This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: /Zq4o67QSBpgTI/cdC2b0pusJdDHMfcSoQdGfv6l2x8=
Subject key identifier: 15:10:56:AA:02:0F:CE:02:C5:15:4B:AA:DD:CE:64:62:D9:C3:4B:09
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019BF687A61B3305EDD782FEBE43645BFF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 136A
Signing time: Sun 25 Jan 2026 19:00:43 +0000
Manifest this update: Sun 25 Jan 2026 19:00:43 +0000
Manifest next update: Mon 26 Jan 2026 19:00:43 +0000
Files and hashes: 1: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (hash: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: Oz3+ofJw31h7wt9I/yOYJOwdIUjjatRqlUxgjw5KXlY=)
3: hKLFSPa0iW1XzBfLJaDMo84eA1s.roa (hash: eG/xoTfgyJqNAYNur30ZD0Z6745jjcEOMSTYh+3y+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:87:a6:1b:33:05:ed:d7:82:fe:be:43:64:5b:ff:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jan 25 19:00:43 2026 GMT
Not After : Jan 26 19:00:43 2026 GMT
Subject: CN=151056aa020fce02c5154baaddce6462d9c34b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:84:cf:a4:a2:f4:3e:c6:4e:70:5a:68:80:89:
45:97:76:2f:27:3a:7c:4d:86:30:e9:18:bc:2b:4e:
7f:4d:52:72:44:59:49:f3:87:1d:c4:da:c6:de:9e:
5e:89:03:10:2d:0f:8a:5d:e2:f2:ca:26:89:27:ea:
d9:eb:79:c8:01:77:8d:19:95:a8:f3:8c:cd:40:fe:
72:c6:2d:fb:46:95:40:9a:f4:57:23:64:11:5a:11:
5d:f2:f0:e9:f0:4e:5f:ca:63:4f:81:ef:58:98:f7:
02:dd:46:1c:f0:28:d2:56:2d:d3:b4:0d:b3:a4:a0:
6c:29:e2:f1:07:c6:78:bd:37:84:f0:e2:68:b1:66:
13:0d:46:69:85:9c:e3:72:6a:6c:09:87:33:bf:36:
c3:b6:f3:c3:02:2f:cc:ac:d0:c6:4e:0a:b9:7a:6a:
35:34:d4:75:1c:ee:15:06:63:d0:3c:a0:63:af:c7:
fc:fb:52:fa:e2:01:1c:43:08:fa:e5:7d:70:4d:60:
94:67:c7:9c:78:7d:15:12:34:cd:4f:b4:a9:35:c6:
51:f6:e5:f0:2d:3a:5c:03:2a:f3:e1:25:83:84:de:
af:22:1e:e3:9e:0f:36:9e:07:09:f3:6f:86:ad:3b:
b5:79:5a:fa:57:96:50:3e:8d:90:b7:c2:ee:be:9c:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:56:AA:02:0F:CE:02:C5:15:4B:AA:DD:CE:64:62:D9:C3:4B:09
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:52:e7:67:b5:6f:df:8e:4d:0e:ee:b9:de:1f:ba:b6:b9:47:
5e:a7:41:ea:06:5f:cf:7e:ae:e4:74:7e:ff:d7:f8:be:ce:dc:
a1:4f:1d:9b:d3:45:ee:0d:44:dc:3d:9a:75:68:02:31:62:dd:
a1:5d:49:ef:47:59:b4:75:51:04:f3:1b:aa:95:fe:3b:31:fe:
76:c0:e2:2c:c0:b6:f3:e5:a5:f9:37:d5:7b:e8:13:0c:de:2a:
2b:11:fa:65:6b:ea:09:60:a9:d5:4e:aa:55:3e:82:b5:52:c9:
03:6a:75:cb:bd:20:d4:5e:75:1d:09:16:7a:ab:c9:8b:45:ae:
0b:a4:c5:c6:5e:68:95:81:0c:64:a1:f4:4b:a6:5d:9a:1c:ca:
7c:72:9e:eb:22:8b:a5:f6:48:65:3c:e7:76:ea:4b:61:1c:36:
2e:94:38:27:d8:7c:5e:90:be:0c:01:5c:89:9d:38:ac:54:d3:
ba:8e:c4:79:46:dc:7a:26:7f:f3:cb:b8:dd:c1:a3:b2:7a:b6:
02:05:7d:80:b5:6c:89:85:f2:ad:48:9f:62:77:47:c0:dc:a6:
9e:e0:10:38:b6:8d:ba:49:14:11:61:9b:a9:52:c6:da:1e:a3:
5f:ab:84:66:a1:9c:c0:2e:a4:27:9f:ab:22:2c:bd:f0:5c:9a:
60:14:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:47 2026 by rpki-client