This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: 3LEHmwk5qv13nL4hJd456Jwl7XsDbwGfAXjnFHICGUM=
Subject key identifier: AA:90:52:ED:8E:0A:D7:09:DC:A3:28:DD:6A:88:75:90:0C:54:D9:C6
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019BF46315C8AFF2327FDB697525A1F4AE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 17E9
Signing time: Sun 25 Jan 2026 09:01:32 +0000
Manifest this update: Sun 25 Jan 2026 09:01:32 +0000
Manifest next update: Mon 26 Jan 2026 09:01:32 +0000
Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: u32km63dTMOu3vz7l5cjtQ+MQyHk2txidtyITjt9XU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:63:15:c8:af:f2:32:7f:db:69:75:25:a1:f4:ae:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Jan 25 09:01:32 2026 GMT
Not After : Jan 26 09:01:32 2026 GMT
Subject: CN=aa9052ed8e0ad709dca328dd6a8875900c54d9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:5e:cb:83:d1:3d:87:0b:42:a9:91:c3:16:
4b:19:80:8a:4b:48:f6:50:ae:79:15:b5:65:28:60:
da:e2:fc:33:35:ed:4d:a3:89:19:83:c7:3a:03:ea:
19:5e:94:ef:cd:9c:63:04:29:cf:f9:e2:d5:61:b8:
5f:c6:02:e3:f5:fb:6b:d6:dd:00:f9:7d:c1:eb:73:
f0:13:59:24:60:6e:4c:aa:12:54:4b:7b:7d:07:dc:
15:76:29:5c:f8:a6:73:ac:51:93:b0:65:c9:ea:e7:
34:61:87:8e:99:e5:7e:54:89:e1:9c:c4:9b:c5:ce:
1e:ca:9b:98:c1:c6:b4:1d:e7:30:3d:af:dd:81:86:
04:85:e2:a6:86:08:60:99:eb:83:8a:59:04:87:04:
e0:5c:d7:6b:5f:68:b5:fa:85:d0:a5:cd:9b:fc:02:
15:fa:ea:b9:9a:f1:b9:c3:59:2f:79:08:0a:dc:b0:
7b:1b:78:19:f7:c3:b7:32:67:eb:79:c2:90:1f:93:
24:b4:cc:3e:93:e2:40:05:e9:f7:2f:5b:ea:bd:87:
da:df:9b:c6:54:c5:76:93:82:a9:39:07:97:de:3f:
16:17:36:f2:ae:76:ba:fa:e7:a4:66:4d:72:04:25:
bf:66:e9:36:2f:ce:cf:80:8e:77:ba:e5:fe:2e:be:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:52:ED:8E:0A:D7:09:DC:A3:28:DD:6A:88:75:90:0C:54:D9:C6
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cb:aa:35:9f:c9:44:fe:6e:d2:6f:8d:ea:12:34:89:c6:73:
8c:1e:cf:6c:0d:da:b0:66:30:3c:98:d9:9c:4d:54:68:b9:01:
71:0f:24:cb:e7:a0:7b:a2:99:ad:fa:da:a6:54:d9:e8:2a:7f:
18:9c:8f:00:2a:1a:46:85:4c:5c:0f:f7:11:07:24:7b:62:c6:
10:e1:03:81:81:cc:a2:68:09:f8:39:ae:03:f7:b6:36:a8:b6:
15:b1:ca:bb:e8:59:9a:89:be:e2:cc:d7:f0:14:2a:24:0d:55:
b6:79:86:f9:d9:b3:e3:89:02:fe:c6:f5:f8:c0:26:05:ac:3a:
3b:9e:8c:99:c3:18:e4:73:42:12:37:ae:d1:59:fa:57:f9:ea:
99:42:af:08:38:b8:bd:e8:ad:f4:14:e6:14:4f:72:b3:53:a1:
fc:fc:f8:60:f4:72:b9:09:99:df:18:9e:fe:ff:13:37:cf:45:
95:9b:74:c4:2e:87:b8:0a:f5:ec:ad:c6:90:51:3b:e9:05:8b:
25:79:72:fb:ee:e5:c9:44:b6:3f:b9:c8:f4:40:f4:07:84:46:
df:6c:54:0e:fb:05:90:cf:e8:05:3e:da:e3:3a:54:4f:72:fc:
e8:62:07:b5:9c:1b:15:de:15:51:94:07:82:b1:d5:2c:79:59:
c9:f0:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:31:48 2026 by rpki-client