This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File: R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier: uegQOyvZPLBAR2Xg08qjZtcacMxxidDyUwc378wwWow=
Subject key identifier: 8D:3F:00:E3:5F:B5:D4:45:F1:A7:0F:4A:4F:8E:D2:FE:98:67:BB:F8
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 019BF5754778987BADDDBEE803E2FE8101DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number: 17FC
Signing time: Sun 25 Jan 2026 14:01:02 +0000
Manifest this update: Sun 25 Jan 2026 14:01:02 +0000
Manifest next update: Mon 26 Jan 2026 14:01:02 +0000
Files and hashes: 1: AFEWredyAjvqwTGptAJ8OUVB7P4.roa (hash: 2m1v01Idcr237fiGD0VAWcDdfdXlJYmgXEBaQhLhLnM=)
2: NDSds1zweD0ntatyUwleIAzeIJM.roa (hash: +ZrwYT4v0e9jZWWQ6oW4TJF+kc5mZHurMYfZvW1kcaw=)
3: NG0J62IT4TEYyBuMqKM6OpYG_0Q.roa (hash: 0M3OIOezZ3BNzW0tJgVErTfGfdQ/cL0eGWBKnFHK6bA=)
4: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: +rI1UwVQf8yQObhE/F9TZFA5qgdbiW+8+tdmmFLwGWQ=)
5: c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa (hash: 8oVfciD817bSEs2qpkUByGlM63u7F5Is6kgsu7Ks33U=)
6: eUCYKUszQzKLl5y0TD_e2TpUs_M.roa (hash: sXPTK8NFfl134JTfg8VQ0nOUGTnLwDMaXmy5yBYZ7ag=)
7: ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa (hash: BxYGaauFkfj9FqWYAmJGU+STO4UuDXKQhKUEiwoFjr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:75:47:78:98:7b:ad:dd:be:e8:03:e2:fe:81:01:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jan 25 14:01:02 2026 GMT
Not After : Jan 26 14:01:02 2026 GMT
Subject: CN=8d3f00e35fb5d445f1a70f4a4f8ed2fe9867bbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:d5:5f:85:82:b8:7d:a7:4f:eb:e0:eb:6f:
0d:8e:8b:c7:15:ac:15:c6:e9:20:7b:de:c0:0b:72:
1c:61:87:fe:4e:9d:42:91:7a:ab:d7:3f:87:27:ec:
ee:e9:89:68:b6:e2:aa:e5:2b:b8:da:ed:56:cf:2f:
42:63:11:3d:cd:69:9f:b0:cc:5e:83:d2:49:eb:8e:
ff:bb:48:79:26:b2:d2:ca:41:dc:55:bd:b0:05:82:
cd:43:eb:3c:77:9c:e4:27:1f:71:89:71:5e:b5:be:
18:46:be:40:6e:e5:93:61:4c:b1:23:d0:b9:39:18:
ea:65:8e:b1:46:87:70:c9:34:cb:b9:7c:3b:ee:e0:
7c:36:a5:de:d3:c8:7c:6f:b7:c8:55:e4:e5:d4:f1:
4a:87:a1:b0:00:2e:f0:5c:fc:fa:fd:52:a6:1a:cb:
05:76:ec:4e:22:40:43:3f:80:13:e2:dc:c4:9e:e4:
ed:a6:cf:a3:24:2b:c2:f6:d3:8f:30:b7:5a:45:9f:
22:e3:78:53:0b:4d:16:42:4f:86:67:93:dc:a8:07:
5a:92:a0:7b:a9:ef:4d:8d:32:27:cc:5c:02:c0:eb:
c1:12:f1:32:b0:fa:9d:e4:80:52:fa:98:84:dc:7f:
