This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: sft7tzGTh/iBCK1+5Jb6hJKlbL3yo7uP5x6S1W/SqdI=
Subject key identifier: 3D:76:B4:63:79:4B:51:85:D5:10:28:31:56:B2:5E:50:00:95:DC:2D
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 019BF53DDEA1A81FE638717EDE5800910BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 1535
Signing time: Sun 25 Jan 2026 13:00:31 +0000
Manifest this update: Sun 25 Jan 2026 13:00:31 +0000
Manifest next update: Mon 26 Jan 2026 13:00:31 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: GnRcAIGvd/Nl5Lmf2BYCS5b6zxlo5Udn5Hck/uDg1NM=)
2: GwHZp-kEEMMSmgcidpvuauk-EA0.roa (hash: Xjp5Kh43d0lOVK+MDX99KJIgb/gfu211S8//K3ogwuU=)
3: X-4V7xzl5bM1v7YWDyF_SZW5lrc.roa (hash: I3o7rUH/RKJK5k980x+148YLL5ZlqYblJvTvhEFHuDU=)
4: g9skLhoTngKF84leEtNBNhGZn9Q.roa (hash: hqQ3HiFBUbLIXn6t3JB+mw0UlnMpWW49qnJ3ApgTu0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3d:de:a1:a8:1f:e6:38:71:7e:de:58:00:91:0b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Jan 25 13:00:31 2026 GMT
Not After : Jan 26 13:00:31 2026 GMT
Subject: CN=3d76b463794b5185d510283156b25e500095dc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:51:40:2c:7a:8c:f2:ee:c5:3e:62:88:1f:1e:
02:93:89:2a:10:44:63:59:1f:dc:e0:69:11:da:28:
62:cd:09:a5:95:b8:05:50:2a:e6:79:15:69:a1:46:
7d:68:3e:72:61:62:d7:55:27:67:41:64:29:85:9f:
82:dc:4e:5a:3f:a3:e0:9a:35:bd:e9:3f:46:a8:a9:
c3:b2:c5:01:15:f3:a1:88:70:bd:1e:c5:04:dd:51:
4b:cf:4e:cf:95:44:3d:5c:aa:c0:d3:03:68:53:48:
fe:5b:98:49:2a:a4:70:88:73:e8:b5:bb:6c:77:38:
e3:2c:f9:f6:e2:05:68:bd:bb:31:52:69:f8:5b:18:
dd:33:dc:c1:c8:8f:47:65:11:95:1a:47:94:77:10:
80:e6:1b:e2:2f:83:8d:c0:1c:e8:99:bd:d1:e8:cc:
de:51:b0:7d:f8:17:be:dd:90:52:95:89:5c:c7:70:
50:13:3b:6e:08:27:5e:7b:51:b8:3b:ff:ff:34:67:
82:ee:5f:66:ad:0f:b2:90:74:8a:1b:10:92:08:24:
c6:12:26:e7:77:99:69:de:0d:4e:c4:e5:b5:5a:b6:
84:bd:a4:dc:8c:f2:75:8e:96:85:17:73:78:8f:d2:
6f:55:db:08:44:7a:0e:2c:f1:cf:4d:26:c6:90:7b:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:76:B4:63:79:4B:51:85:D5:10:28:31:56:B2:5E:50:00:95:DC:2D
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e7:47:5b:3e:8d:9c:2a:b9:df:1c:93:eb:50:b1:18:1b:c9:
13:87:d4:f9:6a:d8:e0:ba:76:7b:00:d4:bc:3e:bc:81:b5:d2:
9c:43:c2:5d:2e:68:78:5a:f5:7f:38:11:4f:07:0f:5f:9f:52:
9c:e2:b2:a7:a2:63:ff:04:2e:d0:8e:dc:4a:4a:2d:32:2c:8d:
eb:fa:82:e3:c1:e5:c0:e6:05:f8:66:cd:60:97:fe:57:12:c9:
20:af:63:19:29:ca:89:09:49:de:23:5a:9c:2d:a8:4d:5f:67:
71:5d:5c:65:89:d7:55:3a:78:2d:b8:e3:a1:9b:4d:64:29:f3:
d9:f6:ad:ec:19:29:11:87:b1:18:ff:d8:71:db:fa:7a:83:b1:
2c:a3:32:67:dd:b8:83:a0:75:9f:dd:1d:1b:65:b0:e7:15:34:
34:5d:93:3a:a5:fc:1e:88:7e:09:05:48:23:e8:97:85:1a:90:
a2:a4:82:9a:89:44:e0:3c:cc:4d:f1:27:ab:e0:98:b1:97:43:
25:d8:e1:78:86:cd:a2:e8:5e:0b:71:19:45:4f:1a:ac:dc:be:
e5:fb:54:f7:9d:d5:9f:d5:2d:f0:68:c9:2d:e3:de:bc:9d:ba:
d5:73:6f:a3:01:d5:2b:c9:e4:8b:6a:65:d8:37:c1:35:e8:25:
e9:52:b7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:08:48 2026 by rpki-client