This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier: c1c6zAqRgwW6/IbSdVsBD+rah7Xi2q2KURJnyZR5+Jc=
Subject key identifier: 16:04:A7:7F:11:80:EC:37:A2:43:94:A0:C0:A3:2C:EC:BD:E3:E7:E9
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 019BF574F3B7F048482F98867E1CEF236C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number: 1808
Signing time: Sun 25 Jan 2026 14:00:40 +0000
Manifest this update: Sun 25 Jan 2026 14:00:40 +0000
Manifest next update: Mon 26 Jan 2026 14:00:40 +0000
Files and hashes: 1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=)
2: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (hash: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w=)
3: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (hash: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE=)
4: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: NE1XCCa5z9WtJI9hAy++lYJOANMAJOThNUxQQQ3Oa8s=)
5: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (hash: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE=)
6: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (hash: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4=)
7: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=)
8: mWfbcxQdC8J-VBP4j7EBWfW3Qb4.roa (hash: osYbMfspLkdv49SbR62yA1rUcvBEuqW1/Mq+AH8uZCU=)
9: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (hash: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:74:f3:b7:f0:48:48:2f:98:86:7e:1c:ef:23:6c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jan 25 14:00:40 2026 GMT
Not After : Jan 26 14:00:40 2026 GMT
Subject: CN=1604a77f1180ec37a24394a0c0a32cecbde3e7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:52:fa:f9:af:f9:f3:fb:08:21:d6:ec:a3:
19:04:7c:d4:f6:4e:68:c9:05:43:71:ef:f5:8b:f3:
79:18:9a:f5:73:33:56:15:04:28:87:cc:7d:e9:56:
ca:15:b7:88:35:ab:eb:c0:e0:b8:c2:4a:bb:5b:45:
0e:1d:29:97:f0:42:ff:c9:cc:ea:5e:c1:bf:81:68:
2b:45:e7:3b:f6:55:29:08:1b:3f:aa:85:23:75:c4:
fc:9d:3b:bd:0c:5c:a7:6a:36:0b:ab:8f:12:9c:ab:
0f:e8:56:da:2e:d9:52:1b:3d:31:64:3b:d5:29:78:
bb:ac:26:0a:4e:70:d1:18:4e:1f:6d:77:90:c6:0e:
a7:12:24:da:0a:2c:75:9d:a5:2b:d0:09:c7:fe:49:
f2:1c:0c:47:8c:85:e5:b4:1c:71:ee:42:9c:bb:01:
35:d3:58:2a:95:7a:1d:7b:2c:66:f5:6f:67:63:85:
83:6e:5b:48:d7:98:f2:af:a6:14:64:c0:76:a2:13:
9f:09:9e:7f:5a:11:40:00:72:64:d9:e9:e6:0a:59:
14:c3:46:8d:72:b3:02:74:c4:a1:d2:8c:30:e9:2d:
b9:b2:a5:fe:6a:4e:e1:c5:af:1b:b2:f3:f4:c1:09:
63:0e:ab:c6:25:14:52:50:e9:29:44:87:f2:c7:60:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:04:A7:7F:11:80:EC:37:A2:43:94:A0:C0:A3:2C:EC:BD:E3:E7:E9
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:64:65:90:6e:06:32:09:a4:38:a7:f9:88:10:b2:39:2e:92:
87:a7:20:1f:9a:b6:25:5f:d5:4b:87:7b:ba:b3:cb:e8:28:84:
19:dd:63:98:cc:7b:2d:d4:90:a6:45:3f:cf:f4:9e:95:00:f1:
19:36:a1:40:ef:57:b1:2a:59:31:2f:f7:28:59:8d:83:24:10:
82:74:59:5d:f6:18:bb:b6:74:96:db:16:6e:11:f2:c1:53:9e:
ac:99:99:73:31:f8:1a:94:4a:d1:2a:a9:9a:c7:9c:2a:d8:a4:
53:a2:4f:67:ff:47:be:b2:bf:ac:50:68:77:6a:c6:eb:d3:e5:
4d:d5:04:48:ca:b7:44:93:c7:51:c1:d5:4d:56:8c:4a:97:94:
c6:b0:b6:2a:7b:87:b4:50:5a:ff:c8:33:10:35:70:65:cd:6f:
19:55:66:56:34:43:8a:88:54:4a:e3:ec:4e:1f:1c:29:6a:f6:
a8:ad:5c:18:49:a8:5c:ec:42:f7:a3:8f:e9:d7:9c:27:5f:eb:
ff:b6:37:f8:f3:4b:72:aa:5a:43:a5:4d:1c:5d:1c:a8:de:2e:
23:3a:0e:f7:be:da:cd:e7:49:26:9d:26:15:49:38:10:4e:64:
0e:30:c1:bb:0a:1a:62:e6:0b:56:d4:b7:0e:0f:83:62:cd:96:
36:2e:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:45 2026 by rpki-client