This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: uTQ7sno5jwa94A49R2SkaIoVy2ii3KoxADJ5TBGspdk=
Subject key identifier: 3D:71:36:0F:27:8E:A2:51:72:49:00:AF:1C:2A:3B:B7:C2:1B:85:85
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019BF72D944E25BCCE4C1DB869F017519D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 11C6
Signing time: Sun 25 Jan 2026 22:01:57 +0000
Manifest this update: Sun 25 Jan 2026 22:01:57 +0000
Manifest next update: Mon 26 Jan 2026 22:01:57 +0000
Files and hashes: 1: 7_HY5yB8d3Njtf3VZahbVmixIZU.roa (hash: H45Wi9cbUIzhStJ6D1qNpJlOHim13UV0HCf2YP0fQEc=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
6: pZS2FuCyE0ac7bgviGBWTjEjxK8.roa (hash: BY2QLyJHYDD23aKTMOr6Dhb2Ou5jiMnicXO1uDe86kk=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: c+DbUjacQ0g3QANdW2Ni+8l17mfekIFJEoNaFiNHOzw=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2d:94:4e:25:bc:ce:4c:1d:b8:69:f0:17:51:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Jan 25 22:01:57 2026 GMT
Not After : Jan 26 22:01:57 2026 GMT
Subject: CN=3d71360f278ea251724900af1c2a3bb7c21b8585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:b7:21:fb:31:06:a3:10:0f:54:b2:bf:30:
39:66:16:ff:f9:2f:9b:02:7a:b5:cc:b5:e0:69:16:
a4:97:04:8b:79:80:2c:b0:41:da:d2:66:f4:a7:ae:
0f:3c:e4:34:a6:15:80:6d:94:e1:fc:1d:a7:3a:3e:
7a:cd:76:ed:17:79:2e:43:43:51:9b:77:13:e8:ee:
ac:b6:16:80:1c:f0:71:8f:7e:36:63:3f:36:08:e5:
da:8d:62:ee:ac:aa:11:83:27:53:21:19:90:2b:64:
fa:65:26:85:c9:1b:f8:ff:5b:8f:8f:1a:dc:4a:58:
02:a7:47:ca:6f:b0:e4:4f:ef:a6:50:56:44:6d:db:
7b:72:b6:91:9d:63:b6:a2:b0:2f:dc:f9:46:62:fb:
af:ed:92:17:c3:dc:fa:41:5c:64:2a:3a:c7:d7:7a:
f5:02:3f:28:1c:ef:38:40:2b:93:ec:59:5a:6c:b8:
e9:3e:3b:24:93:0a:89:f7:30:bb:88:dc:31:a3:27:
35:bc:99:d7:2b:37:aa:23:29:74:32:96:a1:81:cf:
1a:21:50:33:fb:90:19:17:e5:93:07:39:40:3e:c0:
de:48:e8:a4:0f:db:a2:e5:f6:e7:e4:89:c8:d6:b4:
7a:a1:04:11:51:fa:82:5c:03:c6:07:87:99:12:bb:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:71:36:0F:27:8E:A2:51:72:49:00:AF:1C:2A:3B:B7:C2:1B:85:85
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:de:bf:06:bd:f1:e3:31:98:1e:44:a1:ca:a0:71:0c:d2:14:
1b:47:b6:25:83:a9:94:6d:27:52:f7:1f:0e:e6:fe:47:84:26:
41:99:ec:d1:35:52:a0:70:9c:35:cd:78:07:9b:95:09:4d:9f:
af:d1:63:9a:74:1e:f4:3a:34:2e:28:77:0e:fb:06:bb:c7:07:
10:56:23:e9:7e:c7:2c:a5:ae:67:5d:8e:36:b7:ef:64:08:ea:
51:e8:70:84:f7:38:6a:83:10:6f:a8:2c:76:e0:2b:0e:b3:af:
f6:9e:9a:5a:12:21:ce:a7:00:0e:0a:35:7e:da:6c:b5:9a:f0:
70:52:85:74:b3:46:be:d0:1e:fa:d0:b0:55:96:e5:9c:f1:d7:
ce:f2:06:cb:88:f9:e6:33:95:c3:06:c0:1d:62:ec:17:1c:f9:
63:69:ac:c9:f4:57:e4:77:dc:d5:c3:aa:73:4a:5e:d5:cf:4f:
19:e1:4a:cf:33:12:d4:2c:ff:f4:c5:13:95:a7:ab:99:fb:6c:
86:66:b8:1d:6b:63:4e:74:a7:bd:68:e3:61:76:72:cf:cc:e8:
68:f2:d8:93:59:f1:0a:6f:36:2d:2f:02:94:f6:f2:0b:e5:8a:
41:34:82:83:36:b0:18:f4:b9:3e:3d:0e:f9:91:6d:68:d9:49:
95:26:00:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:58 2026 by rpki-client