This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: /3LhDp0nvxLgCqFNwCBv97b61pozmN4FwJR+zi4Vuko=
Subject key identifier: B1:93:17:38:9E:65:05:46:9B:A8:4E:19:CD:DB:D0:FB:D3:FB:B1:B3
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 019BF91C0B61CE442BB49BDFB8C535B6A790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 04E4
Signing time: Mon 26 Jan 2026 07:02:03 +0000
Manifest this update: Mon 26 Jan 2026 07:02:03 +0000
Manifest next update: Tue 27 Jan 2026 07:02:03 +0000
Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: o8MoQt6hru4Yf5b+lXMJqKborUmSLE2BZsJ0+biUeeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:1c:0b:61:ce:44:2b:b4:9b:df:b8:c5:35:b6:a7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Jan 26 07:02:03 2026 GMT
Not After : Jan 27 07:02:03 2026 GMT
Subject: CN=b19317389e6505469ba84e19cddbd0fbd3fbb1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:de:35:90:a1:67:e0:c9:31:b8:e6:41:54:
ea:a8:14:43:54:29:7c:16:71:1c:39:71:75:77:06:
22:f0:3a:bb:2f:48:2d:b5:c1:9a:07:44:a8:cc:57:
5e:d6:b7:49:2a:6d:74:3f:22:79:1a:34:1d:89:a2:
34:25:dd:e8:d0:d8:73:d7:f8:0a:c6:06:a8:c5:3b:
12:8e:ad:99:97:7d:fc:8c:9a:b3:72:7e:64:b8:70:
5b:cb:db:e4:f8:67:72:a0:bc:03:9a:27:ad:06:dd:
6e:d4:de:9e:e4:dd:40:65:35:f7:00:5f:d5:1b:07:
a4:2a:31:4b:6a:cb:6d:ac:9a:6f:ee:63:2b:56:78:
46:96:f4:11:2c:1c:d5:13:c6:85:12:7f:9a:7d:00:
bc:3f:c3:2c:bf:07:23:79:63:ea:39:5e:2d:39:eb:
5b:83:09:f5:83:c4:a2:bc:8a:b0:f1:ff:8a:06:5d:
b4:58:55:20:9c:7c:8b:44:db:3a:32:88:4a:4a:7f:
e6:ec:f6:55:22:65:e5:92:4b:b5:19:a1:79:bb:2f:
c6:ba:48:d1:23:99:ea:e5:39:a1:4e:89:0b:a1:2e:
53:80:97:d2:0e:0b:9d:02:8e:9d:f4:0b:46:0d:59:
48:81:c1:2f:33:f5:65:e8:69:cd:87:f4:15:69:22:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:93:17:38:9E:65:05:46:9B:A8:4E:19:CD:DB:D0:FB:D3:FB:B1:B3
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1b:b1:7f:28:ba:81:98:99:29:c2:79:76:a0:56:59:3a:44:
a0:d5:d5:d5:e7:a1:24:a6:1b:3c:95:9f:d4:ad:45:1a:64:7a:
d4:6e:c9:49:7b:16:6b:c7:4d:88:d4:4d:ee:ca:7c:41:eb:77:
16:ea:d6:5a:6d:9a:14:b6:87:e4:d3:1b:33:d6:bb:fa:a9:9c:
1c:be:11:4b:68:b3:1c:f2:e2:c2:da:cd:67:4a:c5:67:df:45:
96:a6:16:b6:59:9b:0a:7a:b9:16:25:79:d4:a6:58:18:48:75:
48:4a:a0:dd:9c:c4:35:39:7a:31:58:d8:6b:af:ee:49:7e:da:
32:82:db:1c:b8:be:35:d1:cb:b6:92:75:46:52:60:c6:ed:2b:
05:f4:c2:22:8d:ad:84:11:04:b2:60:74:cd:32:6d:34:1e:02:
af:75:b5:6f:52:17:13:6c:66:0a:15:bb:f1:1f:09:9b:ed:d6:
07:5b:e2:e7:6b:d6:b7:68:3c:80:cc:29:ba:cc:c3:4a:63:e8:
b7:07:61:a6:ba:c3:43:7f:62:ed:06:7f:f6:a5:8d:2b:d5:ad:
75:c0:f1:83:17:e3:94:f0:c4:28:58:5f:cf:cb:b8:c7:f7:99:
2a:51:80:ad:56:be:2f:0c:e0:f3:6c:f9:d1:7d:c3:7b:4d:d1:
45:3f:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:01:56 2026 by rpki-client