This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier: Q54XViTDMSCtQLMC2bCWTS/NbWP+3tqrfTbkvuyr4eI=
Subject key identifier: 93:A1:C8:B3:78:C0:21:C3:02:F0:1D:49:F8:F1:E1:DB:D9:66:DC:90
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 019BF72CBFCE2DCC6607A6F25A9F048AF0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number: 17F5
Signing time: Sun 25 Jan 2026 22:01:03 +0000
Manifest this update: Sun 25 Jan 2026 22:01:03 +0000
Manifest next update: Mon 26 Jan 2026 22:01:03 +0000
Files and hashes: 1: BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa (hash: UQ8CMhjpjjRCrwKSEiPQZMVJiMOKt9f34DLWWqnIsNo=)
2: GCHx6BjMqA7SbRNtwAN8RV-aqNw.roa (hash: 3EWNe3rvlVZaJrxvof33Dkt8YZC4xAKJeeMy9djaF9g=)
3: INU4IhQdA3I64nfOMs3M07ApBVg.roa (hash: fPvKXjy0z+MbzXxFB2wActV92uNgLTmulsDE8gFm+mw=)
4: WGlmFAJ29VU-bwCnaF8NI0bUhWE.roa (hash: f7yhgzYGC0HsMyQiPjUzXb1Tizgt5BdNWAmq8zA+cRk=)
5: gyLKXkXRz48b_JyrcotRubrVz8Y.roa (hash: ygEJxWsADXdbRBqANcORtqCY24UFLYSPOImjlQWVkW8=)
6: htEUr6Lt44lZvtJ-YrwomAVpms8.roa (hash: fr4tJOJHx4cibpVUjq4P3JJxw5JGxqyswZhZFvLizGs=)
7: jTqcYKHqLgJzkgKKyQoLjf3ZZiA.roa (hash: NOw0XonYdKd94pKios35a/MdMCRJkVJF3zHnY0kyMwo=)
8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: UNAHaxb7ZMLDnk7YVTC/a0ZkEiuVEm0Cy/BTdgbenow=)
9: pVmVj_eoX5arXwOMP1Rpu_8xmws.roa (hash: mDgYxH3BYVa951ExbQ3NML3WlRu0oKWIghRQSPiHpSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2c:bf:ce:2d:cc:66:07:a6:f2:5a:9f:04:8a:f0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Jan 25 22:01:03 2026 GMT
Not After : Jan 26 22:01:03 2026 GMT
Subject: CN=93a1c8b378c021c302f01d49f8f1e1dbd966dc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:6e:d0:54:12:7b:59:20:89:b0:b8:5b:d8:
60:07:91:a1:de:15:2b:34:80:1a:c6:b1:7d:fb:32:
4e:d8:db:75:55:6b:18:b7:2d:de:49:a0:e0:7e:73:
6d:a4:7d:ce:54:28:2c:c6:e0:9d:87:96:86:86:4e:
76:93:de:f3:2c:fa:ba:9b:dc:4a:23:33:23:81:5c:
b0:ea:4e:8e:dd:d2:f6:02:ae:14:d7:de:6c:cd:0f:
b3:61:3c:29:a4:a2:a4:c1:fa:25:5a:e2:6a:a0:da:
03:f2:92:98:c3:65:43:9e:10:5b:0e:17:62:eb:c6:
f0:38:cf:47:cf:1a:e4:64:25:43:3b:82:fc:a4:95:
a9:ae:2b:cb:f0:26:4a:60:d1:a7:0f:55:08:91:0a:
d8:f4:30:23:50:03:f6:85:a5:7a:13:1d:bc:5f:86:
34:f4:10:73:96:ae:86:14:d9:f9:fe:64:42:f4:53:
c0:84:5e:23:15:1f:de:81:e0:7d:73:0f:e1:84:2b:
e0:26:21:ad:ac:1a:2e:0a:fa:8b:8c:f5:2d:09:e3:
69:ca:a0:2e:21:f8:88:49:c1:aa:74:29:f5:1b:47:
5a:a6:f3:6c:cb:16:e1:73:a2:66:de:86:19:35:e3:
58:5b:c0:60:ca:c8:0b:c5:8a:1e:21:09:e1:93:12:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A1:C8:B3:78:C0:21:C3:02:F0:1D:49:F8:F1:E1:DB:D9:66:DC:90
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3b:25:ee:ec:cf:86:16:98:8f:a5:8b:2a:14:93:9c:dc:24:
66:43:80:a2:43:cf:b4:50:f5:db:65:97:d2:69:27:95:b5:36:
10:24:19:37:ba:d0:51:af:9e:d7:a7:e7:7a:54:0a:2b:91:c7:
53:0e:c8:78:2e:4a:d0:14:ee:65:9a:4e:fb:d5:10:cf:91:76:
41:42:20:93:7e:ac:47:97:a8:36:b1:e9:70:1f:a2:f8:0f:84:
48:c3:8a:10:01:b1:83:14:6f:6f:a9:6a:44:86:48:0c:7d:0a:
24:12:8f:b2:65:f1:cb:2e:df:85:83:3e:8c:78:fb:8b:91:5f:
42:31:68:35:78:b6:5d:a7:ee:8d:4d:f3:2c:97:ed:19:c3:c1:
df:9f:1a:78:ab:14:f9:0e:56:e1:ee:1e:63:64:ab:2e:4c:47:
05:34:54:4d:17:00:10:e0:18:b2:0c:36:30:75:cb:d2:6f:4b:
56:b3:49:94:ac:17:47:cb:81:60:d4:15:ba:1d:31:dc:e3:8c:
37:c9:cd:b6:9a:fd:06:53:02:8f:8b:16:cd:f6:97:09:56:41:
b5:dc:13:eb:ee:42:f9:09:de:ec:50:68:03:17:d9:70:09:ee:
e5:a4:5a:1e:c7:0d:dc:00:0a:77:13:1b:94:21:6e:06:5e:5e:
3b:d1:94:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:54:37 2026 by rpki-client