This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File: B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier: LGMbjnjm+TIMi06FQ/dukieRB+HFY3OoCXRsJbnFXRo=
Subject key identifier: E2:B8:0C:0F:B0:EA:E8:3B:4A:52:7A:48:A0:B7:A4:4D:33:95:47:10
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 019BF6BE9E6B1FD6E95A9102CCA3FC85CB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number: 17EC
Signing time: Sun 25 Jan 2026 20:00:46 +0000
Manifest this update: Sun 25 Jan 2026 20:00:46 +0000
Manifest next update: Mon 26 Jan 2026 20:00:46 +0000
Files and hashes: 1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: /9U/4DZCtg4VBxhhml+AqZ9heCoc5EfS+/IbufuFjYU=)
2: VuZOG8s543NfcGdXf57yIIrySJ8.roa (hash: Z7XKmPS1GYE3f8Q+rg/H8yChwaPlHaJspMgwTyoFFv0=)
3: sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa (hash: zq0CNZddr6RR3XPpn+vNQeYgJJau/bg5D4OmfDaVY/s=)
4: tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa (hash: enVyFjAXmV6jKlcwgcqYoRWX2/X4d1HEfq19dhiH9Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:be:9e:6b:1f:d6:e9:5a:91:02:cc:a3:fc:85:cb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Jan 25 20:00:46 2026 GMT
Not After : Jan 26 20:00:46 2026 GMT
Subject: CN=e2b80c0fb0eae83b4a527a48a0b7a44d33954710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d5:ad:5f:85:33:18:54:a2:4e:f4:9c:ad:d4:
c9:c2:ec:86:20:e3:49:10:e4:f8:ef:4f:af:f3:a0:
4d:25:85:8e:b0:8f:27:a8:f2:0d:b9:6c:5f:77:e6:
29:55:2e:62:6a:23:ad:54:61:61:26:8b:08:e7:88:
d1:99:67:cc:3c:8e:49:19:6b:15:7a:87:d1:99:d8:
6f:9b:fe:57:98:40:41:4f:fc:3e:28:f3:01:fb:d3:
65:33:60:2a:1f:cf:66:ca:f4:db:99:9a:06:96:97:
0c:42:7a:9e:6f:66:70:f5:f1:62:5b:88:d6:d8:5f:
57:ef:70:b1:b5:ad:72:9e:b1:55:02:a6:13:f7:49:
73:e3:ff:93:83:c1:00:da:b8:16:7d:2c:fc:2a:22:
ed:87:33:e3:cc:59:f8:29:a6:bc:3c:c1:43:82:2e:
b3:f0:93:bd:a2:5b:ec:91:7f:71:c6:c1:18:a0:df:
a1:e4:82:03:dc:16:6c:da:f6:1d:f8:65:84:73:ab:
1e:d7:f6:b4:57:97:2f:04:e0:e0:79:48:2d:ee:4c:
d1:8d:b1:e7:63:d4:ed:43:32:b3:7c:bb:c3:19:8d:
11:45:a6:88:81:33:ef:2d:95:27:69:99:f3:59:27:
a3:82:db:20:28:69:25:8c:9f:ba:8f:27:0b:57:5f:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B8:0C:0F:B0:EA:E8:3B:4A:52:7A:48:A0:B7:A4:4D:33:95:47:10
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d7:1f:df:2a:72:77:1a:bf:02:ab:81:2f:15:e8:9f:9b:0b:
d4:96:46:0d:5d:5a:bd:38:28:cd:57:83:4f:ea:3c:6d:91:e6:
71:31:b7:da:b6:be:b1:1d:a7:b3:f1:7d:34:f2:6b:0b:38:81:
d0:46:9a:c6:f2:e0:17:46:56:86:41:24:47:4a:50:c6:4f:5b:
47:f9:dc:ca:d3:f3:5d:1e:5c:e5:5d:bf:b2:98:25:5a:52:44:
c3:ae:d2:da:b8:0b:4c:15:aa:c8:a2:f3:49:49:c3:0a:41:f2:
a4:41:11:dc:a5:f2:bb:36:e5:bb:97:39:51:1d:47:c6:bb:8d:
d3:0c:42:29:ef:64:9c:46:db:65:b8:bb:e5:41:09:50:13:1f:
70:13:bf:6e:fe:49:bc:6a:8e:ba:aa:40:aa:a2:88:61:58:d9:
89:23:4e:3d:a0:62:1c:03:a5:41:a4:67:3c:02:5c:f6:c8:14:
de:35:ea:50:c9:bf:9d:ae:bd:7f:0a:66:fa:30:45:a7:70:55:
ec:a7:b2:89:fb:7a:bc:55:0e:cb:9f:66:89:24:02:41:d1:3a:
d1:62:ea:63:a5:43:3c:2b:74:5a:57:f3:c7:23:4e:e2:7e:34:
fc:ec:ea:92:a1:48:f4:45:4b:a9:ef:73:54:a0:32:7f:d5:bd:
c3:d2:41:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2vp5rH9bpWpECzKP8hcsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDc1MzM1Zjc3YmY0MjQwOTc2Mjc3YjFkZDBlMTliYjIz
YThlMWQwHhcNMjYwMTI1MjAwMDQ2WhcNMjYwMTI2MjAwMDQ2WjAzMTEwLwYDVQQD
EyhlMmI4MGMwZmIwZWFlODNiNGE1MjdhNDhhMGI3YTQ0ZDMzOTU0NzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9WtX4UzGFSiTvScrdTJwuyGIONJ
EOT470+v86BNJYWOsI8nqPINuWxfd+YpVS5iaiOtVGFhJosI54jRmWfMPI5JGWsV
eofRmdhvm/5XmEBBT/w+KPMB+9NlM2AqH89myvTbmZoGlpcMQnqeb2Zw9fFiW4jW
2F9X73Cxta1ynrFVAqYT90lz4/+Tg8EA2rgWfSz8KiLthzPjzFn4Kaa8PMFDgi6z
8JO9olvskX9xxsEYoN+h5IID3BZs2vYd+GWEc6se1/a0V5cvBODgeUgt7kzRjbHn
Y9TtQzKzfLvDGY0RRaaIgTPvLZUnaZnzWSejgtsgKGkljJ+6jycLV18mswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOK4DA+w6ug7SlJ6SKC3pE0zlUcQMB8GA1UdIwQY
MBaAFAfXUzX3e/QkCXYnex3Q4ZuyOo4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2Ut
YTQ1YmJjYjM0ZGU1LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2UtYTQ1YmJjYjM0ZGU1
LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNcf3ypy
dxq/AquBLxXon5sL1JZGDV1avTgozVeDT+o8bZHmcTG32ra+sR2ns/F9NPJrCziB
0EaaxvLgF0ZWhkEkR0pQxk9bR/ncytPzXR5c5V2/spglWlJEw67S2rgLTBWqyKLz
SUnDCkHypEER3KXyuzblu5c5UR1HxruN0wxCKe9knEbbZbi75UEJUBMfcBO/bv5J
vGqOuqpAqqKIYVjZiSNOPaBiHAOlQaRnPAJc9sgU3jXqUMm/na69fwpm+jBFp3BV
7Keyift6vFUOy59miSQCQdE60WLqY6VDPCt0WlfzxyNO4n40/OzqkqFI9EVLqe9z
VKAyf9W9w9JBPA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:34:36 2026 by rpki-client