This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: TVkXSa8nhDPxMeUwE+qwu/vpLVuJ64xBPZluoyixEaw=
Subject key identifier: 7F:27:F3:56:42:A7:22:03:59:71:C2:20:FA:62:28:C1:8F:36:9A:D6
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 019BF3F4A8E270F9D9A32A6D69E011748F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 075D
Signing time: Sun 25 Jan 2026 07:00:55 +0000
Manifest this update: Sun 25 Jan 2026 07:00:55 +0000
Manifest next update: Mon 26 Jan 2026 07:00:55 +0000
Files and hashes: 1: 8X-KoCS_CU8kURq_ZAZXVIOmK14.roa (hash: SJRCGCTLI7qRzpMlBdPbpnoh4a93nmWJa23zttRgkJI=)
2: ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa (hash: 4mAnuGZm3yJjfvM0MnpTHsToaK6IwB9ToRFiX7Ssoj8=)
3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: GlEl8N5ysPwnTNF+MOhhCfxyMlRwpu6LZkNZ2lOQrUI=)
4: f9BVLAip7ndiLMIkBamn3zQu3IA.roa (hash: 67NYj05lmXLMB7WB8zJUBcnZzB3Nm/KReJjNyPG8c+o=)
5: vbJFubKoe57vVKHqUA-HZghNpIw.roa (hash: YCX9UsXniCoP5xRmTzYMDDvpToHqW+Wl+uPQWMRLB04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:f4:a8:e2:70:f9:d9:a3:2a:6d:69:e0:11:74:8f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Jan 25 07:00:55 2026 GMT
Not After : Jan 26 07:00:55 2026 GMT
Subject: CN=7f27f35642a722035971c220fa6228c18f369ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:7f:f2:5c:98:63:56:7d:52:a9:16:d8:ee:
50:86:d1:b2:31:51:d1:67:ad:9b:6a:46:dd:30:64:
0a:77:42:f6:2c:06:8c:53:e3:77:f9:5c:9e:40:a8:
c1:9f:1b:97:64:ec:2e:16:9f:7f:b4:e6:34:0d:c3:
c8:b2:1d:9c:c5:7b:5e:ca:ab:9b:aa:ba:16:6a:5a:
d1:c4:1d:60:0d:b7:b1:b1:25:04:0c:67:17:48:57:
59:91:9b:98:ba:56:ce:2b:0a:31:72:48:94:59:b1:
0b:45:f4:b2:a6:87:cc:96:82:1c:21:ed:2b:d6:a3:
a4:7a:cd:39:51:21:c8:3b:cb:d7:3d:17:73:28:74:
18:5d:ca:82:55:8d:92:6d:ea:8c:68:35:17:47:ec:
2f:85:ed:48:e6:75:aa:f7:c8:fe:56:2f:68:89:c7:
5e:50:eb:38:9b:38:69:03:fa:98:f3:6f:bd:19:ca:
eb:70:af:7e:0e:85:92:63:e7:32:01:bc:8b:07:db:
43:2d:b2:3b:0d:ef:d1:3b:76:a2:d7:da:c9:6a:ac:
e8:95:0a:a8:1b:40:1a:f6:1f:d8:78:f8:88:20:da:
18:fd:4d:cf:77:5d:25:19:ac:34:dd:38:22:cc:4e:
86:21:31:fd:f1:f4:a7:c7:7f:3d:ba:10:02:a1:a1:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:27:F3:56:42:A7:22:03:59:71:C2:20:FA:62:28:C1:8F:36:9A:D6
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:bd:80:58:8a:66:a9:d5:20:40:d1:3a:a7:eb:aa:2b:03:
a6:49:69:67:ea:ad:bb:72:98:bf:43:c5:ba:a7:d8:88:05:cb:
b7:45:38:b4:54:2f:eb:31:27:15:94:e1:5e:0e:e3:18:c7:87:
f5:23:b6:2a:cc:ad:b1:d0:4c:ed:e6:93:f6:47:38:8e:df:53:
3a:37:07:f6:27:3a:1b:aa:ee:c7:fb:87:5f:02:ab:51:9f:7a:
3c:c5:ab:c6:48:2c:2f:b3:e0:ed:92:18:ec:c6:99:02:d5:4d:
09:76:7d:b3:a7:52:0e:27:de:9c:a1:92:b9:66:a9:1f:86:02:
e1:ae:be:2e:48:e9:19:0c:c4:cd:54:da:06:1d:2c:0d:a6:23:
4a:40:78:36:7f:6d:df:1c:18:7e:73:1f:aa:33:cb:57:94:08:
f8:c7:4d:c7:9e:37:a8:8f:7f:33:f8:e4:e6:f3:76:09:47:b9:
f5:a1:56:2c:90:17:7e:25:1a:ae:63:fa:9d:3f:53:d2:88:0d:
28:dd:81:c6:1d:2c:c8:de:3f:18:fb:db:fd:90:3b:58:07:f5:
d3:a2:fc:1e:84:21:75:15:b9:59:71:7d:a1:17:2d:d0:79:f8:
72:d4:8c:44:0e:32:00:f4:bc:29:d9:e2:97:a4:ba:66:9f:39:
e2:85:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:43 2026 by rpki-client