This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: IOwDE04yFRKBz0aQZ5HXkx6FgH8Jw+wQbvRLCIkOU8o=
Subject key identifier: 03:DC:DF:AD:3E:B5:90:47:E1:28:49:22:61:C3:59:B7:CD:28:A2:49
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019BF462D6C5ADE26080E6095C8CF4247AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 0250
Signing time: Sun 25 Jan 2026 09:01:16 +0000
Manifest this update: Sun 25 Jan 2026 09:01:16 +0000
Manifest next update: Mon 26 Jan 2026 09:01:16 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: b/Db3B273qp7dBECcauikY6IaYKugCGZfXFjr41qBD4=)
2: 8bmJkssiqMmgoFhVLjPuiVh-JXk.roa (hash: wsFMvOiuuz/DL1nPZTplboq3GQRPHDLxwfXC+j9gOCo=)
3: I_gjmgTGM8CnfZUno5dhPGOiuGc.roa (hash: 5ceNk4RXSeeZg8BwSNJjPp6dzFZDl3gaP/ZwPUk12h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:62:d6:c5:ad:e2:60:80:e6:09:5c:8c:f4:24:7a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Jan 25 09:01:16 2026 GMT
Not After : Jan 26 09:01:16 2026 GMT
Subject: CN=03dcdfad3eb59047e128492261c359b7cd28a249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:db:e4:90:e7:47:5a:f6:df:c4:01:df:bf:
a4:0e:38:ac:70:26:67:8c:38:74:af:ab:fa:69:54:
fe:19:eb:89:9c:1e:a8:6e:03:b9:42:d6:2e:ce:9a:
40:a2:52:99:a9:37:3d:df:96:53:eb:c1:d1:6d:02:
9c:1b:1b:92:5e:58:77:bf:dd:60:7c:fe:99:ca:7b:
b6:b9:e5:b8:d8:e4:fe:d3:eb:a0:47:da:1d:3e:fc:
b4:68:04:11:78:7a:1f:f2:25:c3:41:9e:e5:05:46:
c8:ec:a1:35:51:92:43:fe:63:ae:0e:5b:c4:c0:d5:
76:06:34:be:dd:44:ee:11:60:54:02:06:e5:3e:a4:
3f:2c:57:db:68:40:e0:f4:35:70:73:82:80:6d:27:
c2:2d:e9:1d:b4:d8:7d:69:70:83:02:08:13:bd:66:
3b:34:e2:bb:9a:f6:0a:ee:60:c8:54:c5:59:2c:df:
f8:06:e0:ef:03:c0:95:9f:55:89:de:44:b8:2a:8d:
f5:06:8d:b0:78:81:85:dd:81:c0:b3:91:f2:fb:77:
73:48:05:e7:0b:29:ff:a8:64:1c:28:97:5d:b0:16:
67:42:bc:9b:45:2a:fd:1d:55:94:a2:c0:e2:14:c4:
8e:55:9c:98:13:df:cc:c3:d1:8f:20:00:59:e1:51:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:DF:AD:3E:B5:90:47:E1:28:49:22:61:C3:59:B7:CD:28:A2:49
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3a:f9:cd:b9:ba:ed:62:57:6a:8e:5a:dc:82:b4:f5:dd:fe:
a9:b2:b7:49:e9:62:9d:6c:3c:7f:e6:a9:b5:e2:b9:5d:9d:83:
54:11:ea:08:be:bb:d8:cc:ca:76:32:37:85:f2:1f:aa:10:3b:
46:f3:c5:2e:20:e2:ec:61:1b:ac:74:6c:da:a1:a0:1a:c2:21:
72:c7:40:64:fd:1d:b2:52:c8:93:31:79:08:69:04:f5:6c:47:
68:20:a1:c4:93:b3:de:20:06:c7:99:a6:61:6a:a3:7b:4b:93:
9a:6b:b3:d6:f2:c5:e3:33:1b:56:f7:86:2f:4b:84:1f:4f:7a:
7b:fb:f4:d8:18:e8:68:b0:4c:92:41:5e:d3:e1:ab:a1:49:33:
9b:04:35:84:98:34:b3:aa:08:8b:82:4a:9c:38:ce:4c:ac:10:
11:de:45:c5:2e:1b:a9:33:99:8f:65:de:5b:63:ed:9a:85:82:
2a:6f:b1:51:cb:06:3e:51:fd:17:a9:e9:9b:87:26:3a:ca:80:
3f:0e:d8:e9:ff:1c:80:f4:dc:c4:99:56:8c:dd:fd:ba:63:ba:
cd:36:87:3f:ba:e6:53:2b:f3:bb:d0:68:52:88:cd:51:cf:0d:
03:4e:eb:6e:99:18:a3:cd:63:4a:5f:45:52:8a:55:33:53:ec:
28:46:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:36 2026 by rpki-client