This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: +f4ahd/RVynF81091NJOK/JC7qSRCAAbQruvD/GVvgc=
Subject key identifier: 36:C3:31:91:4B:9B:1C:B5:51:27:32:4C:49:EB:F7:8E:E6:A2:BC:2A
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019BF687A60F1976F89CCA7A32C2CC6A448C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 07B0
Signing time: Sun 25 Jan 2026 19:00:43 +0000
Manifest this update: Sun 25 Jan 2026 19:00:43 +0000
Manifest next update: Mon 26 Jan 2026 19:00:43 +0000
Files and hashes: 1: 2v9j4cmRBKthQd69OeXDYpcV_J4.roa (hash: JIWzi0oTuF2fjfMhf5T0o4dEjhsNJCahQ3YsDnDQF/k=)
2: hpn4nKhBKlsinaN3vVc_HD13KvY.roa (hash: bzhO685+Hi3OxhZho3Lpnq5Kf5KsQHXcp5yXWuPUGs4=)
3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: R7Elt+g542pR0M/v58Bxpi+fIF9T2H5yxtvHvb0NgkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:87:a6:0f:19:76:f8:9c:ca:7a:32:c2:cc:6a:44:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Jan 25 19:00:43 2026 GMT
Not After : Jan 26 19:00:43 2026 GMT
Subject: CN=36c331914b9b1cb55127324c49ebf78ee6a2bc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:9a:8b:99:fd:32:05:bd:2c:4c:b7:a2:00:
44:f2:a9:66:24:83:6f:52:07:38:2f:60:2f:23:0f:
69:1a:dd:09:c7:fd:e2:d7:f7:6e:0a:43:2c:4c:fe:
67:e9:2c:b3:a7:af:e7:19:76:c8:bb:0c:18:d1:39:
9a:9d:15:8c:e2:e2:32:d7:ac:10:64:7a:ca:23:3f:
08:0c:c4:b0:24:7f:b7:56:f2:50:55:99:ed:68:d9:
74:f5:5f:ac:b7:1e:ab:a0:24:93:09:9c:8e:80:12:
b8:0e:7d:e9:e8:70:f4:8c:2f:e2:4e:2c:e1:74:25:
37:5e:46:72:5d:e5:01:35:3c:23:0e:10:df:d1:60:
ed:ee:91:a3:0b:bd:4d:0d:50:0d:72:31:f8:bd:4c:
16:de:63:fe:8b:5b:a0:e3:26:e9:57:6a:29:6b:de:
d7:07:d8:a6:6a:eb:b9:0b:77:62:ce:ab:68:23:fd:
90:7b:ed:34:d6:f0:a2:d0:85:23:99:d4:fe:d9:6c:
bc:ba:e4:c6:a2:72:56:94:da:3f:83:a3:29:8a:7e:
5b:4c:bb:9c:0c:ec:b8:b9:0c:cd:9c:88:af:3f:a0:
eb:25:ec:85:26:e9:e8:27:3d:6d:37:06:72:07:c2:
d2:74:f4:47:72:cf:fd:be:d7:ae:ac:85:56:a6:88:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:31:91:4B:9B:1C:B5:51:27:32:4C:49:EB:F7:8E:E6:A2:BC:2A
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9b:d4:b9:9f:41:a9:08:07:44:dd:84:32:07:f9:56:c8:93:
b4:da:c5:f0:a9:94:3a:b1:8c:17:37:01:d3:7d:5a:65:40:c7:
25:80:eb:00:8e:d1:8b:17:83:42:ac:b1:e6:f3:a8:bb:28:ab:
51:de:54:68:9c:13:39:66:d3:03:95:93:c8:20:c1:9d:f1:42:
4d:0e:3d:f2:b9:58:3d:d4:1d:84:33:af:ae:95:7b:81:35:49:
a0:20:11:87:c8:31:e5:9c:d4:8f:8d:ee:03:4f:27:d7:bb:7b:
56:55:4d:65:a0:58:f2:30:15:ad:c6:cd:f3:c4:27:87:19:63:
c0:f5:ec:6e:db:d6:4d:7f:a3:5a:2d:18:44:92:c4:0c:82:5b:
24:87:5a:44:20:dd:bd:7e:e7:de:91:83:38:4a:49:e6:ca:fb:
04:1f:b6:54:63:8f:13:01:ef:ef:53:b6:cf:ad:99:7d:ec:56:
cc:1e:36:db:eb:34:de:26:59:0a:ed:59:7b:39:1a:a7:f5:18:
c9:d6:02:69:4b:20:be:77:1b:25:13:2a:1e:2d:9b:f7:41:7a:
e9:d9:c6:b8:42:51:70:7f:6c:4c:9b:1e:23:15:fc:40:82:59:
38:9e:cc:46:3d:85:aa:11:2c:00:a9:97:fd:32:69:65:b6:b1:
33:bc:f7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:59:59 2026 by rpki-client