This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier: I4LDgKCbttNsPYz03mHJW/yDYUFMvtzbCrszkc/MoJs=
Subject key identifier: 58:98:FC:0A:8B:E6:13:96:DA:D3:AC:06:B7:5C:1A:28:B6:AC:98:0A
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer: /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial: 019BF5E3C1BF658022DCF6D4FD6D64AD7E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number: 0CEF
Signing time: Sun 25 Jan 2026 16:01:42 +0000
Manifest this update: Sun 25 Jan 2026 16:01:42 +0000
Manifest next update: Mon 26 Jan 2026 16:01:42 +0000
Files and hashes: 1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: 0c5kdWN2vLb5uGWCNcGqhHN6bOra1x5xor59FQXaBhE=)
2: AJnTsJ9Hsdz9FRUZmoA2pnIaA0k.roa (hash: aMrXNnfsfrFl0TcjMNjetoIVnMeF1PUboeHt3ruERME=)
3: MFAY7_OLyA4recGDb-cluDo0Fy4.roa (hash: gbxISH9PotemB1t2Fhr1XbKqizGCUJkHo7eezE3JciE=)
4: cP1lvMExnryf8cpW14P-YTW6oFM.roa (hash: 1i/eVOAe4LzQ+ZGAHO4PSAx1yAI1zK27WYnYn0/9SC0=)
5: n05zwG4en5qxsV4GyAoEqt3PxQo.roa (hash: DEEJbhVIGe6qAKBZrDnj7vjpDliiIkF68Xjg5C7PX58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:e3:c1:bf:65:80:22:dc:f6:d4:fd:6d:64:ad:7e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
Validity
Not Before: Jan 25 16:01:42 2026 GMT
Not After : Jan 26 16:01:42 2026 GMT
Subject: CN=5898fc0a8be61396dad3ac06b75c1a28b6ac980a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:cd:6e:56:6f:df:17:9d:82:c5:55:3b:3f:
1e:00:e1:21:20:70:ed:0d:db:e2:9a:3f:4f:83:1e:
42:74:a8:cc:24:b6:fa:f3:44:48:f5:77:bb:4c:59:
b8:df:a0:22:89:0e:63:3e:f0:85:bc:56:f9:23:c9:
87:0f:d3:4a:61:e7:6a:e6:36:a9:25:2a:2c:2c:cd:
2b:cd:50:e4:e9:68:bc:db:10:b0:f0:0f:b8:fa:6e:
d0:a8:92:11:54:2a:e2:36:6c:bf:09:cf:c2:ea:94:
7b:58:53:68:b5:34:b1:32:72:81:8e:45:2c:56:fa:
9b:44:3a:70:30:fd:53:7e:64:de:d0:e1:db:33:bd:
29:71:94:cb:66:d8:5c:96:d3:7b:ec:3d:b0:6a:f0:
19:4d:b9:32:d8:b0:98:a0:f4:d3:06:3c:39:35:48:
c1:82:5a:da:11:5b:b4:de:86:30:7b:39:68:b6:b8:
2c:ab:3c:a8:f3:f5:29:4d:e2:d7:1c:1f:95:42:24:
20:3e:20:4d:18:36:1d:04:07:bf:41:db:52:cd:1f:
d5:f4:e2:40:ff:15:33:36:08:71:b0:f5:71:b8:69:
b1:07:4c:aa:61:a9:1b:7a:98:5b:d8:ca:35:d2:15:
fe:19:db:be:9d:be:4d:2a:74:35:c1:1d:cf:2c:57:
5c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:98:FC:0A:8B:E6:13:96:DA:D3:AC:06:B7:5C:1A:28:B6:AC:98:0A
X509v3 Authority Key Identifier:
keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:db:09:94:7b:45:e0:57:64:d2:5b:41:dd:b1:2b:d9:e1:37:
3a:db:8d:44:0f:74:88:98:c3:7c:02:b5:ef:a9:27:41:83:85:
19:5b:65:42:32:e8:77:83:59:aa:23:28:3e:c4:ed:d7:e5:13:
47:2a:e7:8d:66:9e:be:ee:3f:a0:74:24:09:c4:d7:8f:ef:ca:
b0:64:85:22:7b:b8:21:bf:41:ca:7b:69:9d:ef:a4:90:a3:79:
05:55:0b:93:51:c4:87:74:ff:b7:71:53:58:d3:44:f4:ee:11:
14:15:53:3e:6a:98:58:c8:8b:cc:62:97:0d:25:e3:14:10:df:
9e:38:37:3d:82:0b:8d:5e:26:61:8e:46:22:56:c8:14:b3:4b:
53:4f:d8:48:88:b6:62:d5:7d:6a:43:81:0e:ee:2a:4d:18:c3:
fb:ff:20:44:e3:53:10:7e:53:53:1c:1d:a0:d6:ee:3c:c1:de:
e8:68:ac:65:70:38:0b:d8:61:bb:3f:55:32:a5:1e:cd:10:63:
de:63:65:32:55:e3:9e:8a:e5:c7:f2:9a:79:37:80:69:8f:3e:
28:6b:79:88:c9:77:b8:44:78:56:d0:d7:03:3f:6c:31:5c:20:
e3:fe:76:49:ba:85:ca:8e:31:8b:91:9d:b7:5c:ee:87:de:b1:
a5:2f:41:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:45 2026 by rpki-client