This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
File: 1mc4qNrawtDTrt25NPggBmufX-s.mft (raw, json)
Hash identifier: q3ZQpt/eMEMuRIfTeHa2aq5iJXB2ibp6Wck0hKHWTds=
Subject key identifier: 43:5C:BB:90:7B:E7:13:02:3C:15:F6:EF:4C:CD:59:22:8C:57:28:D1
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial: 019BF72D0C01B122C025606C369B854CD3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
Manifest number: 17EB
Signing time: Sun 25 Jan 2026 22:01:23 +0000
Manifest this update: Sun 25 Jan 2026 22:01:23 +0000
Manifest next update: Mon 26 Jan 2026 22:01:23 +0000
Files and hashes: 1: 1mc4qNrawtDTrt25NPggBmufX-s.crl (hash: ADIjehLxmpIHfmUbD97sDUQM6BFeQD5cbSq15ayWBbs=)
2: PvHMHD0aeuQ9T3MtfIs2XmJyQOY.roa (hash: EfRNqiHIBaBfAkezAxeKdTs07evzHPZKbuFa+2c+KMc=)
3: TIYeUVbpvuyDC2t31dkXKX77tpM.roa (hash: jq2yqV/pOREhu3bPBF+p4OSILcPoLvkCkURypiB0/n0=)
4: cOxS0E2XjVzTbopS5QPfLKjjtnk.roa (hash: mNaGGlEdJbAJ+qyD+c0RDVAtGl4B6iWrOcUapyB/UK4=)
5: pI-v5uJ1SgQhhfO7bCx9EJHVnoY.roa (hash: QNyQpokvQqLnIzlnj95bhIcxCT1zZNKDcQ4ODnYC8DE=)
6: rCFpqnF0TcjxMo0Y1C5GR4qc4ng.roa (hash: PMdlGjc9Af5sq4QJ2HwfDr1apnmai7YobB9Ga0B6v3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2d:0c:01:b1:22:c0:25:60:6c:36:9b:85:4c:d3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Validity
Not Before: Jan 25 22:01:23 2026 GMT
Not After : Jan 26 22:01:23 2026 GMT
Subject: CN=435cbb907be713023c15f6ef4ccd59228c5728d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:11:67:c3:52:99:be:5b:9e:7b:66:2d:6e:
89:b0:86:cd:93:80:7f:5c:36:a1:bc:2f:56:c3:1a:
12:14:b7:39:94:d9:79:df:e8:3c:a7:02:f3:05:a4:
aa:77:fe:54:d1:73:ea:4f:b9:73:24:4a:a7:6d:ae:
00:8c:4a:b4:20:3d:d2:c3:bf:a3:2f:a6:11:c7:f5:
09:35:94:11:17:53:a8:3e:c3:91:76:a8:32:02:12:
25:5f:50:42:79:48:2e:10:0c:a6:62:d9:f1:a1:5d:
2c:b7:79:b6:2c:05:0f:c8:49:fc:0f:76:52:22:00:
b3:db:01:9a:0c:98:9f:e7:73:d0:34:09:96:5d:42:
19:92:b5:ee:85:ff:c6:72:50:b7:88:84:ad:a2:0f:
fe:0d:08:9b:ea:f7:2a:03:de:1b:ad:19:45:67:1b:
e6:e7:98:a7:04:14:f8:d3:c9:e6:17:50:5c:99:e2:
6c:6a:b5:56:dd:bb:70:b2:8b:14:9d:f8:79:d6:4a:
e2:0e:ee:ca:3e:69:d7:42:da:c5:5c:29:b1:05:42:
ac:cd:4f:c1:2c:14:a0:d5:e8:bb:4e:58:de:fb:2e:
1a:0c:d1:50:91:ec:95:8f:02:11:46:97:74:be:3b:
62:29:77:63:21:02:b1:81:92:80:27:42:13:0d:2d:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5C:BB:90:7B:E7:13:02:3C:15:F6:EF:4C:CD:59:22:8C:57:28:D1
X509v3 Authority Key Identifier:
keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:86:4a:dc:fb:e9:9d:12:79:7a:06:bd:68:f5:03:b8:bf:41:
ca:da:f1:fc:b5:7c:8a:c7:26:7e:38:95:f1:69:03:54:4a:f4:
1d:c5:2b:87:ea:43:3f:f4:24:67:42:b0:b1:09:1b:ad:72:b1:
8b:a5:aa:a7:7c:4e:6d:28:d5:f1:51:47:38:45:b6:3c:10:48:
36:29:d9:19:51:ce:26:52:08:36:a3:31:96:0d:26:5d:3d:ab:
dc:59:93:a8:82:bb:c9:e4:ff:07:4a:9c:46:1c:a1:de:9e:36:
a6:5d:b6:ea:dd:45:7c:18:87:01:9b:00:4d:3b:cb:7c:44:ce:
a8:44:2f:68:e5:05:09:be:5e:5c:83:cf:fd:39:e0:45:f6:6d:
81:ca:bb:f0:0a:e5:93:c7:f5:df:2d:84:0c:bc:a0:24:6d:24:
ba:c1:7d:1e:73:03:6b:74:03:26:d8:f8:77:ad:1d:45:bd:f8:
e6:b5:ce:24:35:87:a0:79:cb:f9:73:f5:94:53:fd:ad:1f:38:
57:de:22:31:c4:5b:f5:d8:aa:aa:a5:f4:6f:93:f5:13:3e:78:
71:be:22:dd:8e:eb:dd:96:81:b4:da:15:a5:b1:6f:db:46:03:
1f:ca:41:54:a5:72:2b:2f:76:9c:b2:0a:3f:f7:36:60:3a:39:
b6:8c:60:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:31:59 2026 by rpki-client