This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
File: 19BnS9bwzJF1IZoyjIs5aCn2wK8.mft (raw, json)
Hash identifier: ZcHfPMqDpEqvUbsVLUGI9kxVZiqf9/kyY/vGCP+bezU=
Subject key identifier: D1:93:1A:77:63:DB:CC:25:C7:81:30:B5:7A:F0:1E:32:A7:1E:46:3D
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 019BF3BE0699F31674A351CEC4D3F44F889D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
Manifest number: 0924
Signing time: Sun 25 Jan 2026 06:01:15 +0000
Manifest this update: Sun 25 Jan 2026 06:01:15 +0000
Manifest next update: Mon 26 Jan 2026 06:01:15 +0000
Files and hashes: 1: 19BnS9bwzJF1IZoyjIs5aCn2wK8.crl (hash: 6X4nhdaTg/o9hU7H8NYXR1x0xqeLwrry5pX7pWih92U=)
2: Nd0XqWksF4g_Q2qscPQwX1SX7f8.roa (hash: zmUzBEXw7msOBYr3VGkxq3D1/a+XrxaT8Frd+PDSbhs=)
3: b5B5fVg5JQFI93o_bkGxYqBgTcA.roa (hash: KxD2Oza9P8EtKAvqi17xlL2B0ma0zo5mB3KiOChLdyg=)
4: oE6r51K-Hn36jEQK9rwYznVcluY.roa (hash: ktgHZDZ0XBs6bzgGz/KVT3sjiszOsWQkRn5c+F0Z0G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:be:06:99:f3:16:74:a3:51:ce:c4:d3:f4:4f:88:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Jan 25 06:01:15 2026 GMT
Not After : Jan 26 06:01:15 2026 GMT
Subject: CN=d1931a7763dbcc25c78130b57af01e32a71e463d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:d9:b5:9a:94:98:76:05:e9:ed:ac:66:ee:
ec:da:83:7f:4e:91:86:34:26:d3:42:6e:9b:f0:62:
b7:88:eb:9d:58:57:b5:c6:9c:9d:91:8a:ca:79:00:
c4:e9:cc:ff:5c:bb:89:93:8d:63:e4:83:96:b4:2c:
85:89:31:d4:9b:e8:92:0e:18:d5:60:46:82:43:b5:
01:83:20:e1:7f:e2:0e:6d:0c:33:d4:67:69:3f:b1:
cb:48:60:6f:75:04:52:13:b6:b7:3f:72:e5:1e:98:
04:ac:23:05:01:01:b0:c7:bd:d9:27:fe:8b:08:3f:
fd:8b:a0:9f:09:e9:c2:d0:c8:33:3e:0b:34:7e:c5:
19:95:44:22:0b:ac:b9:dc:db:ca:90:9c:e9:f0:ef:
cd:40:35:35:61:1f:d4:69:91:96:c7:87:cb:75:45:
97:3e:51:d3:fa:74:4e:c6:7c:49:96:c1:ea:ef:97:
e0:8d:77:c4:be:be:56:49:1a:b1:61:eb:31:dc:e8:
27:fb:d0:dc:77:31:ee:84:e9:e6:3c:ca:99:c7:04:
17:a2:dc:ee:df:8e:fd:06:fc:19:7c:42:d3:e2:99:
a8:70:9e:37:c1:2b:92:50:5b:3d:45:68:74:6e:19:
b8:03:da:63:57:ed:46:1e:74:b5:1f:61:ed:42:6f:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:93:1A:77:63:DB:CC:25:C7:81:30:B5:7A:F0:1E:32:A7:1E:46:3D
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:13:61:77:57:94:5f:3f:bd:f7:75:94:26:ca:9d:ad:12:c5:
