This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File: dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier: G2wE5I2U4RkDqZM+Gk9qgZWPnoKYQWyRNg/EcNY8hGs=
Subject key identifier: CE:05:6A:2E:2B:E9:D4:00:94:4A:58:AA:52:FC:24:15:1B:14:45:84
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer: /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial: 019BF4D0DBF88085D3344223CB633CEF51B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number: 3B
Signing time: Sun 25 Jan 2026 11:01:27 +0000
Manifest this update: Sun 25 Jan 2026 11:01:27 +0000
Manifest next update: Mon 26 Jan 2026 11:01:27 +0000
Files and hashes: 1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: ePsdM+u7IkRwwtsVldHJiCA/d33LX2jzw+LsTfLhwfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:d0:db:f8:80:85:d3:34:42:23:cb:63:3c:ef:51:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Validity
Not Before: Jan 25 11:01:27 2026 GMT
Not After : Jan 26 11:01:27 2026 GMT
Subject: CN=ce056a2e2be9d400944a58aa52fc24151b144584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:dd:32:c9:2e:c5:8b:e7:ed:b8:d7:7a:40:
ea:c2:40:8f:22:f2:ef:32:8c:da:ed:ce:13:9d:3d:
5b:cc:18:10:31:9d:33:8b:81:94:a4:70:db:f1:f7:
ab:af:b8:b1:8f:f2:4e:ab:62:ec:c7:1b:95:67:2b:
ba:d8:76:df:52:fc:32:f8:1f:15:d2:af:89:1c:9f:
65:3f:e2:b3:ed:7a:a8:f2:31:81:fa:e3:c8:e4:0e:
21:fb:d4:4f:ae:00:65:5a:ed:bb:02:21:03:96:8b:
2a:a1:48:a0:29:8b:b8:02:a1:a5:dd:dd:7a:64:b9:
fc:25:4d:90:48:1c:2b:35:25:51:f4:11:06:14:68:
cf:98:1e:85:16:53:ed:f0:3b:f8:fa:f9:17:3d:c8:
9d:88:1d:01:29:cd:ad:55:eb:35:71:b1:60:4e:fe:
6e:24:8a:a1:e3:eb:dd:c8:02:e1:2a:07:68:59:6f:
e7:94:08:c1:b4:6a:bb:be:ee:06:75:93:7c:56:48:
ca:7c:82:1b:27:f8:f4:df:03:aa:85:2e:95:48:e9:
3d:0b:d2:54:3a:e9:9e:cd:72:df:9a:0c:f7:58:43:
eb:86:bc:95:49:ef:fc:e9:2b:63:27:38:b1:84:73:
bc:12:ee:d7:ab:46:5f:ed:b1:9e:dd:aa:ac:0b:de:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:05:6A:2E:2B:E9:D4:00:94:4A:58:AA:52:FC:24:15:1B:14:45:84
X509v3 Authority Key Identifier:
keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9e:4c:da:b6:ec:b8:90:70:8b:1a:a5:66:bc:38:51:cf:a2:
e9:e6:e6:f7:25:82:1c:2c:ae:2c:79:dc:00:b5:68:c5:97:7a:
8f:10:a4:da:00:7b:43:7c:63:87:a7:fa:2a:7c:9c:04:90:75:
4e:d5:48:24:22:4a:ee:30:9c:fe:d9:21:28:bd:7d:5c:6b:cd:
1d:a4:8a:23:ed:0d:42:36:4a:c0:84:f1:d6:71:d3:ca:06:27:
a0:7e:27:99:79:75:4e:5f:cb:55:73:a8:21:b7:1e:f2:d3:57:
7a:76:80:bd:30:ed:b6:b2:a0:86:38:db:49:a2:63:50:d3:ea:
6a:fd:91:9b:64:09:e6:8e:d5:40:99:8e:f6:5b:86:5e:a3:a7:
14:aa:0c:ac:30:1b:8c:ca:fe:1d:97:14:c4:77:80:af:9d:4a:
e4:f2:f8:11:35:63:f5:be:e1:f3:99:69:d6:52:c0:c6:7b:8e:
c7:b1:43:47:e8:95:1d:3e:af:99:6a:1a:c6:62:6a:e5:0b:b4:
fc:6d:89:5d:53:5d:90:3f:9a:20:a3:ab:39:89:11:2c:f2:6b:
36:d7:41:2d:98:45:83:88:32:1b:b0:5c:4c:05:bf:f1:33:2e:
e1:70:e7:36:16:2e:ba:ed:6d:95:1c:3b:b3:06:5b:4e:e2:8f:
e0:7e:69:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:11:37 2026 by rpki-client