This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier: l4DwsWcz0Esug9pJHT/L5S+awgWvWU6N9cQSf97sQJQ=
Subject key identifier: 79:00:97:84:F0:99:56:28:75:DC:1C:94:8D:EE:94:1B:2B:8A:C5:77
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 019BF5075143BD9107E79178FCA9E4018A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number: 17ED
Signing time: Sun 25 Jan 2026 12:00:55 +0000
Manifest this update: Sun 25 Jan 2026 12:00:55 +0000
Manifest next update: Mon 26 Jan 2026 12:00:55 +0000
Files and hashes: 1: 01DTvRDJh5LAMewuiaxq8ihTWOw.roa (hash: 873+VYTyzWaUqkJstRwODHvpIJL6rDoaYBv6eGv0Qo0=)
2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=)
3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=)
4: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=)
5: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: VZHBAypKexLub2iuhG+A4bqNMJEFbwpZT9RLmhWoY7s=)
6: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=)
7: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=)
8: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:51:43:bd:91:07:e7:91:78:fc:a9:e4:01:8a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Jan 25 12:00:55 2026 GMT
Not After : Jan 26 12:00:55 2026 GMT
Subject: CN=79009784f099562875dc1c948dee941b2b8ac577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:24:c4:32:8e:de:78:41:95:71:0f:2e:46:
f3:5d:a7:ab:dd:23:54:8c:37:bf:3d:68:a0:21:9b:
d7:ee:5d:b7:61:b1:71:a3:b2:4c:d2:46:f6:9e:93:
0a:5b:c6:52:95:21:4e:36:6f:5d:75:79:7d:a4:f8:
38:0c:de:2d:51:1e:9f:ac:8f:d1:ad:bf:f5:55:1a:
6b:a3:c4:c4:b3:42:98:5e:eb:20:4e:36:52:34:38:
fc:42:4a:5c:2f:3c:9b:12:97:95:c3:73:4c:37:ed:
94:2d:c7:59:c0:fb:c0:03:27:9d:eb:d9:96:1f:91:
8f:5a:33:1c:b5:ce:85:4a:d1:ae:bb:b4:89:32:38:
64:b4:7b:08:e7:5c:c3:29:4d:72:3e:7b:f1:1e:7a:
6d:1b:fd:ff:7e:28:68:0b:6d:41:50:28:66:24:ec:
24:e2:97:81:8f:13:e6:ad:b3:0a:21:5c:ef:16:dd:
82:90:33:fa:49:7f:33:60:66:02:31:b8:de:0f:02:
b1:d2:a5:7e:92:7d:fd:6a:55:c8:86:7b:18:d9:04:
3b:c9:33:d4:a7:e4:86:48:15:98:92:17:54:a0:50:
6b:84:41:8f:55:21:d8:1f:37:fa:c4:bb:28:d5:6e:
00:b3:93:d2:3c:aa:4a:ce:a2:d9:8b:6e:16:bc:7b:
1e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:97:84:F0:99:56:28:75:DC:1C:94:8D:EE:94:1B:2B:8A:C5:77
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f4:e5:35:db:03:4c:e9:c3:5e:73:e6:0b:fb:8a:d5:ff:dd:
e8:86:8c:5f:4d:19:fe:63:6b:ad:87:c1:bc:d7:88:ab:65:ce:
2c:a9:c3:36:13:cc:f8:8f:e4:ac:a0:6e:b8:94:e7:96:7d:21:
35:a4:7e:82:6d:71:44:bd:22:d8:9a:c0:2b:7a:11:fc:7b:9b:
4a:47:74:1f:30:08:7c:e6:63:5b:2b:e1:a8:d0:e7:74:b9:51:
ff:50:95:91:59:d1:62:63:c6:15:8d:d4:83:f9:2b:bf:50:4d:
5f:b0:88:f2:0f:44:28:e8:86:7c:a5:de:4b:f9:39:f9:9a:74:
45:73:58:85:c1:ba:6d:e6:df:56:fc:18:5e:95:6f:93:3a:fa:
95:1f:ba:f5:dc:19:1a:92:5c:0d:a2:6c:ad:d2:b1:b5:cb:f9:
47:43:cd:f2:44:44:2c:47:c7:11:68:60:2d:bb:40:17:68:fd:
24:22:c5:c5:23:2a:ba:de:ab:ca:dd:23:5d:02:05:dc:81:20:
bf:e4:ed:8f:d1:eb:74:15:75:6c:38:e5:3d:5a:f5:15:19:52:
48:9e:8e:43:77:dc:4f:7a:e9:c0:2c:39:15:50:29:73:98:d9:
81:ce:00:f2:0b:d3:13:7c:d9:40:9d:a9:0e:7f:d2:4a:4a:4f:
b4:d6:18:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1B1FDvZEH55F4/KnkAYpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk
ZWZlNzEwHhcNMjYwMTI1MTIwMDU1WhcNMjYwMTI2MTIwMDU1WjAzMTEwLwYDVQQD
Eyg3OTAwOTc4NGYwOTk1NjI4NzVkYzFjOTQ4ZGVlOTQxYjJiOGFjNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogskxDKO3nhBlXEPLkbzXaer3SNU
jDe/PWigIZvX7l23YbFxo7JM0kb2npMKW8ZSlSFONm9ddXl9pPg4DN4tUR6frI/R
rb/1VRpro8TEs0KYXusgTjZSNDj8QkpcLzybEpeVw3NMN+2ULcdZwPvAAyed69mW
H5GPWjMctc6FStGuu7SJMjhktHsI51zDKU1yPnvxHnptG/3/fihoC21BUChmJOwk
4peBjxPmrbMKIVzvFt2CkDP6SX8zYGYCMbjeDwKx0qV+kn39alXIhnsY2QQ7yTPU
p+SGSBWYkhdUoFBrhEGPVSHYHzf6xLso1W4As5PSPKpKzqLZi24WvHsepwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkAl4TwmVYoddwclI3ulBsrisV3MB8GA1UdIwQY
MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt
Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx
LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/TlNdsD
TOnDXnPmC/uK1f/d6IaMX00Z/mNrrYfBvNeIq2XOLKnDNhPM+I/krKBuuJTnln0h
NaR+gm1xRL0i2JrAK3oR/HubSkd0HzAIfOZjWyvhqNDndLlR/1CVkVnRYmPGFY3U
g/krv1BNX7CI8g9EKOiGfKXeS/k5+Zp0RXNYhcG6bebfVvwYXpVvkzr6lR+69dwZ
GpJcDaJsrdKxtcv5R0PN8kRELEfHEWhgLbtAF2j9JCLFxSMqut6ryt0jXQIF3IEg
v+Ttj9HrdBV1bDjlPVr1FRlSSJ6OQ3fcT3rpwCw5FVApc5jZgc4A8gvTE3zZQJ2p
Dn/SSkpPtNYYXw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:56 2026 by rpki-client