This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: gwMSb826sgHkxtGGRhz69hGhEZGMshXZq8d29bvHk6w=
Subject key identifier: DA:E2:97:6B:A8:B4:EB:61:5F:1B:6D:46:EF:82:C8:0E:FA:E5:67:F5
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 019BF6F55CF72D42CCD22064B28CD5BC8F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 128D
Signing time: Sun 25 Jan 2026 21:00:33 +0000
Manifest this update: Sun 25 Jan 2026 21:00:33 +0000
Manifest next update: Mon 26 Jan 2026 21:00:33 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: CYZKqUv2cHjgFZR2143eygGG0s0WcjPy6g3v6T4fpmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:f5:5c:f7:2d:42:cc:d2:20:64:b2:8c:d5:bc:8f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Jan 25 21:00:33 2026 GMT
Not After : Jan 26 21:00:33 2026 GMT
Subject: CN=dae2976ba8b4eb615f1b6d46ef82c80efae567f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:ff:1b:88:ff:a1:1f:6f:74:05:88:e0:0b:
3a:70:24:4a:93:36:d3:b6:c3:f1:f5:9e:82:13:43:
73:eb:7f:57:79:8c:10:78:42:f6:8c:46:3f:48:02:
91:7a:0f:e5:53:0d:ca:20:79:1c:0f:2f:9f:c1:f6:
72:8f:6a:0d:73:52:52:ae:92:d2:46:13:8c:2c:bb:
bc:65:23:39:0a:2b:91:eb:5d:b1:14:50:bb:de:19:
87:12:22:3e:4a:63:87:83:db:1e:50:6c:32:59:c9:
8f:a3:4b:de:06:1a:92:a3:2f:73:dc:c2:20:c9:9e:
7d:98:a0:e2:85:cf:de:4c:59:e9:48:5c:d1:a2:ed:
92:93:a8:c9:1d:02:0c:78:7d:f3:e5:d5:b2:9e:4a:
1f:61:3b:c2:c3:01:70:5c:98:d7:80:f1:fa:33:59:
d6:50:05:95:6e:cf:c7:58:35:6e:e7:c7:74:95:9b:
89:0b:48:d8:90:e4:21:cd:0a:6c:23:a8:6c:4f:d4:
28:7d:55:46:1a:6f:75:cb:38:18:80:0b:58:2e:2b:
a1:36:66:45:4d:8e:cc:e2:31:54:7e:02:55:d9:60:
72:c2:67:4c:eb:0c:d1:b7:15:54:9d:f4:6b:2f:ad:
0b:20:3a:e6:08:59:89:2e:f1:a2:e4:86:4a:0f:93:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E2:97:6B:A8:B4:EB:61:5F:1B:6D:46:EF:82:C8:0E:FA:E5:67:F5
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:51:67:5c:b9:0c:df:8e:7c:6d:2b:3a:3d:bf:f8:30:3a:57:
fc:7f:3c:e4:5e:af:d6:a8:a3:93:be:6d:0b:8a:83:a9:69:cb:
b8:82:ec:48:ea:a8:44:1d:7a:4b:9e:4d:b3:c3:25:ca:d1:27:
4a:4b:65:23:6f:80:b4:3a:a4:83:88:78:c3:dd:84:4b:b3:8e:
27:56:05:e0:37:f9:f3:67:30:b3:c9:52:c0:8e:98:1e:f7:71:
da:a0:2f:ee:35:64:af:b1:a2:4e:1a:8e:f3:e5:e8:1c:db:20:
46:4a:57:8a:f0:97:8c:ad:2d:fc:78:1a:6f:68:79:0d:af:a4:
06:47:ec:84:19:4b:00:56:91:95:88:97:28:72:f8:ec:06:04:
8a:01:cf:db:b6:45:1b:c8:53:19:bf:de:51:3c:cc:f2:ba:8d:
09:4c:95:52:20:2b:3e:c8:60:eb:ac:be:30:5f:55:76:38:02:
46:16:f8:41:52:57:1b:4f:61:36:81:00:6a:a8:98:7d:4f:9a:
bf:83:e0:a7:fc:55:fb:76:9d:7d:88:78:56:7a:1d:34:f4:2a:
f5:44:24:6a:ee:d1:8e:70:84:4e:0f:28:c4:aa:4d:79:9e:5e:
3b:e4:6b:ea:55:cd:17:34:bc:48:dd:8a:49:d3:f0:9a:5f:69:
a7:70:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:51:15 2026 by rpki-client