This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
File: IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft (raw, json)
Hash identifier: caIs99W2wDAqhd1eq8k2DIbQQcofg8veEYAwAJMy+mI=
Subject key identifier: 5B:8B:92:3E:C7:8B:D3:F4:AD:26:4E:12:25:E5:19:E9:9C:11:82:F4
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 019BF6F5B7E5CF57D3DEC1EE778CF0716B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
Manifest number: 16C4
Signing time: Sun 25 Jan 2026 21:00:57 +0000
Manifest this update: Sun 25 Jan 2026 21:00:57 +0000
Manifest next update: Mon 26 Jan 2026 21:00:57 +0000
Files and hashes: 1: 5bKPRm_QqbpBlNc2dNoKywZCqLk.roa (hash: BZLesRHJpEK+89kXNO/B3a8GOQOgqURlpuFb3G1CoFc=)
2: IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl (hash: HtaZSxXsypaZiehHrsTvYSEyR8x7OtKNyx2MoTm5rr8=)
3: lWJFLWzbEFcrz6v7MBMAal1UC0Q.roa (hash: 8TaQuYzpOnIciU3bPXjs+EPWsUmEnwjkG4COBm5InQ4=)
4: lj_OVhtyzOOGAl8O2ZX2b9-uYP4.roa (hash: /IN+PkswpcNIMIACvoERnunbvdFhIwO4BCUWqEEWkVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:f5:b7:e5:cf:57:d3:de:c1:ee:77:8c:f0:71:6b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Jan 25 21:00:57 2026 GMT
Not After : Jan 26 21:00:57 2026 GMT
Subject: CN=5b8b923ec78bd3f4ad264e1225e519e99c1182f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:be:40:e0:59:b3:48:f5:bf:a8:c1:44:96:
09:07:99:59:17:93:d0:bd:58:0e:c5:e7:9d:6c:71:
07:56:d9:09:45:88:4a:15:d6:0b:ea:2c:55:e8:5d:
0b:42:5d:43:1a:f7:e8:dc:33:21:6b:72:59:15:5b:
e6:89:e6:22:4d:34:6f:4d:ed:74:5f:ae:f1:b7:d1:
5f:fd:b6:88:71:01:65:2d:c7:8a:a5:ea:a5:18:fb:
c2:42:8e:ed:ef:21:86:3c:26:df:21:a8:5a:ca:54:
b8:e7:3b:6c:30:e3:74:db:a7:74:36:2b:dc:45:d3:
6a:a9:13:dd:bf:73:79:11:49:e8:59:d7:08:7c:e0:
4d:46:e9:6e:51:98:b2:5a:8e:ec:ee:14:8d:8f:c1:
2b:bd:26:1b:ad:91:ec:5e:2d:e7:19:af:cf:d4:b0:
e9:3e:fd:7c:76:3d:d6:d3:2b:4e:98:11:57:6c:57:
9f:6f:2d:0b:35:6f:f5:f1:f7:76:e4:72:8f:5b:e5:
40:cf:31:d6:14:75:f1:84:d1:d3:94:15:c2:13:a8:
28:f6:bd:2a:0d:93:98:06:26:7a:bb:38:25:b7:39:
31:c2:33:4d:61:e3:8d:2a:95:fb:e3:dc:7c:58:c5:
40:70:04:15:c1:f7:ff:78:6d:f0:cd:bf:b9:7f:2e:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8B:92:3E:C7:8B:D3:F4:AD:26:4E:12:25:E5:19:E9:9C:11:82:F4
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:50:02:96:c6:d7:69:ba:39:0e:38:05:81:cc:55:de:b2:dd:
0f:71:bd:56:ec:8c:4f:a5:cf:68:b3:26:70:65:bb:2d:3b:33:
64:cb:26:a6:e3:91:49:99:b5:31:d6:be:bb:ae:2a:66:60:3c:
da:d4:d6:59:d7:79:33:6a:ab:f9:ba:45:d5:28:be:92:9a:9c:
25:52:ea:29:52:28:f4:42:bb:05:0e:d2:b5:54:ee:5b:27:1b:
75:9c:2d:0d:cf:da:eb:14:5b:9f:65:59:13:e0:96:48:71:e9:
ae:43:0a:fe:1c:8d:91:16:80:90:e2:1c:de:c3:9f:46:d8:4c:
88:c6:59:39:ed:a3:10:60:3b:b0:4c:02:73:36:e7:63:f5:ce:
be:d0:d5:dc:2a:4d:08:2e:5e:2d:e4:77:97:9b:97:9c:a9:ad:
ca:8f:e3:a5:63:30:db:cc:99:16:1d:cb:91:68:39:7c:0f:1d:
f1:f7:89:7c:dc:0a:e0:48:3c:fe:e4:27:02:f2:c5:28:bb:11:
9d:bc:ed:02:29:e3:98:ed:9f:c9:af:c2:d8:42:46:7b:80:d8:
c4:ee:7b:03:00:72:be:e9:db:35:03:69:59:76:95:0a:1f:a5:
92:ae:0b:13:72:e4:a9:ed:dc:23:e0:c6:cb:6f:29:1c:2f:af:
1e:b4:1f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:25 2026 by rpki-client