This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File: BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier: xDXJK53pjipV29ukkS1QjzvnDrWoQgTuLFKam0WBK1s=
Subject key identifier: 5D:F2:8A:30:FA:B4:50:B2:1A:AC:EA:D7:4C:02:FB:8D:3A:EF:C6:47
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 019BF6877AB50DE5A678E68E68A9A1F92947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number: 1421
Signing time: Sun 25 Jan 2026 19:00:32 +0000
Manifest this update: Sun 25 Jan 2026 19:00:32 +0000
Manifest next update: Mon 26 Jan 2026 19:00:32 +0000
Files and hashes: 1: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: cHHCY5LT9rRMp8+nTEBbwchYQUl6aCRlQTKQsCH5fBc=)
2: OYsX4hAIO8zocCjaiLAgo7rhl6g.roa (hash: 8mSQCijrpWAiZ1jkdyn7YQSYQONkGQ/rnpGjGBbFCh4=)
3: bdlW9rGcnc760E8tAJjg2CUKj0w.roa (hash: IsdmnqvpxQ+ZG+0hIJARCiBh3q+bZgkvzh3TXDLVbNU=)
4: p1wmIAs2m6VXlrjI9FHbi34CCuM.roa (hash: 1NLV5dGaNdK6KyZjvAwRv2ZWHGbtxnA4M7+utkTJ9us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:87:7a:b5:0d:e5:a6:78:e6:8e:68:a9:a1:f9:29:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: Jan 25 19:00:32 2026 GMT
Not After : Jan 26 19:00:32 2026 GMT
Subject: CN=5df28a30fab450b21aacead74c02fb8d3aefc647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:8f:6e:e0:5b:85:bf:87:b6:aa:10:9b:fd:
51:da:89:84:7e:ec:0a:50:e0:4b:28:a7:82:58:d2:
3a:45:99:1a:76:f9:0a:33:eb:76:7a:1b:bb:12:85:
f5:77:a5:81:35:84:46:91:63:c5:f8:8f:08:0c:d5:
62:07:db:55:b3:25:07:64:51:00:55:ba:83:a9:27:
5d:33:52:d3:88:6f:af:31:18:e4:11:fa:1b:a7:cc:
15:b5:9d:e6:e5:0f:13:1b:b6:c5:6c:ca:10:33:a7:
f6:30:b0:2c:a2:a9:3e:53:13:47:e2:e5:06:d3:3a:
a1:4a:46:6d:01:8e:1e:b2:e7:cf:9d:5b:a3:71:cf:
92:e4:74:42:ed:22:25:e8:fb:fd:b6:85:5f:63:cd:
b9:93:f6:ff:f1:58:74:c7:0f:18:69:92:5b:7d:79:
e9:9e:37:f3:0c:9f:31:a9:be:83:83:3f:7b:a3:65:
3d:b6:7c:cd:ab:6e:d4:40:cf:08:8c:3b:50:ce:24:
f0:bf:6c:ab:3a:3d:21:ca:a3:0a:68:44:a4:f3:83:
64:a8:90:db:39:ed:dc:50:74:ee:be:e9:a7:b6:ff:
a1:92:6d:10:52:2a:45:fe:44:58:6b:89:5a:2c:f5:
79:1d:b0:65:a2:e1:95:f6:ec:8c:17:89:8d:4c:f0:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:8A:30:FA:B4:50:B2:1A:AC:EA:D7:4C:02:FB:8D:3A:EF:C6:47
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3c:e8:3b:08:9c:a6:9a:68:44:c5:3d:23:b7:46:af:7c:2c:
5b:e6:1b:3e:7f:86:c7:3c:d2:1c:22:eb:63:f9:95:d9:11:a7:
ae:04:31:34:3a:58:ad:ad:f1:01:38:30:13:3d:54:82:ec:9e:
5f:a4:72:de:1a:b4:cf:e8:fe:b0:83:f9:70:23:47:0b:eb:f3:
81:74:3f:b4:7c:e4:e0:41:d0:e1:c6:05:e2:a6:5f:42:14:d5:
d7:13:31:89:1d:21:44:ef:c0:1b:05:6f:33:f3:7d:ac:b1:27:
c7:83:5a:8a:ac:42:30:64:15:67:5e:26:d3:d3:4e:6a:48:6b:
97:99:45:3b:e4:31:7b:5c:cb:3a:ff:8d:0e:2a:32:ea:97:5f:
79:71:22:29:f5:cd:b3:e2:9a:2d:c3:09:d8:48:c0:17:43:a0:
e3:07:cf:8c:c2:01:2d:6c:43:5f:d7:45:44:a0:a4:da:c0:ef:
d2:76:7d:72:00:db:18:b0:2b:cd:05:60:f2:0c:3f:ae:61:63:
f1:1d:ce:df:99:83:cc:fc:ac:b2:97:60:93:4d:c7:d6:1e:57:
5d:32:4d:55:a5:51:f5:d9:11:0c:47:d9:d7:40:52:59:f0:26:
4d:cb:ad:e4:c3:7f:91:c4:2e:aa:1c:df:19:d8:c6:b8:97:b3:
e8:9a:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:50 2026 by rpki-client