This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: hDnPy1Id26zTb+kgqGMjymO4ibsZuUd1gPP2bni86bA=
Subject key identifier: B9:9E:9C:C4:B7:59:65:D7:E3:34:52:FF:85:92:FC:FA:87:72:AE:1E
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 019BF688397FD7F9251B4A772E9F950E4563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 17F1
Signing time: Sun 25 Jan 2026 19:01:21 +0000
Manifest this update: Sun 25 Jan 2026 19:01:21 +0000
Manifest next update: Mon 26 Jan 2026 19:01:21 +0000
Files and hashes: 1: 36DzStGfXWJaTvy_DFt5js-qBkY.roa (hash: 8LA/a3S6Q/+rbVsFghMDCmBix0HHSJzG0POoZHw8My4=)
2: 9yn0ZWrwWlwVQcTY4DZrDaNSuqU.roa (hash: XESXJFfuiD+BaGLEcM4v4ajEMguCnVi9qwOcF7gca0c=)
3: E1fZi9ctnO61xdkwBdXsEigsazY.roa (hash: AfabkRw7EM5b0Hf4k7+LAG9L1ed9yMxYQaK/+/5IZY8=)
4: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: psdvFqDlAd4+mXwkWNFWfRd/uOs373NHXb5Mj7l3Ckc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:88:39:7f:d7:f9:25:1b:4a:77:2e:9f:95:0e:45:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Jan 25 19:01:21 2026 GMT
Not After : Jan 26 19:01:21 2026 GMT
Subject: CN=b99e9cc4b75965d7e33452ff8592fcfa8772ae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:4d:0f:4b:e8:a2:e0:f5:d4:d6:3f:c2:b4:
e1:d4:a9:ed:bb:0e:5b:87:70:43:06:a6:ff:4d:6e:
4e:55:c2:eb:95:13:92:86:a1:de:4c:64:60:be:fb:
d6:6b:38:04:3d:fb:b7:74:d5:05:eb:be:00:5a:20:
5b:a4:a4:14:38:e1:bb:34:e5:06:ea:18:7f:d2:a1:
f1:a1:62:53:0d:82:09:92:e7:5e:eb:c2:02:93:99:
a1:e7:ea:05:ba:32:b0:42:1c:a6:59:22:aa:16:41:
23:b9:1c:86:6f:3a:85:ff:06:ae:d3:90:12:43:55:
4e:c4:cb:2e:bc:f9:bd:46:f7:84:ee:4f:88:ee:a9:
be:55:18:c2:a5:8a:c3:52:f2:53:d7:3f:06:17:dc:
33:dc:3b:7f:8f:32:fa:36:88:12:0e:03:a3:f8:90:
24:40:d2:bb:ed:8a:c0:88:d1:68:44:36:05:90:db:
2f:03:71:73:89:22:33:ea:cd:a7:7a:a4:ee:2c:56:
a3:3b:f0:05:88:df:82:1a:fd:54:19:ff:38:16:fd:
2c:cd:e0:e2:7e:86:27:b5:6e:28:be:01:c8:2f:00:
65:6b:d3:a7:55:30:ba:05:d3:02:9e:1f:01:a7:35:
b1:df:64:3b:e6:1f:48:c0:bf:63:0c:09:ff:b6:7f:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9E:9C:C4:B7:59:65:D7:E3:34:52:FF:85:92:FC:FA:87:72:AE:1E
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b9:10:09:6d:98:c0:cf:41:a7:f9:46:73:e7:2f:46:ea:26:
96:d5:a1:8d:73:b3:02:8e:d6:97:57:f6:1b:bd:2b:b7:1d:41:
2d:ae:cb:35:a2:7a:3f:2b:d0:04:43:6b:68:b2:23:8a:b3:6b:
28:32:d9:57:67:ac:43:43:2f:b4:7a:56:8a:97:e6:50:5e:37:
bf:0b:f8:2c:b1:17:35:7c:98:0f:11:d7:70:e7:97:4d:f5:7e:
00:15:56:ef:91:ce:78:bd:ae:16:ed:e9:5b:b4:70:ff:d4:23:
ea:d2:89:17:19:84:26:5d:37:d9:47:3d:56:1a:85:0b:76:56:
ac:bc:f8:43:bd:1c:cc:e7:ed:14:48:e9:1d:33:8e:a8:1b:fc:
23:5a:98:6c:7e:10:85:7c:a6:9e:57:1b:28:0c:d5:f1:cb:b5:
6b:92:55:be:97:6d:b8:4b:20:7e:94:ed:d6:09:aa:5a:2b:de:
1c:e6:fc:e0:a0:0d:79:c1:64:c3:cc:23:03:40:47:1f:af:13:
a5:82:ec:1a:39:b7:53:cd:4f:b7:3a:f0:69:e0:bc:85:37:fb:
03:3e:e3:6f:cd:d1:5a:c1:9a:cf:2b:42:52:7c:5e:77:f8:e2:
f4:85:be:96:12:d4:ee:24:f5:da:8a:ba:54:d4:17:e7:7c:fe:
1f:a7:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:25 2026 by rpki-client