This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier: BTOLnwhGf67ec+WVwNyzPO4drIDTPUyRCRgKwpSP4i4=
Subject key identifier: 23:6E:13:CB:B2:67:6E:D1:85:4B:4A:95:3A:24:7E:FD:31:97:77:DA
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 019BF2E231A1FD70C37FB1B4636F0EF16C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number: 1551
Signing time: Sun 25 Jan 2026 02:01:08 +0000
Manifest this update: Sun 25 Jan 2026 02:01:08 +0000
Manifest next update: Mon 26 Jan 2026 02:01:08 +0000
Files and hashes: 1: 5FGHLdK72qHzzMVR761PYkr0_B8.roa (hash: UFVl1rQ+AMtmM2jj8l8YxQbgnT/lIb1Y+3O5KmViWAw=)
2: AaFb4BxfuUv5NeajfZzyZ_pKzC8.roa (hash: nTI1O9abgRlXav6e6wF4qbfd1OvGtpWjUhjV79Bt2Cg=)
3: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: 46DX/62OZK4SJAypgrpfJ3jL8FsnRt1ryuRb04bFE6M=)
4: wTpGtpvYbgK_vun8v_p94uvYUWw.roa (hash: MlwFMoA+ixOAYhXtfytpmcxvQgdxjqKkv8yoqTSG6+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e2:31:a1:fd:70:c3:7f:b1:b4:63:6f:0e:f1:6c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Jan 25 02:01:08 2026 GMT
Not After : Jan 26 02:01:08 2026 GMT
Subject: CN=236e13cbb2676ed1854b4a953a247efd319777da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:c4:3e:e5:f3:b3:84:29:75:91:2f:a2:61:
6f:ff:20:aa:da:ff:78:1a:01:f7:1c:cf:1a:4b:a4:
e7:a0:5b:55:2a:cd:f2:4f:e8:7a:a4:e8:54:3d:fe:
15:df:b3:82:17:19:f3:6a:48:7f:5c:99:b2:2b:d4:
f4:4a:78:91:05:51:72:c3:3b:cc:d9:65:96:2d:76:
55:ab:9d:10:d2:a0:3a:42:4f:2f:62:53:6f:db:2e:
cc:a4:62:50:62:0f:99:4b:ba:b6:7f:53:3b:93:4c:
2b:9e:79:57:c1:72:9c:1f:83:9f:dd:52:dc:a0:bc:
2d:23:8e:ff:6c:28:b6:4d:72:0c:9a:7b:f5:99:80:
c5:7d:d6:34:43:b7:40:d4:6e:ca:dd:69:b7:d6:75:
31:20:f0:33:69:0f:4b:ad:81:a2:99:84:28:78:f7:
07:c8:cb:58:ad:25:41:f5:4c:03:e0:51:57:0e:df:
6f:5c:96:f8:05:c6:88:d3:37:79:1a:ff:5b:17:ed:
71:2c:ae:cc:af:68:8c:95:33:11:b0:5e:76:66:04:
02:30:37:4c:5e:72:ec:cb:90:80:ec:79:39:63:ba:
19:8b:bd:7f:7a:0b:fa:91:a9:9b:f7:37:49:8c:a6:
33:c0:f8:85:58:0f:14:74:e4:bf:62:04:65:49:37:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:13:CB:B2:67:6E:D1:85:4B:4A:95:3A:24:7E:FD:31:97:77:DA
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4c:0d:e3:e7:04:3c:1c:28:fe:b5:ca:32:df:7f:09:9e:98:
26:7b:ff:30:74:26:97:77:ea:65:99:a8:16:2b:80:02:31:37:
af:c7:70:21:26:ae:b1:be:04:e4:aa:4d:d1:e0:b3:49:45:74:
ba:ac:e0:c9:5d:8a:d3:97:ec:28:36:f1:26:09:3e:70:27:30:
09:ca:50:0b:3d:d1:83:a9:5d:3a:0e:87:76:f0:48:01:b3:0f:
da:50:cf:d3:26:ee:fd:8e:c4:2a:41:79:db:5c:d0:11:e5:b7:
4b:1b:5a:d4:ef:3c:09:3f:2c:61:26:f9:f5:e9:6e:32:f2:49:
5c:a7:dd:f8:9d:32:2a:5a:44:b2:4f:1c:4e:f8:69:54:ed:0c:
78:b5:82:e6:89:9d:65:df:e0:dd:6d:53:11:11:18:44:c9:46:
06:45:46:37:61:87:b4:43:53:e1:da:28:b0:e7:b1:57:7e:cd:
74:65:6a:1c:85:25:bc:2d:1e:a3:f0:2c:e7:da:78:0a:b7:d7:
41:fb:c8:ab:39:75:61:d2:ba:28:54:4c:fa:85:04:f8:a0:ee:
41:b9:f8:45:ba:f7:80:8e:97:4e:3d:4e:d6:9c:34:0c:b2:98:
87:7f:c7:92:2b:27:01:f3:ef:34:c1:1e:21:12:05:f9:2a:bb:
c3:36:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:13:39 2026 by rpki-client