This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
File: ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json)
Hash identifier: Qy4kmxs544lj4U67jDJ4Aw6gfomsZFxFHXYmrKVFwmo=
Subject key identifier: A5:05:04:6D:3D:71:1D:E1:DE:DA:06:A4:C3:30:0B:28:C9:76:F2:9A
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 019BF91BED7EE3775AD4A223FC614400B9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
Manifest number: 17EA
Signing time: Mon 26 Jan 2026 07:01:55 +0000
Manifest this update: Mon 26 Jan 2026 07:01:55 +0000
Manifest next update: Tue 27 Jan 2026 07:01:55 +0000
Files and hashes: 1: IkWlnkMRYmmY0z6RsMt9nVHWTHY.roa (hash: HZyHDjW4LM4yDmwpXJyjj9r1XYcSwDmPu4g9chOA6fY=)
2: Nd1TnNt00oK2xr_oilTTzqexc7Q.roa (hash: +kz057WFCQ3qfR3EIzjNvOnka8S56ej02u7lcwgzBvw=)
3: fV79Senro57id6bOwy-8bI2dt7Y.roa (hash: MG+KbDbsLbpSzwp3gHCs1H8iXzaKkDKDQI00IvNa3Wg=)
4: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: p9mlW0Q8ktE7iHzbf+EhWrUBluaqRCQILPoSfUWHmPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:1b:ed:7e:e3:77:5a:d4:a2:23:fc:61:44:00:b9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: Jan 26 07:01:55 2026 GMT
Not After : Jan 27 07:01:55 2026 GMT
Subject: CN=a505046d3d711de1deda06a4c3300b28c976f29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:d1:8e:00:83:1a:a0:18:00:67:21:b1:3d:
c9:c8:17:c8:5f:5c:36:43:8c:bf:83:ab:b1:65:ed:
21:fc:c1:b6:9e:a9:7b:bc:3d:14:f1:1a:21:cd:64:
91:5c:a5:e9:12:35:ed:32:ce:42:93:4b:e4:1d:b5:
90:11:65:4c:93:44:50:87:a0:d8:8d:5a:ae:aa:25:
1a:18:92:2f:40:94:60:a8:cd:89:8a:78:52:d5:9f:
43:4e:23:d5:66:a5:56:0d:b6:d2:bd:35:8e:72:fc:
43:d2:7e:d0:7f:f9:63:ea:8f:18:56:ca:bf:a1:6a:
a6:56:62:20:92:42:e4:1a:c8:66:71:3e:62:d7:1e:
00:90:ad:5e:75:85:ad:15:89:11:08:9b:b4:b8:49:
1c:6b:c1:80:4e:c7:f1:96:92:46:7e:4a:00:49:00:
08:59:71:4b:a7:75:ae:84:45:42:d8:96:07:b3:f2:
a7:f3:15:54:e2:2e:0c:9e:2b:fa:0c:bf:4e:f5:97:
11:8b:15:f0:0b:b2:f1:a6:8a:14:62:af:7e:00:72:
07:af:4d:cd:ec:75:06:10:12:41:56:58:a5:4f:f2:
94:23:48:26:be:6a:ac:6e:28:56:af:b0:e8:b2:a6:
0a:c4:5e:87:3c:38:cb:40:29:71:8a:cc:d9:82:c4:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:05:04:6D:3D:71:1D:E1:DE:DA:06:A4:C3:30:0B:28:C9:76:F2:9A
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a3:8f:b3:3a:9e:c7:da:65:26:9f:f4:b5:79:04:e7:15:cf:
23:b8:63:7a:f8:32:25:5b:e1:c9:d8:5b:29:22:23:8f:d5:57:
ba:60:04:0b:3d:a7:e6:15:d0:5e:d9:bb:93:fc:79:12:0d:12:
72:b3:56:1d:f6:27:2d:f9:cd:c4:ef:04:3c:21:e9:bf:f2:9d:
65:af:da:df:99:00:66:44:c0:bf:d3:e1:30:76:30:51:6a:1e:
cf:13:1b:cf:c3:5e:61:3c:de:bf:ca:a6:40:5f:04:a6:62:f6:
a4:08:59:11:07:06:47:f9:09:db:42:f7:e5:94:e8:bc:fd:bc:
e9:36:0a:df:f3:8b:c2:84:12:ba:74:bc:3a:05:87:93:d1:ae:
bf:42:60:a6:54:40:2a:78:33:8d:66:4c:98:1a:7b:3b:76:d4:
c1:95:5d:77:b8:89:d8:0d:dd:84:0e:82:80:12:6d:1a:7e:c2:
89:ea:cd:81:19:c3:9c:34:77:bb:2c:fc:b0:15:b4:19:dc:a1:
ea:15:15:94:e0:d0:52:4f:94:bb:d9:ee:97:52:8e:4c:f9:7d:
fe:32:f9:29:24:e8:08:8b:2a:7a:4e:59:fb:45:0a:9a:12:f1:
f8:8f:33:ed:2f:e3:cf:f1:78:9d:00:a7:fa:34:cd:39:cf:b1:
95:4a:ce:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:44:04 2026 by rpki-client