:9f:
93:67:ee:80:5d:e0:e4:d5:44:53:8c:48:e0:16:b5:
d6:92:9f:54:7f:f9:2c:ac:2b:ad:dd:ef:64:d1:2e:
5b:e1:3d:5e:40:10:11:af:74:f4:7d:7a:98:9c:0f:
af:b1:de:6e:ec:eb:77:eb:5f:a4:42:d2:d5:9f:cc:
51:45:73:dc:8c:23:4d:93:91:fd:74:f4:38:84:07:
52:a9:f5:4b:ef:56:b2:53:23:ab:ed:3e:7e:e8:ca:
fd:15:95:5d:fd:70:8b:6f:0f:8d:c9:33:45:0b:44:
a6:a3:54:56:9e:b0:61:b8:16:28:70:ed:a7:ad:15:
cf:54:7f:bb:74:ba:7d:68:24:9b:1c:cc:49:47:25:
e0:d3:e7:95:fa:45:8c:68:e5:f8:b1:97:e0:b3:7b:
19:c6:92:f9:f7:bd:e4:69:25:da:10:28:0d:f7:89:
cb:67:6a:d1:24:4e:07:87:5d:a7:51:03:5e:1e:2d:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E1:F3:DA:48:B1:28:DD:BE:2F:27:CF:CB:42:87:16:5C:D3:5A:3C
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2f:c0:5e:e1:00:bd:6a:1c:f3:03:e7:e8:1a:bd:fe:05:c1:
c9:df:5b:bc:a2:68:d2:21:82:7f:c6:ea:17:4b:8b:23:63:b0:
53:ad:b7:6e:20:1e:c7:f2:10:0e:27:8d:89:6b:8b:9b:b6:85:
46:8e:a2:a9:a7:9f:a8:30:5f:50:69:a0:fe:dd:8f:43:03:27:
41:52:e0:7f:1a:cd:ed:8b:00:da:4d:98:e9:37:d9:39:ef:f5:
41:19:51:2a:e2:69:5f:36:ff:4f:8f:03:e5:e3:af:e1:9b:33:
93:e0:73:79:de:fe:11:a2:58:cc:9a:10:07:ac:80:e7:a2:46:
be:7c:6b:8b:b1:8d:79:2c:06:76:23:f8:39:59:12:42:56:8b:
36:4f:ee:e7:cc:d1:0d:20:b5:27:a4:85:73:72:c9:66:a6:09:
64:f2:68:aa:e6:a1:a2:08:28:5a:df:05:7a:47:5f:60:b9:7c:
9e:00:1b:24:da:36:7e:60:8a:24:7b:87:ad:6e:8f:97:90:fc:
54:6e:52:a8:68:88:6c:d2:e4:6d:b0:20:50:7d:80:a7:ca:c5:
95:3b:e1:b7:62:dd:27:6f:91:80:22:a9:32:bb:9a:90:85:80:
67:e2:ce:50:24:d0:e1:7a:e6:a4:d0:a3:d0:1e:35:9c:56:59:
15:65:01:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvz9W9/PvKO+s1H4eA/egWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw
YzE0NWEwHhcNMjYwMTI1MDcwMTQ2WhcNMjYwMTI2MDcwMTQ2WjAzMTEwLwYDVQQD
Eyg0ZGUxZjNkYTQ4YjEyOGRkYmUyZjI3Y2ZjYjQyODcxNjVjZDM1YTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMDWDJWpMh4VYJ4/MKQZfDu1entE
Wwf46Gd8dDG7JZvrBFnpwjAwE8s/9ZtGfcYPxa7z4eJ0Z6I9car530nZqNqoz+s6
ZZcmAZ+TZ+6AXeDk1URTjEjgFrXWkp9Uf/ksrCut3e9k0S5b4T1eQBARr3T0fXqY
nA+vsd5u7Ot361+kQtLVn8xRRXPcjCNNk5H9dPQ4hAdSqfVL71ayUyOr7T5+6Mr9
FZVd/XCLbw+NyTNFC0Smo1RWnrBhuBYocO2nrRXPVH+7dLp9aCSbHMxJRyXg0+eV
+kWMaOX4sZfgs3sZxpL5973kaSXaECgN94nLZ2rRJE4Hh12nUQNeHi20LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3h89pIsSjdvi8nz8tChxZc01o8MB8GA1UdIwQY
MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt
ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0
LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfi/AXuEA
vWoc8wPn6Bq9/gXByd9bvKJo0iGCf8bqF0uLI2OwU623biAex/IQDieNiWuLm7aF
Ro6iqaefqDBfUGmg/t2PQwMnQVLgfxrN7YsA2k2Y6TfZOe/1QRlRKuJpXzb/T48D
5eOv4Zszk+Bzed7+EaJYzJoQB6yA56JGvnxri7GNeSwGdiP4OVkSQlaLNk/u58zR
DSC1J6SFc3LJZqYJZPJoquahoggoWt8FekdfYLl8ngAbJNo2fmCKJHuHrW6Pl5D8
VG5SqGiIbNLkbbAgUH2Ap8rFlTvht2LdJ2+RgCKpMruakIWAZ+LOUCTQ4XrmpNCj
0B41nFZZFWUBEQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:28 2026 by rpki-client