This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
File: d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft (raw, json)
Hash identifier: oCewU5I5dAcq89aumkYLJHpuDV00Ky2mm6Gg0/OI8Ns=
Subject key identifier: CC:A6:3E:19:E2:11:99:05:2D:AF:E4:D3:09:E8:6E:2B:E9:03:01:11
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 019BF8E3BA8D5A86D9A44620891E26B20623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
Manifest number: 128E
Signing time: Mon 26 Jan 2026 06:00:32 +0000
Manifest this update: Mon 26 Jan 2026 06:00:32 +0000
Manifest next update: Tue 27 Jan 2026 06:00:32 +0000
Files and hashes: 1: 5qHTg4smmrtrrX5zna14_iX7BYk.roa (hash: bTex3pwZL3UmEGT2D616ZNd//JAc7NnIdwAGgFlj7zw=)
2: FSRjH62OmIOzSD8Cw7TNZhyzeIE.roa (hash: oajsdOrMfY1vgE6M5+Oklmzh+pRKIVrhZXlk/pOgIMc=)
3: d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl (hash: DbvuUruY9AuRuxGisn9gtH0HGJUIZmt7Ft1nSnDNk+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:e3:ba:8d:5a:86:d9:a4:46:20:89:1e:26:b2:06:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Jan 26 06:00:32 2026 GMT
Not After : Jan 27 06:00:32 2026 GMT
Subject: CN=cca63e19e21199052dafe4d309e86e2be9030111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:6e:8b:61:d5:f7:90:62:2f:fe:02:fe:b3:
00:5d:2c:c9:d3:89:ab:02:07:4f:dc:75:b4:01:50:
8b:a6:1a:96:b7:1b:88:7d:95:09:c8:8b:34:b8:21:
cc:09:08:8a:61:fa:2c:a3:b1:3e:a8:77:15:11:b0:
74:60:ba:bd:3f:e7:93:3c:3d:35:e4:95:50:e5:3c:
24:a4:0e:80:f0:f0:b7:87:17:9a:b4:7e:fb:19:18:
2c:19:ac:85:38:63:98:12:75:36:bf:ae:b7:20:ee:
1d:e0:f7:d4:cd:04:39:36:52:96:d5:01:3c:2e:32:
f2:2c:c1:a2:9a:7d:53:3e:33:46:e3:2d:15:26:65:
d0:e6:95:e5:83:a4:f0:38:89:7a:5d:6c:5b:a0:f7:
1d:18:48:0d:e7:11:6d:6d:97:81:a4:36:db:a9:0c:
df:c8:73:ee:5c:5d:d1:2a:5e:d9:5a:05:97:b7:31:
7a:01:0d:35:18:41:dd:b6:09:e6:77:ec:79:cc:75:
c8:31:be:12:e4:f4:ac:49:9c:66:5b:32:27:4c:cf:
2f:e0:ab:9b:fb:84:3a:73:7a:03:bd:f0:7a:a9:61:
20:21:fe:8c:9e:1b:a6:2a:55:32:dc:11:dd:48:f0:
1c:c7:cf:d3:4e:80:e2:14:ec:9a:9c:0b:ba:e5:e3:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A6:3E:19:E2:11:99:05:2D:AF:E4:D3:09:E8:6E:2B:E9:03:01:11
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:01:2b:a3:1f:53:dd:d9:d2:10:52:49:05:0d:59:72:e2:25:
51:eb:12:8e:8a:29:50:3e:35:b8:fd:1c:61:b1:1a:15:0d:9c:
a9:4f:d9:ff:bd:1b:b2:b3:f5:56:dc:27:28:b2:71:53:8e:b6:
ba:9d:8e:6c:15:b8:89:8d:16:1f:ea:21:56:01:55:ff:c1:1a:
e2:26:fb:ba:f8:fe:d3:da:45:77:50:a1:ec:b4:34:ab:64:a2:
6a:34:ba:69:97:74:5c:fe:c6:9e:20:2c:20:d9:17:57:cc:3f:
d7:fb:2f:ce:3d:76:61:8c:10:ed:4d:d3:dd:a7:1b:b6:a3:49:
6a:4a:5f:61:0e:aa:da:ba:93:50:26:1d:2e:b6:ad:1d:e2:02:
25:ff:3b:52:74:ff:dc:74:22:cc:fa:2f:f4:0d:01:ca:e7:7c:
48:bb:e1:71:ed:b4:42:cb:99:20:3a:07:eb:93:48:9b:00:59:
8a:2f:de:8b:fd:3b:60:26:95:dc:f3:bb:b7:05:82:0b:87:2c:
ea:df:64:a7:f3:39:eb:74:5e:71:f0:1c:24:10:43:4d:c6:2a:
ba:d7:a8:a6:28:ad:4a:4a:0e:03:78:d7:08:25:7d:35:b5:35:
c9:8e:2b:8d:ef:9c:19:d9:0b:8e:45:bb:e5:c8:d6:95:8f:e5:
91:ab:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:28:14 2026 by rpki-client