This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier: K11Aavx5zTs9dp+AXCGLaREumuy29Xci0GY80qhLpN0=
Subject key identifier: 0B:BE:5D:33:ED:2D:09:0E:05:92:D4:E8:7C:81:DE:06:8D:35:1C:E4
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial: 019BF5AC98902A4244E4B984ABE406E3CB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number: 17E9
Signing time: Sun 25 Jan 2026 15:01:27 +0000
Manifest this update: Sun 25 Jan 2026 15:01:27 +0000
Manifest next update: Mon 26 Jan 2026 15:01:27 +0000
Files and hashes: 1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: kXTodhGIduaxF3AapwZ7F6tF/7O7RkaGCndhcDSOffo=)
2: c4zkb26v95y_D2sc6nv7fdxn9Lc.roa (hash: bMZY04nBemF6cIkhBuUz9nxHZyNkGpj8Eh/OlRIxJ2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ac:98:90:2a:42:44:e4:b9:84:ab:e4:06:e3:cb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Validity
Not Before: Jan 25 15:01:27 2026 GMT
Not After : Jan 26 15:01:27 2026 GMT
Subject: CN=0bbe5d33ed2d090e0592d4e87c81de068d351ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:a7:f8:22:c2:a8:50:60:00:67:44:ab:d0:
d5:d1:2e:ac:69:f6:b3:b1:11:20:aa:15:ad:00:5e:
01:9d:4a:d4:e7:9d:96:4c:4d:2d:0e:78:11:19:41:
99:0f:fe:36:53:eb:e4:7b:2c:1a:4a:ef:9e:51:55:
fd:38:03:04:7c:83:c5:21:44:8c:85:e3:f7:04:b1:
67:22:30:0a:49:3e:d4:f1:d6:ec:fa:f1:9d:ad:85:
4c:7f:3b:21:58:1c:f0:51:ef:87:e9:15:71:93:f0:
13:56:da:c2:48:c4:eb:c5:93:9a:dc:29:95:eb:d2:
f8:e7:5c:6b:1b:08:b7:86:d5:64:eb:fa:4d:69:d2:
c3:1a:3e:2b:43:90:c5:33:47:42:a5:5e:14:f7:46:
59:c4:5a:f0:93:e1:4c:d1:fc:15:1d:81:59:c5:3a:
28:47:fe:d8:11:b3:21:e2:eb:9c:74:5a:96:4e:1c:
ae:2b:10:e4:6f:33:40:35:d8:48:fc:6d:16:89:62:
1c:88:c3:c9:df:52:36:f6:1e:05:44:03:25:62:dd:
c7:49:7f:a5:4e:c4:ea:db:2d:20:2e:89:e2:4e:24:
7f:08:40:cd:7f:4f:8c:99:c4:64:1a:55:1c:ee:a7:
2c:ac:b8:f6:4b:54:33:c8:80:c5:44:df:ee:49:8a:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:5D:33:ED:2D:09:0E:05:92:D4:E8:7C:81:DE:06:8D:35:1C:E4
X509v3 Authority Key Identifier:
keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bf:85:a0:77:a1:98:1b:f8:a5:63:3c:ea:8d:a2:d4:9c:e5:
21:bd:f0:48:67:90:e0:02:4f:e7:05:ee:a0:78:73:91:5c:f6:
c3:5b:0c:79:29:7d:99:20:52:e4:de:10:11:ad:ef:30:40:47:
69:d8:4e:c3:f8:26:a3:a3:43:ea:3f:39:85:ef:92:0b:fe:96:
c4:dc:1d:5a:16:0d:53:d1:7c:ab:68:49:e6:0f:13:9d:d8:1b:
10:9f:b5:7a:6a:ea:49:d7:32:20:cd:bd:06:98:a5:5f:a2:5d:
df:6f:47:e9:e7:74:82:2a:82:cf:19:17:d1:1c:bc:cd:39:ac:
1d:c6:78:42:d2:b3:4c:07:7c:ea:13:00:51:49:25:f7:80:d0:
6c:50:e6:ca:70:a3:87:ba:f8:d0:a5:17:b9:a2:db:92:ee:3e:
fb:32:41:ec:8b:c5:5d:63:8c:2e:19:98:43:e7:2e:cf:5d:0a:
45:b5:66:7b:a7:ee:0e:31:b5:62:3c:59:42:7d:6d:c7:97:8d:
0b:7c:cd:66:7d:23:b3:5f:71:11:0d:64:12:32:da:2c:bb:78:
43:23:70:a2:ea:e7:65:2c:70:06:1e:dc:5a:74:de:21:68:96:
71:61:92:a1:dc:5b:1b:c8:1c:5e:c2:12:d9:2c:f8:ca:15:40:
16:30:07:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:44 2026 by rpki-client