0c:d5:11:e3:fb:44:b9:9c:1b:59:10:c7:44:d3:78:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3F:00:E3:5F:B5:D4:45:F1:A7:0F:4A:4F:8E:D2:FE:98:67:BB:F8
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c4:e5:16:f0:68:4d:df:e7:58:0d:19:de:44:11:3f:1f:a0:
0c:f3:8c:63:cd:91:ab:37:4a:74:b3:3c:36:d0:7b:ac:f4:1f:
ca:19:5b:01:b5:cd:92:3f:15:04:98:2f:97:6e:10:30:5b:bc:
46:d3:11:cc:a5:9a:0d:4b:27:9a:d8:63:84:16:73:74:d6:2f:
be:6c:60:c4:16:79:cf:6d:b0:91:66:a1:83:f9:0f:f2:0e:d4:
ce:e8:e2:a1:79:e6:12:3b:5c:d9:09:12:95:92:be:23:d7:6b:
29:d9:9d:25:d7:e2:12:59:32:c5:fd:7d:96:f8:0a:69:3b:67:
bc:01:31:4e:54:69:ea:6f:55:3f:b5:31:cc:bc:fb:e4:2d:47:
a0:f7:a9:fd:19:a2:51:ee:1f:c0:ef:10:00:c6:66:65:e8:9b:
55:2a:8f:e3:6b:76:9c:98:11:53:87:f1:71:7c:14:18:79:8f:
95:65:15:20:5c:74:ae:4d:09:6f:6b:f4:78:11:8b:5b:85:de:
0e:aa:5b:8f:25:48:c6:63:e5:6e:f8:2e:80:3e:4d:db:07:69:
06:84:87:b8:f8:c9:d3:02:9b:c6:04:8f:97:8b:d3:84:0b:cd:
73:24:48:11:f0:b5:69:c6:a7:35:5d:0d:7e:36:b6:0f:8b:80:
0c:7e:1c:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1dUd4mHut3b7oA+L+gQHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl
ZDhjMWMwHhcNMjYwMTI1MTQwMTAyWhcNMjYwMTI2MTQwMTAyWjAzMTEwLwYDVQQD
Eyg4ZDNmMDBlMzVmYjVkNDQ1ZjFhNzBmNGE0ZjhlZDJmZTk4NjdiYmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmazVX4WCuH2nT+vg628NjovHFawV
xukge97AC3IcYYf+Tp1CkXqr1z+HJ+zu6YlotuKq5Su42u1Wzy9CYxE9zWmfsMxe
g9JJ647/u0h5JrLSykHcVb2wBYLNQ+s8d5zkJx9xiXFetb4YRr5AbuWTYUyxI9C5
ORjqZY6xRodwyTTLuXw77uB8NqXe08h8b7fIVeTl1PFKh6GwAC7wXPz6/VKmGssF
duxOIkBDP4AT4tzEnuTtps+jJCvC9tOPMLdaRZ8i43hTC00WQk+GZ5PcqAdakqB7
qe9NjTInzFwCwOvBEvEysPqd5IBS+piE3H8M1RHj+0S5nBtZEMdE03j88wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0/AONftdRF8acPSk+O0v6YZ7v4MB8GA1UdIwQY
MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt
YmQ5MGEzZjA2ZTE2LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2
LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8TlFvBo
Td/nWA0Z3kQRPx+gDPOMY82RqzdKdLM8NtB7rPQfyhlbAbXNkj8VBJgvl24QMFu8
RtMRzKWaDUsnmthjhBZzdNYvvmxgxBZ5z22wkWahg/kP8g7UzujioXnmEjtc2QkS
lZK+I9drKdmdJdfiElkyxf19lvgKaTtnvAExTlRp6m9VP7UxzLz75C1HoPep/Rmi
Ue4fwO8QAMZmZeibVSqP42t2nJgRU4fxcXwUGHmPlWUVIFx0rk0Jb2v0eBGLW4Xe
DqpbjyVIxmPlbvgugD5N2wdpBoSHuPjJ0wKbxgSPl4vThAvNcyRIEfC1acanNV0N
fja2D4uADH4cQA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:08 2026 by rpki-client