This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File: 484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier: yjs5NGqdLlAttDJAqHWFVjqSHimyjE0yP/DTkjGrQsg=
Subject key identifier: F2:A5:55:44:AB:80:DE:6C:CB:93:E2:31:84:FF:64:2B:61:94:43:3F
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer: /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial: 019BACEF1B1CE7D12DC2EE0D8EC5395CED10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number: 0E55
Signing time: Sun 11 Jan 2026 12:01:49 +0000
Manifest this update: Sun 11 Jan 2026 12:01:49 +0000
Manifest next update: Mon 12 Jan 2026 12:01:49 +0000
Files and hashes: 1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: 9VSkworFfjlhdTx2YIDkqTEKqVN1lof8eh8D8C/fPL8=)
2: Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa (hash: ClUudBc4gF5lYIHf+aYM1gznaI2Os4gu/iEuZ8iqJzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 12:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ac:ef:1b:1c:e7:d1:2d:c2:ee:0d:8e:c5:39:5c:ed:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Validity
Not Before: Jan 11 12:01:49 2026 GMT
Not After : Jan 12 12:01:49 2026 GMT
Subject: CN=f2a55544ab80de6ccb93e23184ff642b6194433f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:fd:96:3c:df:1c:0a:6b:be:77:09:28:ba:
ab:a0:16:ed:2e:7b:e6:d4:fb:bc:57:6f:04:af:61:
9c:ee:a8:7a:62:47:23:2b:b3:8e:59:31:af:04:9e:
d6:d8:6f:91:1e:56:c4:5b:47:67:c6:a6:4c:dd:3e:
3b:8e:37:53:a9:d0:35:30:31:c9:9d:a7:50:2d:c4:
fd:96:c1:6d:0a:db:30:06:83:30:01:50:0d:17:70:
f1:ad:70:f6:b5:c0:81:a1:f5:a5:ac:b8:98:4b:83:
aa:c8:90:8a:38:e4:36:ac:9c:e4:fa:18:18:72:fb:
7d:0d:aa:fb:04:00:52:f2:f1:22:97:9e:ed:cb:e3:
67:67:5d:86:2d:b8:eb:d4:cd:ea:d1:ba:1e:aa:22:
ad:92:34:cb:e5:86:fa:21:46:08:11:0a:82:cb:aa:
ce:44:f6:df:9c:e5:f8:23:e2:a3:97:a6:f1:0b:8e:
c5:b4:73:ba:2f:4b:03:c7:01:db:8f:8c:2a:6f:96:
f2:92:fb:40:bc:53:ae:f3:62:05:15:90:ba:ff:19:
19:63:57:98:98:38:1c:1e:c6:c7:b1:a2:5d:4d:80:
ca:6e:ba:34:3b:9a:e9:31:29:d1:15:47:c8:e4:15:
9c:cb:9f:18:19:cf:0e:50:d6:ae:5d:a6:2f:ff:b8:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A5:55:44:AB:80:DE:6C:CB:93:E2:31:84:FF:64:2B:61:94:43:3F
X509v3 Authority Key Identifier:
keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:30:83:df:63:8e:0c:8c:c9:d3:d1:e8:4f:8e:7f:f4:7c:5d:
e8:cd:33:42:2f:91:11:19:72:b7:6e:aa:43:15:0a:fd:22:48:
20:35:41:cb:78:41:66:72:db:d5:95:15:69:7c:d8:7f:1d:92:
61:1f:da:d3:69:12:a6:84:61:b2:31:51:79:30:42:69:34:a4:
c5:73:d4:6c:ea:f7:61:56:4f:a3:70:bc:91:93:e6:13:9a:bd:
0d:dc:ad:a9:0d:b9:2c:36:f5:a5:24:4d:75:67:1c:20:69:2b:
b5:d4:6f:06:a2:ce:54:5c:35:5d:f3:30:ca:c1:09:0a:b1:a3:
0a:36:4d:a5:99:5b:b0:7b:cc:17:fa:ae:6e:a3:85:01:2d:fd:
0d:b3:3f:7b:5d:c3:01:ec:a6:29:50:2f:ae:64:17:79:2f:f9:
5a:be:dc:32:5f:99:7c:ff:98:6b:87:7b:9f:cc:8b:81:8c:40:
2e:47:61:43:4c:0b:24:67:49:69:ea:8f:25:50:a4:d3:58:c8:
31:83:9f:4c:86:cb:bb:94:1c:82:c5:95:f3:a4:ee:aa:04:19:
b1:42:c0:0c:aa:b3:a3:f5:88:16:1e:10:24:cf:cb:b4:3e:7d:
d1:c8:4c:d0:06:42:80:07:4f:ce:bd:67:92:de:f9:56:59:3e:
ea:d3:a1:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZus7xsc59Etwu4NjsU5XO0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzY2UwNjlkZmM1YjYwODg3NmQ2NDI0YTMyZTc4M2E5OGE5
MmVmZjIwHhcNMjYwMTExMTIwMTQ5WhcNMjYwMTEyMTIwMTQ5WjAzMTEwLwYDVQQD
EyhmMmE1NTU0NGFiODBkZTZjY2I5M2UyMzE4NGZmNjQyYjYxOTQ0MzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjP9ljzfHAprvncJKLqroBbtLnvm
1Pu8V28Er2Gc7qh6YkcjK7OOWTGvBJ7W2G+RHlbEW0dnxqZM3T47jjdTqdA1MDHJ
nadQLcT9lsFtCtswBoMwAVANF3DxrXD2tcCBofWlrLiYS4OqyJCKOOQ2rJzk+hgY
cvt9Dar7BABS8vEil57ty+NnZ12GLbjr1M3q0boeqiKtkjTL5Yb6IUYIEQqCy6rO
RPbfnOX4I+Kjl6bxC47FtHO6L0sDxwHbj4wqb5bykvtAvFOu82IFFZC6/xkZY1eY
mDgcHsbHsaJdTYDKbro0O5rpMSnRFUfI5BWcy58YGc8OUNauXaYv/7iAoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKlVUSrgN5sy5PiMYT/ZCthlEM/MB8GA1UdIwQY
MBaAFOPOBp38W2CIdtZCSjLng6mKku/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYt
OTA4MTU0NWY1NjkxLzEvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81NWFlMmQtMzdhMi00ZjY3LTk1MTYtOTA4MTU0NWY1Njkx
LzEvNDg0R25meGJZSWgyMWtKS011ZURxWXFTN19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTCD32OO
DIzJ09HoT45/9Hxd6M0zQi+RERlyt26qQxUK/SJIIDVBy3hBZnLb1ZUVaXzYfx2S
YR/a02kSpoRhsjFReTBCaTSkxXPUbOr3YVZPo3C8kZPmE5q9DdytqQ25LDb1pSRN
dWccIGkrtdRvBqLOVFw1XfMwysEJCrGjCjZNpZlbsHvMF/qubqOFAS39DbM/e13D
AeymKVAvrmQXeS/5Wr7cMl+ZfP+Ya4d7n8yLgYxALkdhQ0wLJGdJaeqPJVCk01jI
MYOfTIbLu5QcgsWV86TuqgQZsULADKqzo/WIFh4QJM/LtD590chM0AZCgAdPzr1n
kt75Vlk+6tOhXA==
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:07:57 2026 by rpki-client