c7:32:69:20:a7:80:20:7e:04:14:5a:fd:b6:09:aa:b9:e1:14:
d7:1b:69:44:3c:b8:63:ad:11:8e:d2:14:dd:6d:4e:41:7c:d2:
9b:60:0a:72:9e:79:01:29:47:1a:72:d5:df:4f:1b:15:9b:8f:
f6:53:19:ff:5e:d0:7d:e4:84:04:9b:91:45:24:f7:30:81:89:
d7:a7:6b:a4:81:96:c3:37:1a:da:91:0b:f2:4d:7c:0e:fe:b6:
60:51:34:24:e5:7e:15:e9:be:e6:e0:a4:16:0d:b6:24:c9:ec:
10:c8:c2:23:62:1f:66:74:76:c7:42:a0:da:97:3b:f3:d4:12:
e2:af:24:eb:47:87:5f:96:1c:7e:4b:eb:59:6e:fa:55:5c:72:
63:5e:a2:8a:b3:ce:c7:2d:86:75:ba:24:d8:22:cd:2d:e1:25:
76:07:59:10:54:27:b8:ef:59:4d:8a:b2:21:95:d2:a1:b1:cf:
2c:d0:f9:65:30:cf:13:6a:f8:77:3a:03:2e:a2:ef:cb:2f:64:
49:9a:b3:1d:bd:ed:88:7b:55:db:7f:bf:9b:79:76:bf:b0:1f:
ba:b6:f2:69:6e:18:cf:59:69:05:2b:36:82:2a:a8:cf:3d:d9:
a7:19:b8:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzvgaZ8xZ0o1HOxNP0T4idMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZDA2NzRiZDZmMGNjOTE3NTIxOWEzMjhjOGIzOTY4Mjlm
NmMwYWYwHhcNMjYwMTI1MDYwMTE1WhcNMjYwMTI2MDYwMTE1WjAzMTEwLwYDVQQD
EyhkMTkzMWE3NzYzZGJjYzI1Yzc4MTMwYjU3YWYwMWUzMmE3MWU0NjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BDZtZqUmHYF6e2sZu7s2oN/TpGG
NCbTQm6b8GK3iOudWFe1xpydkYrKeQDE6cz/XLuJk41j5IOWtCyFiTHUm+iSDhjV
YEaCQ7UBgyDhf+IObQwz1GdpP7HLSGBvdQRSE7a3P3LlHpgErCMFAQGwx73ZJ/6L
CD/9i6CfCenC0MgzPgs0fsUZlUQiC6y53NvKkJzp8O/NQDU1YR/UaZGWx4fLdUWX
PlHT+nROxnxJlsHq75fgjXfEvr5WSRqxYesx3Ogn+9DcdzHuhOnmPMqZxwQXotzu
3479BvwZfELT4pmocJ43wSuSUFs9RWh0bhm4A9pjV+1GHnS1H2HtQm915wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGTGndj28wlx4EwtXrwHjKnHkY9MB8GA1UdIwQY
MBaAFNfQZ0vW8MyRdSGaMoyLOWgp9sCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2It
ODIzMmZhM2U2MjlkLzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iMzBlNWQtOGIzYi00Mjg3LTliM2ItODIzMmZhM2U2Mjlk
LzEvMTlCblM5Ynd6SkYxSVpveWpJczVhQ24yd0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERNhd1eU
Xz+993WUJsqdrRLFxzJpIKeAIH4EFFr9tgmqueEU1xtpRDy4Y60RjtIU3W1OQXzS
m2AKcp55ASlHGnLV308bFZuP9lMZ/17QfeSEBJuRRST3MIGJ16drpIGWwzca2pEL
8k18Dv62YFE0JOV+Fem+5uCkFg22JMnsEMjCI2IfZnR2x0Kg2pc789QS4q8k60eH
X5YcfkvrWW76VVxyY16iirPOxy2Gdbok2CLNLeEldgdZEFQnuO9ZTYqyIZXSobHP
LND5ZTDPE2r4dzoDLqLvyy9kSZqzHb3tiHtV23+/m3l2v7AfurbyaW4Yz1lpBSs2
giqozz3Zpxm43w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:22 2026 by rpki-client