This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File: y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier: cMr6TO4EJBR/RLP9KkwYCjs/jDYz+JsO1qx7r2ngHts=
Subject key identifier: E5:72:FB:31:1F:99:DF:D3:6C:C3:8C:C0:2C:39:6B:45:74:5F:A0:17
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 019BF34FFC4E90F6997EF128B85A96B4E700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number: 17EE
Signing time: Sun 25 Jan 2026 04:01:03 +0000
Manifest this update: Sun 25 Jan 2026 04:01:03 +0000
Manifest next update: Mon 26 Jan 2026 04:01:03 +0000
Files and hashes: 1: A4xxaPve9Tl37Nxe_ipZ2zHzNzk.roa (hash: q18IfNQRgDd6SWAeQDYcxBtqV/xbknuTyluCS/qthw4=)
2: X0ojMkNeyFClUGlQvNWrEk9lhbc.roa (hash: Ii+YbydzlxoJvpnON4VwXJuJxN3e8pSyx1ELN6lSTl0=)
3: Yn3OZN3EcUwHW_rQBEJHvaTMrAE.roa (hash: RePVeO4sMrGJpgyq5iiNyaiVoc7kkkgyeSzxfnPI5mY=)
4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: 3C8IQnzFyrXGZJX7ivhsOaqlygvln+ghq8thnMh64F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:4f:fc:4e:90:f6:99:7e:f1:28:b8:5a:96:b4:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Jan 25 04:01:03 2026 GMT
Not After : Jan 26 04:01:03 2026 GMT
Subject: CN=e572fb311f99dfd36cc38cc02c396b45745fa017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:17:7a:7f:f2:24:a3:fb:fa:23:9b:03:d7:
94:3d:b2:11:d8:22:8d:bc:cc:79:34:43:e2:9a:1c:
22:d1:42:74:c2:fb:5a:78:14:c6:96:93:4b:9a:99:
9e:5c:ae:7e:9e:94:ec:8a:e8:26:33:50:27:e7:00:
10:cb:04:2d:37:12:82:44:11:34:4b:84:e3:aa:ee:
c0:73:b2:5e:f0:17:e9:88:4a:4c:f9:b4:44:af:ea:
86:66:5c:c4:f6:6e:0a:4a:f7:74:36:2f:8f:4d:fe:
55:ae:1c:c0:22:f0:3a:25:b4:4a:90:9a:12:8a:28:
65:67:6f:08:b4:cc:6e:92:40:d9:70:ee:bf:ab:77:
df:ca:06:8a:b4:e5:fd:1b:d3:75:2c:02:45:29:93:
c4:e7:49:9a:c9:59:97:40:4f:03:90:f9:0e:de:b8:
c9:4b:f7:d1:76:24:e3:8e:72:2c:c4:6d:41:68:27:
cb:f1:92:45:62:f7:3a:2b:eb:8d:b2:a5:56:fa:bf:
4b:0c:69:a6:85:fb:64:9f:a8:ef:04:44:c1:fd:55:
a4:cd:e2:0e:c6:d8:0e:f2:e6:aa:74:ff:6c:51:9c:
dc:1e:bb:3e:1d:8f:aa:98:f1:4c:6a:40:70:a6:21:
87:0f:72:2e:40:3e:6b:8d:b6:9f:1a:a2:5e:58:62:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:72:FB:31:1F:99:DF:D3:6C:C3:8C:C0:2C:39:6B:45:74:5F:A0:17
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:88:fc:e6:52:ec:2a:70:cb:9c:b0:79:83:f4:6e:23:b4:1b:
be:37:ef:bf:21:cb:4c:0c:6b:88:21:7a:5d:58:51:24:f1:9b:
8e:d9:81:83:17:11:5c:18:63:4e:6b:cb:be:6b:a3:02:21:f8:
8b:71:36:38:7e:af:fe:e2:bf:8b:36:e9:40:cd:c6:40:9c:87:
84:19:68:67:bd:32:f0:40:ee:e8:2e:f8:81:c9:ac:80:bd:2b:
78:0a:e2:db:95:98:89:06:34:e4:2a:e6:8c:02:1f:cc:bd:6f:
9e:05:d3:ff:87:01:7f:38:a7:49:b6:db:9e:d4:a3:46:ed:3a:
ef:5f:00:69:b4:9f:75:03:ad:ec:d3:b8:fa:4f:13:10:45:2d:
ba:d4:8e:e4:93:13:5e:9d:ff:30:1a:03:16:0f:43:e2:9e:0a:
7e:a7:fa:5d:b8:03:c4:2b:72:ae:83:5e:42:a6:37:13:27:80:
e9:d5:2c:00:c4:0f:fd:a6:3e:79:ba:90:e3:99:a0:7c:d3:98:
10:7c:d9:12:f1:86:6b:c3:16:34:50:df:35:ea:e1:b3:ef:98:
c2:ab:99:c0:29:5f:d0:ee:8d:db:98:fb:0e:0e:1f:70:03:db:
37:53:68:ff:e8:14:af:3c:93:94:0e:36:48:25:a8:18:15:a9:
21:60:0e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:30:14 2026 by rpki-client