This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json)
Hash identifier: NPLolR6FemgpGnQxWbPOmBJsxKogIldBV8Jak+NDwyw=
Subject key identifier: C6:1A:25:7A:5F:63:8C:6E:06:EC:FC:67:4F:51:88:4B:56:4B:9C:45
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 019BF3BDD14465DAE43383F02B55A99E212C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
Manifest number: 0E2C
Signing time: Sun 25 Jan 2026 06:01:01 +0000
Manifest this update: Sun 25 Jan 2026 06:01:01 +0000
Manifest next update: Mon 26 Jan 2026 06:01:01 +0000
Files and hashes: 1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=)
2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=)
3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=)
4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=)
5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=)
6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=)
7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: 6utoiWZ+7W5D7OyhVA166ns2lyShA/UI8bT2Ef3PVqE=)
8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=)
9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=)
10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=)
11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=)
12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=)
13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=)
14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:bd:d1:44:65:da:e4:33:83:f0:2b:55:a9:9e:21:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 25 06:01:01 2026 GMT
Not After : Jan 26 06:01:01 2026 GMT
Subject: CN=c61a257a5f638c6e06ecfc674f51884b564b9c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:da:f7:9f:24:94:64:70:6c:04:9b:20:eb:
d7:eb:d7:60:8a:a7:0d:51:ad:25:94:61:72:3b:48:
2c:d1:73:7b:b5:6d:ab:a1:de:2d:fe:6d:4f:e4:71:
97:11:56:fb:21:67:1a:84:2f:39:61:1d:54:78:e1:
e5:f7:d3:06:9c:e6:e7:19:90:66:eb:3b:fe:93:6f:
fd:20:8d:f9:9c:f5:56:ab:31:e4:2f:02:70:f7:63:
c4:82:b9:47:46:f6:c3:b6:2a:d1:ac:31:da:63:31:
cc:f5:3d:74:f1:a2:3d:87:69:97:19:44:eb:ea:1e:
b9:19:b8:e1:bb:bf:e5:81:b7:ea:47:a6:9f:71:44:
e5:fd:ac:64:d1:1c:c9:02:b2:79:1d:4a:e5:ee:d5:
98:57:f0:35:81:c3:32:e4:13:51:6f:95:be:eb:e9:
82:a3:9f:57:f7:b2:ab:6f:4a:d8:b1:5d:1d:ce:e4:
32:7f:e2:5b:ff:05:ba:53:a2:af:b2:ef:09:b1:e8:
5a:8e:8f:8d:b7:e9:f5:ee:82:f1:4b:e0:20:c6:62:
cd:08:15:8a:41:a1:df:3d:08:92:07:78:be:72:96:
aa:f0:39:e5:97:a1:fe:d8:18:4a:c7:c3:a8:01:19:
c6:0e:b5:52:6f:52:df:31:21:99:9c:dd:47:9e:57:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1A:25:7A:5F:63:8C:6E:06:EC:FC:67:4F:51:88:4B:56:4B:9C:45
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ff:0e:97:99:58:1a:26:87:9f:02:21:55:84:1e:ef:b5:f8:
8c:d2:77:79:8a:2b:70:32:f0:e3:01:98:3f:a9:b2:14:17:f7:
85:75:57:23:63:0a:91:44:60:9e:68:72:8d:ef:c8:a5:84:4e:
8c:23:4f:bb:fd:82:18:a8:49:24:ed:d6:f9:62:fa:a5:68:84:
94:7c:80:36:9e:b4:48:a9:5f:dc:c3:e3:e4:db:8f:86:c8:80:
fc:ba:3b:4a:54:ec:64:8c:29:f2:50:9f:94:95:c8:f8:72:2d:
49:85:37:fe:39:cf:6f:9c:6d:e5:bb:d4:a5:93:ff:a4:05:b7:
ef:63:4c:1f:21:d2:fa:37:80:28:f4:62:b8:8d:73:ea:9f:92:
90:24:c0:8b:59:65:c4:4f:a7:60:d6:6a:d3:7b:fc:be:b7:43:
e6:d4:76:af:bd:cf:79:0f:ef:5d:0f:3f:70:cd:c4:9e:bf:93:
e3:52:9f:65:24:28:99:3d:6a:15:03:3a:e8:73:c8:7e:51:fb:
e5:9b:75:c2:fb:69:58:71:40:7d:2b:e7:ce:d6:07:51:4f:2a:
e6:7e:8a:da:63:54:39:45:e7:0c:bf:58:f1:cd:80:75:a7:78:
5b:46:ab:5d:fd:3a:7c:76:d2:d1:c7:63:92:53:ba:97:c7:1f:
b7:bf:d7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:30:52 2026 by rpki-client