This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: eXc7qfoPxRuqyMXD30bW4eng2inVUACkWj31998fTZY=
Subject key identifier: 77:ED:CE:A9:D8:94:2A:E5:AE:7C:3D:FB:83:27:49:AC:F8:C1:6A:35
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019BF5AC52693E740C61FC993B1A09ABC6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 1803
Signing time: Sun 25 Jan 2026 15:01:09 +0000
Manifest this update: Sun 25 Jan 2026 15:01:09 +0000
Manifest next update: Mon 26 Jan 2026 15:01:09 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: XnrAKHkPfEMMW9GmgqdBGmOaNKtBSAerdX4oDmeresM=)
2: 6rSLyo-Yx0l7a6a5zPlB1ZN9rnE.roa (hash: zpc8LUDJlLZtd+b87lBPPtArtCBV13J0qSxfK4BT774=)
3: EyQyKXmF8y_Jr6qFb_FfYoihgAM.roa (hash: V48zZ4foJ1VYrvY794dgxk2ozwFXIlT+k/ehWKBbp5M=)
4: JVFUq5KdyBpCJdJgzP_0x89RQvY.roa (hash: 4K24EermhkvKc1wTbUW/fuk5LfbUsg7DBpKwL6i/nlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ac:52:69:3e:74:0c:61:fc:99:3b:1a:09:ab:c6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Jan 25 15:01:09 2026 GMT
Not After : Jan 26 15:01:09 2026 GMT
Subject: CN=77edcea9d8942ae5ae7c3dfb832749acf8c16a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:e8:e1:b8:bc:87:14:8a:50:d0:5b:43:0a:
2e:87:ee:46:ae:1e:86:ca:8b:5c:a5:54:c7:b4:7a:
1a:20:52:20:9f:12:8b:5e:44:2d:bf:00:c4:87:ba:
f6:6d:cf:9e:54:7e:5d:65:69:ea:fa:7a:ff:dd:69:
d1:61:ba:57:91:61:15:ad:6f:63:2f:3e:b7:d1:08:
fe:1d:be:16:50:35:58:f3:7a:cc:2e:24:be:2b:3a:
68:6f:d1:03:eb:c0:d6:9d:b0:10:58:00:51:09:57:
b8:3a:a1:d4:2d:9e:a9:5b:38:7b:a1:8f:31:26:d8:
9f:ca:04:11:7b:78:c5:29:33:1c:38:e7:e2:66:2a:
27:e2:6b:85:a5:a9:ad:5e:52:ec:d8:fb:17:d7:69:
29:c6:61:29:39:18:a0:96:e0:d7:04:38:03:71:cf:
a6:a5:52:2e:70:bc:b2:50:52:9f:01:74:03:54:e7:
62:9f:f4:c0:25:de:25:77:a4:d1:33:14:d3:d7:c4:
e4:12:bb:71:28:e5:c8:09:6c:d9:7f:21:0e:f1:db:
35:f6:23:9b:58:58:d0:15:54:3c:1d:4b:db:04:9c:
21:27:56:d8:c9:41:b4:75:3a:67:4f:a0:9f:22:27:
af:21:55:27:ab:88:ea:0a:01:a6:b8:ee:13:49:f9:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:ED:CE:A9:D8:94:2A:E5:AE:7C:3D:FB:83:27:49:AC:F8:C1:6A:35
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b4:7e:a3:69:43:88:f5:61:2e:3e:f4:37:99:cc:2b:44:12:
1f:9d:79:ab:c5:e4:bb:a2:77:48:87:1c:0c:1b:98:b6:db:ac:
8b:b5:af:91:c2:7c:bf:95:3f:b0:0f:e2:cc:a5:7d:b5:c6:5c:
01:16:cf:bc:69:62:12:ac:67:0d:bd:da:41:b3:34:aa:0b:a7:
cf:e8:d9:17:6e:a5:24:2e:63:10:51:35:d8:0a:f4:ea:c8:3b:
65:b7:71:b0:cf:8e:86:d1:61:1e:81:eb:5b:ee:14:59:be:07:
e2:93:63:0f:84:ac:33:7a:ad:58:f3:4d:bf:32:be:e3:33:b1:
7c:eb:30:d9:5b:c3:34:eb:9a:29:65:31:f1:96:d5:34:cf:5a:
f2:f2:c4:e2:0f:aa:e4:18:ac:93:11:32:2f:d3:1a:6a:26:35:
69:09:24:c5:ff:21:f5:55:7d:28:80:8d:84:90:44:0b:69:86:
09:5f:65:ff:94:0b:ed:16:35:a5:b2:3f:fe:fe:c1:9c:41:5b:
96:1e:e8:32:7b:76:25:04:59:f8:71:cb:f4:60:10:96:4b:48:
fa:6f:9b:67:3e:1c:58:5f:5e:81:7a:fc:e7:69:44:30:27:97:
aa:33:c4:48:d3:77:fa:c4:0f:1b:92:fb:e0:ae:a3:88:1d:78:
60:e8:63:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1rFJpPnQMYfyZOxoJq8ahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YTg1MWRkYWU1YTY0Y2MzODgyNTM5NWJlOWE1MDdkYTk1
YWI3Y2YwHhcNMjYwMTI1MTUwMTA5WhcNMjYwMTI2MTUwMTA5WjAzMTEwLwYDVQQD
Eyg3N2VkY2VhOWQ4OTQyYWU1YWU3YzNkZmI4MzI3NDlhY2Y4YzE2YTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0Do4bi8hxSKUNBbQwouh+5Grh6G
yotcpVTHtHoaIFIgnxKLXkQtvwDEh7r2bc+eVH5dZWnq+nr/3WnRYbpXkWEVrW9j
Lz630Qj+Hb4WUDVY83rMLiS+Kzpob9ED68DWnbAQWABRCVe4OqHULZ6pWzh7oY8x
JtifygQRe3jFKTMcOOfiZion4muFpamtXlLs2PsX12kpxmEpORigluDXBDgDcc+m
pVIucLyyUFKfAXQDVOdin/TAJd4ld6TRMxTT18TkErtxKOXICWzZfyEO8ds19iOb
WFjQFVQ8HUvbBJwhJ1bYyUG0dTpnT6CfIievIVUnq4jqCgGmuO4TSfnwnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHftzqnYlCrlrnw9+4MnSaz4wWo1MB8GA1UdIwQY
MBaAFOioUd2uWmTMOIJTlb6aUH2pWrfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEt
MTEwYzg3OGRjZDI5LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEtMTEwYzg3OGRjZDI5
LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbR+o2lD
iPVhLj70N5nMK0QSH515q8Xku6J3SIccDBuYttusi7WvkcJ8v5U/sA/izKV9tcZc
ARbPvGliEqxnDb3aQbM0qgunz+jZF26lJC5jEFE12Ar06sg7ZbdxsM+OhtFhHoHr
W+4UWb4H4pNjD4SsM3qtWPNNvzK+4zOxfOsw2VvDNOuaKWUx8ZbVNM9a8vLE4g+q
5BiskxEyL9MaaiY1aQkkxf8h9VV9KICNhJBEC2mGCV9l/5QL7RY1pbI//v7BnEFb
lh7oMnt2JQRZ+HHL9GAQlktI+m+bZz4cWF9egXr852lEMCeXqjPESNN3+sQPG5L7
4K6jiB14YOhjvQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:55 2026 by rpki-client