This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: IFmSGNdedo153CeUG8Z21SFZdoPrA1Zy8oeP2O/loEU=
Subject key identifier: 17:BE:32:41:B2:1B:74:44:E8:FD:35:42:DB:64:DD:2A:EB:73:CC:D6
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 019BF53E8A6146E3BEFFD0685CBF70C6BEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 0263
Signing time: Sun 25 Jan 2026 13:01:15 +0000
Manifest this update: Sun 25 Jan 2026 13:01:15 +0000
Manifest next update: Mon 26 Jan 2026 13:01:15 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: N2FU7Mzyb76IshatLF3J5do24oU2M92TpBk4MyIr66k=)
2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:8a:61:46:e3:be:ff:d0:68:5c:bf:70:c6:be:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Jan 25 13:01:15 2026 GMT
Not After : Jan 26 13:01:15 2026 GMT
Subject: CN=17be3241b21b7444e8fd3542db64dd2aeb73ccd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a2:76:c0:4a:54:b2:d1:fd:15:ef:16:fb:d5:
51:84:1e:15:27:8d:15:e8:13:7b:ec:a8:79:eb:d1:
ae:5c:e4:8b:28:01:83:d1:95:ee:dd:fc:e7:99:2f:
ac:ae:0e:5a:86:58:e4:50:f5:20:15:f7:5e:37:7c:
90:7f:9f:fe:fc:f4:c0:a6:ba:36:fe:9a:ed:2a:93:
bd:47:53:a6:7d:06:91:01:3b:2b:bb:87:76:17:94:
f1:67:47:39:5e:3d:24:00:e2:24:a6:de:32:db:77:
46:31:2c:95:46:54:a7:c4:da:cc:b8:63:62:86:28:
d8:18:8b:24:79:ea:df:d1:a9:18:b9:8a:be:a2:7e:
23:52:5a:ca:55:21:bc:5b:b9:e9:5d:c9:68:b0:d1:
c5:f1:3d:40:37:a6:86:17:71:c0:11:11:ef:ac:c9:
4c:fb:c1:d3:87:28:a8:0d:a1:e9:03:f4:e3:4d:a2:
34:4a:15:30:4a:2b:1c:0e:c2:64:4f:f7:55:7c:b7:
2f:0f:98:22:d5:47:bb:6a:84:cc:43:0d:5c:19:74:
d0:b6:b1:56:d8:55:f9:3c:f2:e6:d9:51:06:4b:7b:
5d:7f:ad:e9:ed:36:9b:84:ba:9a:79:df:e7:1d:c6:
b0:76:31:89:10:32:07:af:b2:56:c7:f0:79:4f:e2:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:32:41:B2:1B:74:44:E8:FD:35:42:DB:64:DD:2A:EB:73:CC:D6
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a8:c5:df:6b:af:a1:69:9a:a8:ae:f0:ca:89:d2:a6:1d:f2:
d1:c6:ab:2c:51:34:aa:2e:00:d9:f6:e9:f4:69:16:f2:78:92:
76:db:9f:0b:45:24:eb:54:9f:b3:5e:46:f1:b2:9e:0b:a1:86:
7b:c6:7b:cb:61:12:9a:be:9f:b9:be:66:cc:60:d9:8b:be:d0:
6c:26:23:e0:87:89:82:f6:d5:b6:71:5b:e4:7e:03:52:0c:bd:
a8:a8:b2:81:ca:df:1f:f4:6e:ec:00:e7:c4:47:be:e4:0c:e7:
31:56:e8:a7:5f:33:45:6a:07:6d:36:21:47:7a:4f:f0:fc:92:
b7:5b:5e:89:9d:70:91:2d:aa:08:de:69:7e:e4:b8:6c:3d:4f:
63:b3:e8:19:28:26:51:d4:27:93:28:80:ee:d6:d3:91:42:7f:
49:b8:3d:1a:ab:b4:21:db:3a:d4:7e:20:14:57:aa:a6:10:7b:
c4:ff:29:ae:f5:d1:da:28:73:18:a2:90:58:d3:7d:26:40:49:
a1:1c:a1:bc:28:d6:31:cf:34:17:b1:7b:4e:5d:7e:38:ca:68:
30:9d:2b:2e:dd:c9:7b:34:32:7b:7b:dc:21:59:a4:3e:c6:30:
e3:68:bf:f6:ff:1d:fa:f8:03:f4:50:9b:5e:43:bf:a2:d3:e9:
8e:e7:6e:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PophRuO+/9BoXL9wxr61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOTBlMzc2OTQ0ZDMwMjk0ZGVhNDFmMjFmYjdmMWUxY2Ez
NjhhOTMwHhcNMjYwMTI1MTMwMTE1WhcNMjYwMTI2MTMwMTE1WjAzMTEwLwYDVQQD
EygxN2JlMzI0MWIyMWI3NDQ0ZThmZDM1NDJkYjY0ZGQyYWViNzNjY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KJ2wEpUstH9Fe8W+9VRhB4VJ40V
6BN77Kh569GuXOSLKAGD0ZXu3fznmS+srg5ahljkUPUgFfdeN3yQf5/+/PTApro2
/prtKpO9R1OmfQaRATsru4d2F5TxZ0c5Xj0kAOIkpt4y23dGMSyVRlSnxNrMuGNi
hijYGIskeerf0akYuYq+on4jUlrKVSG8W7npXclosNHF8T1AN6aGF3HAERHvrMlM
+8HThyioDaHpA/TjTaI0ShUwSiscDsJkT/dVfLcvD5gi1Ue7aoTMQw1cGXTQtrFW
2FX5PPLm2VEGS3tdf63p7TabhLqaed/nHcawdjGJEDIHr7JWx/B5T+LV4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBe+MkGyG3RE6P01Qttk3Srrc8zWMB8GA1UdIwQY
MBaAFAuQ43aUTTApTepB8h+38eHKNoqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAt
MjBhMzIxOGI5OGNkLzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAtMjBhMzIxOGI5OGNk
LzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6jF32uv
oWmaqK7wyonSph3y0carLFE0qi4A2fbp9GkW8niSdtufC0Uk61Sfs15G8bKeC6GG
e8Z7y2ESmr6fub5mzGDZi77QbCYj4IeJgvbVtnFb5H4DUgy9qKiygcrfH/Ru7ADn
xEe+5AznMVbop18zRWoHbTYhR3pP8PySt1teiZ1wkS2qCN5pfuS4bD1PY7PoGSgm
UdQnkyiA7tbTkUJ/Sbg9Gqu0Ids61H4gFFeqphB7xP8prvXR2ihzGKKQWNN9JkBJ
oRyhvCjWMc80F7F7Tl1+OMpoMJ0rLt3JezQye3vcIVmkPsYw42i/9v8d+vgD9FCb
XkO/otPpjudu5w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:21:49 2026 by rpki-client