This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier: PLmzNE1GTx0Xpx/egcFgmk+xTecefOrBDkKnqWjy7s8=
Subject key identifier: D2:14:5F:7C:6B:DF:26:02:21:C2:81:71:36:26:2D:F0:B4:35:E4:A1
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial: 019BF4D11780CE6CAE18A54D481F9BEB9278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number: 12C8
Signing time: Sun 25 Jan 2026 11:01:42 +0000
Manifest this update: Sun 25 Jan 2026 11:01:42 +0000
Manifest next update: Mon 26 Jan 2026 11:01:42 +0000
Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: /uhvg7h0uSBEePnEkcqYJsxxfHlNuIev+Lyzmjau8AE=)
2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=)
3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=)
4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:d1:17:80:ce:6c:ae:18:a5:4d:48:1f:9b:eb:92:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Validity
Not Before: Jan 25 11:01:42 2026 GMT
Not After : Jan 26 11:01:42 2026 GMT
Subject: CN=d2145f7c6bdf260221c2817136262df0b435e4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:60:12:b6:3b:ca:31:25:f1:6b:bb:3d:09:
a0:65:ed:7f:7f:9a:fd:6e:a2:d4:91:6a:a8:46:ee:
5f:68:65:21:f2:be:43:0c:19:28:d5:69:0a:ba:a3:
09:e4:c5:fa:78:76:8d:51:9f:cf:22:25:58:1f:94:
39:f6:c1:07:fc:ae:0d:3a:06:07:6b:b3:84:f2:60:
d5:65:ed:a3:12:d5:13:ef:8b:78:a9:a4:48:49:69:
ba:34:76:f6:c1:21:b1:0e:51:59:5f:ed:9d:3a:35:
83:25:10:00:fd:51:9b:ce:15:bd:2d:87:fa:fa:82:
74:b9:45:ce:2c:26:11:a0:10:6b:4c:36:d3:f5:17:
d3:18:e1:f5:92:75:fa:b7:d7:64:41:67:f0:90:fe:
d2:10:c0:a5:b8:90:6b:d1:65:aa:1f:41:69:46:76:
e1:9f:e1:f6:d2:01:68:5a:b1:2a:72:e8:ec:2d:19:
7e:2c:0c:c2:73:08:06:df:38:9a:31:79:bf:26:25:
de:4b:2a:9d:a3:1f:02:2f:a6:76:23:54:1c:5d:96:
9e:cd:5e:00:0c:43:7e:10:93:6a:89:ba:8c:e3:e8:
b8:12:cf:fb:12:b9:b5:47:66:1f:93:6d:48:ca:0f:
58:70:24:04:fd:b5:8c:25:e2:75:a4:47:9e:9a:9b:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:14:5F:7C:6B:DF:26:02:21:C2:81:71:36:26:2D:F0:B4:35:E4:A1
X509v3 Authority Key Identifier:
keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ac:f1:35:c5:02:43:19:82:55:ff:e9:50:2c:4d:b5:f1:a1:
12:7f:79:d9:a0:10:fb:2a:e2:7b:15:04:e3:a2:0d:b5:82:4b:
00:44:0a:8a:4c:e6:68:6d:dd:62:ce:42:6d:0c:f1:2b:86:82:
5b:e5:ee:00:2c:65:f5:91:ce:c0:39:60:f2:4c:18:80:6f:a9:
14:ea:c4:2d:d7:42:5e:ca:66:76:69:04:47:52:fa:f9:b5:e9:
9d:c1:ff:60:84:39:cb:5b:90:2a:63:89:77:f1:cd:aa:36:b3:
22:0f:91:aa:7a:6f:9c:8e:31:c6:79:79:b1:89:57:94:ca:ce:
6e:15:18:7b:b0:fe:f4:82:73:d4:70:01:51:a1:28:b8:88:dc:
e0:de:ce:46:9e:4a:d6:eb:5a:de:79:75:72:25:54:82:52:88:
40:87:e2:47:fb:a6:e9:2b:b7:03:09:ee:9e:c2:0b:37:b9:f2:
b3:c4:ae:09:65:b8:5f:ea:04:f0:14:04:67:b7:11:7f:13:2f:
83:9c:44:5e:3c:d2:13:a0:b7:cd:31:78:63:b0:5d:de:e3:06:
72:41:9d:f1:83:c9:5b:76:dd:04:39:e1:1c:d1:51:83:0b:05:
f9:02:5a:cf:d4:3d:9c:cd:93:cb:3c:90:27:09:ef:e3:8d:04:
fd:93:40:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv00ReAzmyuGKVNSB+b65J4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm
YmNmOTcwHhcNMjYwMTI1MTEwMTQyWhcNMjYwMTI2MTEwMTQyWjAzMTEwLwYDVQQD
EyhkMjE0NWY3YzZiZGYyNjAyMjFjMjgxNzEzNjI2MmRmMGI0MzVlNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgFgErY7yjEl8Wu7PQmgZe1/f5r9
bqLUkWqoRu5faGUh8r5DDBko1WkKuqMJ5MX6eHaNUZ/PIiVYH5Q59sEH/K4NOgYH
a7OE8mDVZe2jEtUT74t4qaRISWm6NHb2wSGxDlFZX+2dOjWDJRAA/VGbzhW9LYf6
+oJ0uUXOLCYRoBBrTDbT9RfTGOH1knX6t9dkQWfwkP7SEMCluJBr0WWqH0FpRnbh
n+H20gFoWrEqcujsLRl+LAzCcwgG3ziaMXm/JiXeSyqdox8CL6Z2I1QcXZaezV4A
DEN+EJNqibqM4+i4Es/7Erm1R2Yfk21Iyg9YcCQE/bWMJeJ1pEeempuxyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIUX3xr3yYCIcKBcTYmLfC0NeShMB8GA1UdIwQY
MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt
N2NiMzQ1ZTg1NDFhLzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh
LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEazxNcUC
QxmCVf/pUCxNtfGhEn952aAQ+yriexUE46INtYJLAEQKikzmaG3dYs5CbQzxK4aC
W+XuACxl9ZHOwDlg8kwYgG+pFOrELddCXspmdmkER1L6+bXpncH/YIQ5y1uQKmOJ
d/HNqjazIg+RqnpvnI4xxnl5sYlXlMrObhUYe7D+9IJz1HABUaEouIjc4N7ORp5K
1uta3nl1ciVUglKIQIfiR/um6Su3AwnunsILN7nys8SuCWW4X+oE8BQEZ7cRfxMv
g5xEXjzSE6C3zTF4Y7Bd3uMGckGd8YPJW3bdBDnhHNFRgwsF+QJaz9Q9nM2TyzyQ
Jwnv440E/ZNAAA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:19 2026 by rpki-client