This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: 2q9d71uY/s7MfUFeSCV9OmbyUTtdTaLixWKsIV7hgBY=
Subject key identifier: 08:1E:F0:9C:87:D9:7D:3B:BB:AA:13:D0:41:87:89:45:69:C1:40:D0
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 019BF79A4F5D2CF67E3842FFD39E9096FDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0C5A
Signing time: Mon 26 Jan 2026 00:00:43 +0000
Manifest this update: Mon 26 Jan 2026 00:00:43 +0000
Manifest next update: Tue 27 Jan 2026 00:00:43 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: kK3UzjKiou7Gl1Y8utD5oNzvESIljfIBGTRUlGXm3gI=)
2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:9a:4f:5d:2c:f6:7e:38:42:ff:d3:9e:90:96:fd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Jan 26 00:00:43 2026 GMT
Not After : Jan 27 00:00:43 2026 GMT
Subject: CN=081ef09c87d97d3bbbaa13d04187894569c140d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:6d:c3:50:00:5e:7e:65:7b:75:d9:51:b2:
8a:1e:8e:7f:b4:d4:84:19:82:10:41:5c:4b:3c:82:
a0:54:3c:b2:61:9c:23:1b:e2:e6:b4:6a:45:06:e1:
d9:41:6f:ef:92:3c:4a:51:b0:40:d9:73:23:cb:d7:
97:75:f4:b9:39:14:1e:b3:7e:82:c5:7d:f2:db:5f:
ae:c1:fb:6c:ab:6b:2d:6f:15:6d:b1:cc:dc:6e:81:
e6:6f:59:8d:2e:6d:20:fc:ea:5c:28:a8:63:76:7a:
8e:b1:9d:8b:bb:30:3a:13:eb:ed:9c:cc:d7:c1:4b:
63:25:63:79:90:ef:5d:49:a6:f2:ea:87:8f:27:b5:
7b:38:1a:e2:07:eb:bb:4e:2b:6c:c2:c4:8b:75:38:
53:9b:e2:c4:c2:a3:33:f8:b0:b6:13:1c:db:73:f0:
a0:e0:c2:50:26:59:8d:53:10:85:bb:fa:da:40:2f:
9d:c3:e8:d7:5c:2d:21:1d:4d:5f:1c:a9:3d:25:0d:
3a:23:75:21:81:b0:3b:d3:1e:12:f6:1a:2d:64:5d:
b7:4d:d1:b9:05:4c:77:39:d4:99:63:b2:88:06:9b:
cb:a8:20:35:ca:a6:09:1a:57:a9:18:c8:31:40:2f:
bc:9b:f1:33:ee:08:af:ce:cc:5e:70:25:87:ae:e1:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1E:F0:9C:87:D9:7D:3B:BB:AA:13:D0:41:87:89:45:69:C1:40:D0
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f9:b1:31:57:a2:1b:82:8d:dc:80:c3:e8:57:2d:4d:c6:0a:
35:32:c4:7c:33:56:21:d6:1a:18:0b:b9:be:5b:8b:c3:ca:26:
28:c2:6d:4b:c2:f5:0b:04:bf:6e:a7:22:93:90:3c:d6:56:e6:
b7:12:58:e8:d5:9f:38:e0:87:89:e0:87:65:fe:90:53:a2:79:
4c:74:8e:a1:4c:f6:e2:19:f1:2e:38:34:73:26:e0:54:08:08:
e7:b6:26:6a:60:c0:cf:90:d4:42:56:c2:29:fd:f2:3d:57:ef:
2b:9c:2a:9d:32:d6:d6:86:d3:68:cb:e7:be:8e:41:4b:a9:ee:
67:fa:71:07:a7:41:00:09:63:e6:bc:0f:9a:39:6f:7f:28:f5:
90:80:eb:8c:44:ba:d9:ee:cb:67:1e:e0:20:45:6b:11:e2:85:
6e:20:26:c2:77:c8:e8:41:34:4b:bb:fb:2a:ee:80:1a:96:08:
78:56:b2:12:51:35:22:c8:ab:3f:7a:dd:7a:2f:40:46:bc:72:
ec:b7:c1:6b:bf:9c:1a:11:d6:e4:53:b5:cd:3a:72:fb:6f:6e:
a8:bb:59:1a:6e:6e:08:38:69:dc:8a:b7:6f:f6:e5:5b:dc:1d:
00:13:38:e8:4d:e2:6b:11:0b:5a:4c:c5:43:32:63:97:25:06:
9e:d5:cc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:47 2026 by rpki-client