This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: tQyQmvpJxl8DCgexRpNEvovl+QhBuxRISxXY8asfYbA=
Subject key identifier: 0E:06:57:1E:E5:87:97:80:CD:2D:CD:72:BB:C9:B4:AE:8C:B8:98:4A
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 019BF2AB2B9C9A28B411241207F31764FEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 17FA
Signing time: Sun 25 Jan 2026 01:01:02 +0000
Manifest this update: Sun 25 Jan 2026 01:01:02 +0000
Manifest next update: Mon 26 Jan 2026 01:01:02 +0000
Files and hashes: 1: 1-99tj9n-LWYw_lI6J2ZtTlYMtsw.roa (hash: Ptwrv4fZgKC6RoxF9JtUijELaGYTN5wfnCikQVHX0jc=)
2: Vbu4WFHtQs8CWjvDwWDBgOfuqwQ.roa (hash: N29scv8xguie+t9aPoJpoSulc1+RZLFrY9t5xm5Se4E=)
3: WHqH2EhDK6xxFIiXyNlsjw-yMMg.roa (hash: boc+B5V0r/3xbux19AoHg18zg6QdefO3+vjSL8b5Cv8=)
4: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: A6ayYBipKA9oaZOD8i3dhYIkk5rac13tLEz+56RMlpA=)
5: wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa (hash: 7BcGsYEeMK3lgIGyfCupRWnQz43ULZB5dbROxwaq/V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:ab:2b:9c:9a:28:b4:11:24:12:07:f3:17:64:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Jan 25 01:01:02 2026 GMT
Not After : Jan 26 01:01:02 2026 GMT
Subject: CN=0e06571ee5879780cd2dcd72bbc9b4ae8cb8984a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:03:8c:18:f4:82:ee:d1:9c:dc:60:c7:ad:
e5:1d:11:c3:dc:96:fa:2a:40:64:e8:a3:8c:a2:23:
77:03:7d:c8:26:e6:34:9b:f5:76:35:cf:82:38:39:
23:09:6b:5b:ab:fb:17:45:a8:20:09:a5:92:78:46:
0f:bf:86:a4:bc:34:bd:46:8e:8c:2c:dd:98:f2:72:
eb:50:c2:06:e0:30:c5:80:c6:8a:0b:c1:a8:20:32:
82:99:c4:a6:9e:4e:58:61:98:25:0c:f6:54:85:30:
3a:f2:7e:aa:2b:63:c7:f6:d0:24:f4:73:27:9e:f2:
df:f6:44:23:c0:e4:97:6b:f5:6b:14:b1:cc:41:1b:
02:e1:c2:ec:40:58:b8:b2:33:7e:23:8f:70:4e:67:
2d:f3:97:6f:35:d2:d9:7f:22:57:0b:53:ed:e1:bf:
95:7a:a5:41:47:77:f6:65:9a:d8:f3:51:c7:00:37:
08:cc:73:1a:b5:94:2a:a0:f3:0d:50:a0:92:06:b7:
58:6d:18:47:47:26:c8:20:32:14:74:54:e6:84:39:
6f:28:f3:5e:73:d8:c0:e5:89:15:6c:45:a8:df:d8:
49:4c:12:5c:51:95:3d:57:8a:af:07:00:8c:fe:4b:
77:3d:25:da:1a:bf:b7:f5:48:cb:3b:4b:d1:67:7d:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:06:57:1E:E5:87:97:80:CD:2D:CD:72:BB:C9:B4:AE:8C:B8:98:4A
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a6:79:fc:84:27:e7:89:c9:1f:df:86:60:19:f7:60:29:11:
89:8a:f6:44:16:85:47:fc:77:a6:4e:69:fa:9a:9e:64:62:5f:
05:9c:b7:a8:df:97:e3:5d:ae:d2:ab:a5:4c:6a:18:ea:78:19:
cd:fb:02:fc:69:fe:2e:b2:55:56:d4:99:61:64:50:6c:c3:4d:
2d:36:a1:fd:60:fa:be:78:ac:f2:4b:00:a6:cf:59:bd:02:32:
ea:10:2f:2d:f6:6d:5a:20:7d:48:1a:ce:49:b0:6c:cb:44:ba:
19:25:3d:1e:f2:48:9f:d7:ad:8a:dd:b8:58:18:c0:4a:fd:fb:
79:a9:ad:e5:f7:28:05:90:e7:c7:7b:86:10:36:6b:30:f5:b5:
d1:96:67:69:eb:88:09:e8:db:64:ea:80:8c:db:8d:6b:9c:2b:
9f:18:9a:67:f3:d1:29:b6:ba:3f:a5:fc:a2:02:b8:27:cc:fe:
5c:a4:31:9f:a1:4f:37:cd:27:db:5b:9e:02:37:e2:b4:46:ab:
55:7b:b6:a4:c0:82:3f:d2:04:b2:ba:b8:8e:34:5d:2f:d2:35:
e8:ec:cc:07:c1:ff:bd:17:23:fc:2a:22:14:09:63:d4:2e:5f:
f1:ad:39:bf:35:d9:c8:32:da:59:c8:58:ad:c2:b7:96:44:2e:
43:58:24:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:33:43 2026 by rpki-client