This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: Yost9CqaezhX5oAF6BP/9EVnEQSJeHEfp8QZmLEPU0U=
Subject key identifier: F9:04:AC:AF:CA:60:77:56:78:96:6B:B7:97:EA:D6:7B:8F:64:92:E6
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 019BF506F6802E73C60979BA5C501ECD15FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 150E
Signing time: Sun 25 Jan 2026 12:00:32 +0000
Manifest this update: Sun 25 Jan 2026 12:00:32 +0000
Manifest next update: Mon 26 Jan 2026 12:00:32 +0000
Files and hashes: 1: WIBc-XhxOnD5f9bCQ8Jz0ZuTnGc.roa (hash: BEfaJedvpJl8LX0jJodXnPNHqf67lfg9OTd8BTanSlQ=)
2: biWMyLPxPMl5FtQJTRrTfAxg-wg.roa (hash: pNDoD30C6cU3KpMd8R/7fMFpHc25Pe1LLUHjt0eH4ZA=)
3: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: A+xrhoh1syHoK6YARHLv+ozTpo+REiM3lSgO1bBnI0A=)
4: pInkCUNgtUwuBuyF0FBGq4Od_LA.roa (hash: 84LwnqiXuuACgBX/nkeDGPUuwEvED3Wv0F8ikRwy6Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:06:f6:80:2e:73:c6:09:79:ba:5c:50:1e:cd:15:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Jan 25 12:00:32 2026 GMT
Not After : Jan 26 12:00:32 2026 GMT
Subject: CN=f904acafca60775678966bb797ead67b8f6492e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:e9:d3:27:ce:5a:03:86:38:15:8b:ce:13:
75:b7:78:12:0c:b8:43:8b:84:a4:39:d2:b4:ed:4e:
60:b0:de:ee:c2:e5:69:90:1d:90:aa:52:43:ec:5f:
d4:e1:34:b2:54:0a:60:67:d6:d6:45:67:86:69:c4:
c8:2f:41:81:91:ec:d3:f6:53:4f:8c:98:a9:4f:36:
bf:5b:a4:76:de:6d:e8:98:27:92:09:39:88:f1:ab:
70:03:2d:c6:f8:9e:c8:99:5c:b8:e1:19:84:11:90:
9b:f4:e2:53:c2:cd:72:89:04:c7:9f:52:ee:92:71:
77:f9:c9:5e:96:ff:e0:55:a9:8a:59:50:90:23:e0:
a1:7c:5d:0d:f0:43:e7:53:73:e5:79:a1:3d:44:30:
fa:b7:5a:7a:4b:09:cf:67:28:3a:e6:e3:06:8d:78:
81:18:4c:cf:ff:06:7f:71:2c:07:4e:be:c6:06:14:
b6:c2:67:8e:a6:d1:4c:e1:61:16:a9:5f:8b:89:7a:
a3:21:63:87:ac:46:f2:b3:cf:46:4c:b8:06:c9:81:
4e:af:99:ac:17:18:16:a4:ab:3d:46:1a:54:bc:d4:
b5:79:b7:cc:e1:18:d8:1a:b5:f9:e4:04:4d:2e:46:
41:06:f3:26:4d:61:dd:88:b7:79:1f:82:d5:3a:99:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:04:AC:AF:CA:60:77:56:78:96:6B:B7:97:EA:D6:7B:8F:64:92:E6
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d8:e2:e9:f8:54:a1:3c:ca:30:8e:f4:59:07:79:fd:62:59:
47:26:89:49:31:8f:38:59:8f:0c:30:61:bb:b6:bd:28:bd:a3:
1c:0a:be:b1:55:65:a2:5a:a3:05:84:b0:43:d1:43:ed:20:56:
01:07:d5:b6:5b:c5:01:fa:95:7b:7a:bb:ed:49:0b:17:d4:15:
b8:1b:7c:be:df:2d:25:d1:f9:e7:9a:83:38:e3:b2:54:18:b2:
d1:a0:2a:a9:81:e4:ea:f2:93:e1:96:59:5f:04:86:97:22:1c:
d9:41:24:3f:81:de:28:67:6c:25:56:91:85:c3:54:54:df:c8:
b8:a4:b3:62:79:d4:88:c0:4f:e9:d3:0c:be:1c:7b:77:ed:00:
de:67:77:8c:05:eb:af:ac:1a:5f:93:13:0d:fd:bc:ee:05:b7:
d5:dd:79:e1:ad:78:03:88:44:3d:dc:d2:de:d4:24:4c:bb:f0:
3e:95:57:aa:f5:7c:e8:7b:28:28:ac:86:b0:92:ec:cf:03:da:
95:66:0d:d6:f4:ca:1a:72:83:ed:b4:f4:89:18:70:73:22:9a:
46:61:6b:47:6f:3e:47:cb:1d:4a:1f:c8:0f:99:56:5b:cc:4c:
b0:8f:14:e8:a5:bc:ea:02:e4:6c:19:fe:4e:39:17:36:ef:76:
ab:c3:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:43 2026 by rpki-client