This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json)
Hash identifier: RsiEE9jxcenhXGPGqiColY7zlYf7ZgXc4Y2w3LBwwVg=
Subject key identifier: D6:C5:61:56:0A:CF:4C:09:05:A0:14:6F:69:BA:32:0C:8C:6D:BC:49
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 019BF3504FEAD7E5B1EC322388879EC84F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
Manifest number: 11CE
Signing time: Sun 25 Jan 2026 04:01:25 +0000
Manifest this update: Sun 25 Jan 2026 04:01:25 +0000
Manifest next update: Mon 26 Jan 2026 04:01:25 +0000
Files and hashes: 1: 0T_njveGDBox8dRnm6ptBU24SOE.roa (hash: MTvLZVcAf3FK4lXDgQihNVIFOil0UjLczM3XYj+vPwc=)
2: BWSIfeORL3ZaF98YJdEW_lwKSoo.roa (hash: O2KdoHsDXYMUXXkiHb3Ti5/HWYkXf5itDU8BQXurMDo=)
3: HfFxGJLVfgStnjkbuHPm0NlbD20.roa (hash: OTTBrtAbVcSgQpN0MQDDsHGVJuiE+QV/cGYKWbjIEu4=)
4: LYPFsLg-HHk-AH0q_znuAsebvZs.roa (hash: LQwpVZiG9LTd+JsGkTPK0EuyocYLkODDaDYcgGaoYoA=)
5: YHr6sMN1EVbEwUde6FetuHcueOA.roa (hash: 0BAOQ2lWNPhsH0gX4p/TlQYVZnjFg2uh0FOWf3CJEt0=)
6: _sN8yzKDKHcnVU5p49CbRL2H3ig.roa (hash: kgkv7xILeg1lxV+k1BaZVXsKuUZT1LhEAwckSMdm8JQ=)
7: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: sKTz1ahGE9NxrWeDabCz7NfcM4yRB1DncZfaOrV+5Fk=)
8: cr0AR-w_JWFamVAtdgkvTMTy1Qo.roa (hash: eKAgKSzUAMEtrHDrT7mnQsSII8a/h3K+YCAIf+FAWy8=)
9: d00ZvtrFum9P2Yp0ubsN6hUhmyM.roa (hash: 2Me5/G1Q2JvdBpJ4pZYv7LNj99NEpOku37A513+s49s=)
10: d50ryNf7AouleyVkV0KoPCj3Vbs.roa (hash: 8cb301Zu+uM5+wsIG5dakaifCIJcNQE2p9LiFv/55dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:50:4f:ea:d7:e5:b1:ec:32:23:88:87:9e:c8:4f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jan 25 04:01:25 2026 GMT
Not After : Jan 26 04:01:25 2026 GMT
Subject: CN=d6c561560acf4c0905a0146f69ba320c8c6dbc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:fb:2f:e4:0a:26:1d:58:97:d5:f5:8d:18:
bd:5e:b4:b3:fa:c0:19:be:48:2b:ca:5a:ee:24:9d:
e3:5b:ad:50:23:8a:bf:4f:6b:21:fc:34:1e:ba:df:
ad:fd:d0:f4:dd:53:80:4a:89:19:b0:96:b8:64:d2:
db:b2:b1:af:24:9c:21:4c:22:78:c9:d5:5c:5a:56:
1b:be:55:eb:4e:46:f4:e9:7a:51:ea:c0:77:7e:94:
11:6c:a1:5f:83:26:bf:37:5a:71:6f:88:47:fc:2a:
ea:b8:05:f4:6d:d1:51:82:ea:e5:dd:c6:b0:22:a6:
d3:7a:6f:64:1d:d0:28:9e:2b:c1:68:3c:c1:1c:84:
00:23:db:4c:74:0d:1a:78:00:29:e7:28:ce:09:85:
ee:4f:36:da:45:43:ae:01:cf:3d:dc:75:3c:78:87:
b7:42:7d:c8:c4:d7:8f:4d:7c:a8:c8:31:d2:7c:db:
42:fb:04:4c:23:2e:3f:86:d2:c4:c9:d1:b4:90:24:
d8:7b:aa:d6:4a:4a:70:75:cd:28:d9:9f:4c:45:a3:
1c:0f:4c:fd:fd:de:46:23:37:5b:dd:11:03:d1:7b:
00:42:10:7e:d7:4b:d1:e9:60:cf:27:76:f8:a1:cb:
5a:8e:2d:67:a5:1d:8b:85:a0:6f:85:f9:8f:1c:3b:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C5:61:56:0A:CF:4C:09:05:A0:14:6F:69:BA:32:0C:8C:6D:BC:49
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4a:23:0e:c3:6b:0a:2e:77:0d:05:26:07:f9:2e:ed:94:73:
8d:a7:13:b9:6c:09:0c:78:ea:2d:93:dc:70:b1:8f:12:f5:a5:
58:4a:84:56:5f:f8:d0:f2:93:87:8e:37:ac:e0:c1:e2:bf:46:
8c:35:b0:88:be:17:f2:40:b8:49:76:3f:25:58:69:7c:b0:84:
3c:27:d0:16:34:c1:34:46:fa:dc:0e:8f:a7:86:55:c5:f1:93:
cd:7f:6b:11:73:8a:5d:f3:fd:44:de:34:6c:13:da:ed:8a:c5:
dd:30:cc:aa:71:5d:e9:e3:dd:24:52:64:0a:66:34:d5:d4:4b:
b0:ac:49:f1:80:3e:b9:c4:06:c5:c2:87:96:83:91:de:36:dc:
95:40:94:10:67:55:12:60:6a:e8:a1:42:e1:9d:27:17:f6:25:
46:32:1c:3c:0e:4c:d0:51:02:85:6b:55:a3:15:cb:7a:4a:c6:
1b:ce:77:c8:17:87:de:c6:66:55:85:10:b4:16:d2:51:4f:df:
a5:2c:8c:88:78:d1:68:a9:39:df:8e:1d:a1:db:ea:23:79:40:
15:b3:b0:47:ae:af:6d:46:86:ea:21:c0:15:7d:b4:cb:9d:59:
94:38:98:05:f3:f7:3b:18:76:2d:f4:7c:0b:2f:74:85:23:45:
32:71:d5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:45:59 2026 by rpki-client