This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: ioa1nxC0bNbVO4FM2Jm8n9KlnEoc4uv5uJOruW2scLY=
Subject key identifier: FD:4E:18:54:93:53:B6:0E:82:4A:F1:8E:62:D1:26:DB:9F:2D:2F:9A
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 019BF3870B47602FE0748B83CFCD4FE52728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 17ED
Signing time: Sun 25 Jan 2026 05:01:12 +0000
Manifest this update: Sun 25 Jan 2026 05:01:12 +0000
Manifest next update: Mon 26 Jan 2026 05:01:12 +0000
Files and hashes: 1: 0K2pCDlU0pkDvqWKO7SJxoZ3lsI.roa (hash: Y26TNiFt+U9/ZCJnbcaya/o2zut2SxPMMS0KeeLWubY=)
2: 5bVrHFZm_9x7DsR30S7rosICdW0.roa (hash: TNCtAJMUf4J6FJnN+i2bTj70aWZ+c3ls9gu8xyrRaB4=)
3: 8hvOqdm8XRO6sXWDZkcaHc49vsM.roa (hash: rWJpUZIpb36Ggr6bjwKyRkuAjSB5QQdFYyzRQ+KUdsA=)
4: C2rTJrn29bEkMahaeaaXZVoboPA.roa (hash: iPL2pg7U2wMSWFmyo8NlAj6nvHtyk3JYQ7jWseyBhYs=)
5: DdWY2FB-Dk69fNol-4eYBe-DCK4.roa (hash: GsXI8hKrSWyG6b3agSzUUfjy30UrGZi/9F9DfHDLOzg=)
6: FXEme31L2W7KjDVDqu37hEKFe78.roa (hash: omRy5gYKlVoWEItXCmHX+rxLDaANZ2/4bfpF5i1mDS8=)
7: KSn1SI2kD3BF6NrlzSx96xvLCsg.roa (hash: qBeitn/EGWWGEdktzJewxufauf5bR7KJZG7tIPAcxMA=)
8: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: 0oHlTiAcggSuYSq0qoJVqVHiEpdYtu+YRxGcmHQWgSQ=)
9: _ylley7uO-q2SakQqri2IL9Vh_8.roa (hash: 1WOpzM1HXCxDoeeqL/oavgXUUoldzw84YoaeeKakTR4=)
10: jFu4mc1ghInOCjlwPyUNi4iGEiY.roa (hash: +WkrqpjmCVItXr76o/yN5Eo2ZUnTm663I8ttrocPvZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:87:0b:47:60:2f:e0:74:8b:83:cf:cd:4f:e5:27:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Jan 25 05:01:12 2026 GMT
Not After : Jan 26 05:01:12 2026 GMT
Subject: CN=fd4e18549353b60e824af18e62d126db9f2d2f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:82:c2:56:f5:e7:79:82:63:ae:39:e6:ad:
52:aa:34:d1:83:f8:70:5f:ee:8d:cf:de:da:d8:c6:
32:4f:d2:08:8e:b7:27:bf:7d:8a:89:26:4c:b9:e5:
8d:41:c0:78:66:39:68:43:bc:72:b0:26:32:03:67:
6c:4c:af:2e:9a:c3:6c:72:37:42:f6:ea:20:69:29:
78:e9:34:4d:dc:36:b3:79:66:46:cb:5d:e1:e5:18:
54:11:36:cc:2e:2f:a6:8f:d9:cc:b6:3c:b5:63:30:
32:0b:39:5a:57:72:01:2b:6a:0f:1b:cf:d4:67:57:
39:26:7e:d0:c3:59:8e:7e:16:5e:f4:b1:9e:ec:34:
eb:47:47:3d:2f:aa:1e:07:e9:54:49:fc:f1:60:ab:
c3:29:e9:f1:48:3c:64:05:67:26:4b:0f:73:e4:93:
fb:ec:ad:de:7a:a6:3f:22:56:6e:35:0b:68:d3:1f:
3a:91:8e:a6:de:7c:f0:a2:f8:21:86:08:6f:48:05:
d4:45:b2:49:ac:17:3e:80:5b:3b:cf:49:c2:21:cc:
b7:33:59:a7:bf:d3:cf:07:16:87:2a:7c:6a:4a:28:
c2:17:40:54:ce:5c:00:d3:f7:ee:4f:0e:73:0e:ec:
6f:e2:34:88:07:6f:93:30:e8:92:12:aa:2f:77:d6:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4E:18:54:93:53:B6:0E:82:4A:F1:8E:62:D1:26:DB:9F:2D:2F:9A
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c4:de:40:ae:6f:44:18:7c:03:c9:21:93:1f:93:88:fc:ec:
75:30:7a:1c:a8:87:73:6f:ec:da:5f:5c:85:66:e6:30:93:ab:
b8:ff:84:a6:0e:dc:6b:a7:03:69:aa:57:6d:57:ac:89:a8:b8:
06:17:b4:9d:ad:7b:e3:78:9a:f6:1b:23:8f:70:b5:49:86:4e:
56:6f:75:38:b1:06:7f:cb:8d:57:69:5e:a6:ab:2e:a9:b4:f4:
09:74:c9:b7:59:a9:bf:e4:32:f5:37:f1:60:62:42:b6:13:3c:
95:84:49:18:eb:38:a4:27:e0:6f:2f:8a:e1:bf:ce:06:6f:88:
ed:4f:2a:1c:95:20:3b:02:06:20:c8:3e:cd:92:67:4a:1f:9e:
85:20:fb:d4:21:1a:6a:a8:bf:43:43:15:9d:11:74:63:f7:07:
7f:94:53:93:1e:f7:42:5b:14:57:9d:e7:13:3c:fd:19:34:a1:
4c:6f:0f:8f:50:b2:62:a4:a7:0c:dc:f2:ce:ac:50:5a:54:45:
23:74:ba:ae:f0:f9:d0:90:47:c5:d9:2c:3f:41:36:03:86:02:
a7:1a:53:be:41:ac:51:e4:e2:c1:d6:cb:b6:bc:63:18:41:35:
8f:fe:d3:ec:d6:51:a7:65:9c:e3:f7:17:49:a3:7a:27:10:83:
31:fd:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:38:37 2026 by rpki-client