This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
File: 0l7-VEtjV8f7woGy5BscsudD6Jw.mft (raw, json)
Hash identifier: A35MnmFxMQywrEyf6fWqBwQBKMOWO80j20z8ulL80uo=
Subject key identifier: 11:A8:75:13:D4:C7:07:F9:F1:D0:6E:F6:CB:98:6A:B9:E6:52:2B:DE
Authority key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C
Certificate issuer: /CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
Certificate serial: 019BF57552C5E97DED8A7227E99F2D0D8CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
Manifest number: 41
Signing time: Sun 25 Jan 2026 14:01:05 +0000
Manifest this update: Sun 25 Jan 2026 14:01:05 +0000
Manifest next update: Mon 26 Jan 2026 14:01:05 +0000
Files and hashes: 1: 0l7-VEtjV8f7woGy5BscsudD6Jw.crl (hash: 682IzgbExEHXPLrAYZCLEbDsrdDgkLHHYcQLBXhEieo=)
2: HYHPGDt2fjAgC47_M3DioNC03-E.roa (hash: cxx+e28mtQ/DOkAQ7RXQpszf/7Q5+36ijtIPOYGFO4M=)
3: LwR4VXrBpkRMHSbEFyenX6LXrCE.asa (hash: jVrxmc6svS9BB1rMG7dzIKPVWauhr47/OGDAYdAMkRY=)
4: QTLtDqEEsM_tlA6w6CJrYZAb75c.roa (hash: f/By1t4BWg4HCaNfNQT18viP9uwH0OR37HcliKJPeuM=)
5: b2VOFAnqw5bF8fvnjITcw0QPySc.roa (hash: p6e5jWlWStkGfYACB8q5Ip0Xm5alg3UPW1AjXMay8TY=)
6: h-9H8BvmwSMG-2kh1YXJYtXWY6Y.asa (hash: sCIUmJSoLok4G31DTxZhSpfZ1i35wAj3Z+H4d8mT8To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:75:52:c5:e9:7d:ed:8a:72:27:e9:9f:2d:0d:8c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
Validity
Not Before: Jan 25 14:01:05 2026 GMT
Not After : Jan 26 14:01:05 2026 GMT
Subject: CN=11a87513d4c707f9f1d06ef6cb986ab9e6522bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:5a:99:c2:20:44:cc:d9:93:0f:1a:53:33:
79:87:56:e5:dc:a0:03:77:0d:2f:9e:3f:f3:4b:e7:
b9:57:53:80:c1:5f:6e:05:7b:5d:82:bf:64:9d:51:
4e:b7:e5:15:a9:47:64:16:51:c8:6c:af:4a:2d:fa:
85:a8:15:f3:8e:24:87:c5:72:c1:90:be:e9:7a:35:
21:a9:d4:c8:ca:cf:ef:66:39:b5:e1:53:85:f7:be:
97:2a:da:ba:6f:a4:74:2d:33:fe:2a:df:7d:91:3d:
6d:a0:01:33:33:f5:d5:be:b1:5c:3d:76:e3:5d:6d:
e0:58:00:06:5b:72:09:4d:6c:1f:2f:3e:1c:e3:02:
ad:a5:88:16:df:35:35:06:f5:1f:8a:e3:ac:2d:ef:
e4:d7:4e:ba:89:7b:44:a1:39:bc:ab:7e:48:75:91:
fd:60:c4:25:18:1f:fc:14:0d:6b:4c:34:79:5e:42:
f6:b2:69:b8:66:d6:f9:01:59:ce:8b:20:39:d3:60:
43:80:5b:3a:a4:a8:73:95:68:1f:b5:71:a5:24:e7:
f6:f3:5c:d4:3a:c5:59:3b:47:50:58:d4:89:bd:69:
e3:27:94:db:4e:3e:14:29:0c:44:c9:ca:78:9c:5d:
6a:90:ba:a3:78:2b:50:ba:1c:c9:aa:af:5e:cb:5b:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A8:75:13:D4:C7:07:F9:F1:D0:6E:F6:CB:98:6A:B9:E6:52:2B:DE
