This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: AU//61T8lKKCWnE5sUpHHPvtymoUGcHAb9A1VHRcwGw=
Subject key identifier: A7:B6:1F:27:21:F2:22:CB:4E:08:F7:36:92:E3:E3:62:A2:00:B1:E2
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019BF42C2308CFC3B246FBDC8C26D352185C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 0824
Signing time: Sun 25 Jan 2026 08:01:31 +0000
Manifest this update: Sun 25 Jan 2026 08:01:31 +0000
Manifest next update: Mon 26 Jan 2026 08:01:31 +0000
Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=)
2: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=)
3: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=)
4: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=)
5: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: HJs1ubUEF1bxsqs1/xAL/p5jkhO6UcZcbCUSaI0+8dQ=)
6: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=)
7: g1rCh6JOwkuyFx1RMKVRwzuU63w.roa (hash: i/ipa9GmfRXAeA2Xih2V+tPcO2aG20N/7/cUFxqZ3v8=)
8: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:2c:23:08:cf:c3:b2:46:fb:dc:8c:26:d3:52:18:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jan 25 08:01:31 2026 GMT
Not After : Jan 26 08:01:31 2026 GMT
Subject: CN=a7b61f2721f222cb4e08f73692e3e362a200b1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:89:7a:94:52:26:35:67:7f:e6:b3:c8:e8:00:
67:e6:00:79:63:e5:96:67:13:c2:3a:d8:1e:cd:bf:
5f:1e:60:b2:0c:5a:ee:dd:e1:9f:09:94:e1:9f:25:
7e:9d:7c:05:4b:50:4a:c0:20:e1:40:04:5c:32:45:
7d:8e:9a:ce:cd:13:a7:9f:50:f8:6f:3f:9c:00:a0:
7b:90:e3:af:b2:b9:f6:a3:65:84:19:08:7b:53:db:
05:34:82:a2:d4:53:c8:ee:20:0b:a1:10:7d:c6:f1:
7e:ae:bf:5a:33:11:de:fa:8a:48:9b:b3:85:cf:19:
4e:d0:ec:dc:74:36:8c:79:2a:44:5b:6d:01:2b:9b:
72:22:bf:60:87:2b:62:cb:18:a7:34:ba:c6:70:4a:
9d:e1:86:9c:1b:d8:d9:21:14:54:af:04:03:d7:95:
24:d9:59:78:94:a2:62:bc:c0:bd:c0:9c:31:77:df:
25:c6:89:be:f9:91:a0:c2:70:e3:98:a9:19:c4:15:
01:e1:ed:0f:7e:e3:f3:6f:3c:11:f9:94:37:3f:bf:
83:61:05:a9:ae:90:12:de:17:04:a9:04:cd:44:55:
2f:57:c5:43:f5:ff:79:74:73:0b:62:49:8f:72:fd:
5d:9d:72:78:37:de:39:57:e9:46:d0:15:10:7a:9c:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:1F:27:21:F2:22:CB:4E:08:F7:36:92:E3:E3:62:A2:00:B1:E2
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:db:5c:75:ef:8f:49:83:bd:68:ed:f6:48:d3:cb:71:b2:d3:
a8:17:c2:d7:d0:52:00:58:70:3d:ce:f9:e8:45:56:ff:8c:cd:
36:93:c6:bb:63:2e:14:81:79:6f:0d:0f:6b:ae:b0:b2:6c:de:
7f:fb:a0:b3:c8:e3:7b:c5:0e:1a:03:5a:b8:59:27:05:9f:f8:
87:00:e7:36:50:32:36:8e:38:c9:2d:f3:bb:c9:38:3b:27:c6:
db:55:3a:a6:a0:f1:aa:ea:9a:ee:ab:86:80:ff:f2:12:80:db:
0a:1d:e3:26:df:be:95:c1:3b:a6:66:93:82:b0:b7:ec:81:8e:
72:3b:92:e0:bc:09:27:ca:80:36:8b:ae:28:98:58:64:89:cf:
43:fd:a2:a2:a9:e0:2c:4f:e3:89:a3:31:39:b2:f0:bd:42:f9:
db:ff:4a:e4:4b:d0:c7:28:5e:05:8b:a8:4c:d9:cf:b3:7b:2d:
d1:91:e2:65:75:bb:fb:68:4c:16:e0:06:c9:75:a6:04:07:cf:
64:ad:98:ba:2b:e6:80:44:30:f3:93:c4:d2:44:1e:5e:48:91:
9a:60:cb:31:42:02:bf:e8:c7:43:46:09:bc:38:3b:2e:29:a7:
5c:fd:dd:d3:1c:15:8e:7d:57:73:ab:af:ea:c6:b9:83:bf:d0:
92:9b:c6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:38 2026 by rpki-client