X509v3 Authority Key Identifier:
keyid:D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ef:44:b5:53:bf:a2:b4:9e:46:be:0b:7e:ed:92:0e:a0:ec:
38:57:5e:c6:d5:5e:03:53:e1:09:6f:7f:56:fc:d6:c9:be:a4:
48:d9:2a:5d:86:7d:86:a6:68:4f:82:c7:9e:04:e0:3b:95:93:
18:43:7e:5c:dd:d0:ce:4b:fd:3d:33:58:ed:f3:f0:73:39:16:
be:a2:a7:5b:4e:4f:40:2f:50:bd:04:46:6b:fb:3a:ce:34:d6:
5b:38:4e:02:2a:80:ba:66:f7:79:53:94:59:d3:ce:b7:c0:dd:
ba:cf:4b:4c:ea:de:12:d8:a3:76:15:d3:8a:e2:4a:e3:d2:66:
09:58:ca:b8:84:e8:a4:51:6a:71:a0:25:54:bf:ee:bf:4a:3d:
57:72:16:fd:fa:c3:ff:ed:01:74:28:a6:25:b0:65:2f:63:10:
cc:da:a0:03:fb:1e:df:17:d0:f0:7c:da:a2:74:bf:ac:8e:a6:
e0:6d:d2:05:10:fd:0b:5c:40:90:21:52:77:71:9d:38:97:90:
19:7b:a3:d9:62:03:6c:29:b5:7b:a8:b8:53:8d:53:cc:63:0c:
b2:57:49:75:92:1e:b2:da:46:fe:78:d0:14:cc:9d:d9:57:10:
5f:45:f4:8e:33:57:4a:c0:30:2c:26:69:28:84:d4:d6:d2:42:
76:99:cb:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1dVLF6X3tinIn6Z8tDYysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWVmZTU0NGI2MzU3YzdmYmMyODFiMmU0MWIxY2IyZTc0
M2U4OWMwHhcNMjYwMTI1MTQwMTA1WhcNMjYwMTI2MTQwMTA1WjAzMTEwLwYDVQQD
EygxMWE4NzUxM2Q0YzcwN2Y5ZjFkMDZlZjZjYjk4NmFiOWU2NTIyYmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L5amcIgRMzZkw8aUzN5h1bl3KAD
dw0vnj/zS+e5V1OAwV9uBXtdgr9knVFOt+UVqUdkFlHIbK9KLfqFqBXzjiSHxXLB
kL7pejUhqdTIys/vZjm14VOF976XKtq6b6R0LTP+Kt99kT1toAEzM/XVvrFcPXbj
XW3gWAAGW3IJTWwfLz4c4wKtpYgW3zU1BvUfiuOsLe/k1066iXtEoTm8q35IdZH9
YMQlGB/8FA1rTDR5XkL2smm4Ztb5AVnOiyA502BDgFs6pKhzlWgftXGlJOf281zU
OsVZO0dQWNSJvWnjJ5TbTj4UKQxEycp4nF1qkLqjeCtQuhzJqq9ey1tlWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGodRPUxwf58dBu9suYarnmUiveMB8GA1UdIwQY
MBaAFNJe/lRLY1fH+8KBsuQbHLLnQ+icMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDhiNDEtYmM2Ni00YTVmLTgyZTYt
YTgyY2JiYzczNjc1LzEvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZDhiNDEtYmM2Ni00YTVmLTgyZTYtYTgyY2JiYzczNjc1
LzEvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+9EtVO/
orSeRr4Lfu2SDqDsOFdextVeA1PhCW9/VvzWyb6kSNkqXYZ9hqZoT4LHngTgO5WT
GEN+XN3Qzkv9PTNY7fPwczkWvqKnW05PQC9QvQRGa/s6zjTWWzhOAiqAumb3eVOU
WdPOt8Ddus9LTOreEtijdhXTiuJK49JmCVjKuITopFFqcaAlVL/uv0o9V3IW/frD
/+0BdCimJbBlL2MQzNqgA/se3xfQ8HzaonS/rI6m4G3SBRD9C1xAkCFSd3GdOJeQ
GXuj2WIDbCm1e6i4U41TzGMMsldJdZIestpG/njQFMyd2VcQX0X0jjNXSsAwLCZp
KITU1tJCdpnL8Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:58 2026 by rpki-client