This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
File: p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json)
Hash identifier: EG1zaEBbPdGpmBAVznXd/9b2I7xievzFV/gOeZX/7to=
Subject key identifier: 9E:8E:45:96:24:20:11:E9:23:DC:03:16:2C:77:33:C9:46:3F:2B:E1
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Certificate issuer: /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial: 019BF5075699AE79BBA06F42B1AE33813FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
Manifest number: 126A
Signing time: Sun 25 Jan 2026 12:00:57 +0000
Manifest this update: Sun 25 Jan 2026 12:00:57 +0000
Manifest next update: Mon 26 Jan 2026 12:00:57 +0000
Files and hashes: 1: L5BGhmd0saN8xecQNe9wiYjTs78.roa (hash: SbX44mvpZzphunBDxZ1gsi9c+uRL89kA1JQ3kMK3eJg=)
2: cgfGejDrVLaUqLSIzCYonqY6EL8.roa (hash: Mq/JUvCV9dSTx3b4h/eSywAPXcHk8+Plfex5qUmVasE=)
3: jhWbeo3zbogtegwkjldlY2v1Cmo.roa (hash: jMRPW06nsrBs6eYuP8nzo2cpYTotCTqzqowlQklFSC0=)
4: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: 2I/bgFS/i9budNHfy1N9Qdn8jj1UFCHjSF/iKGDio/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:56:99:ae:79:bb:a0:6f:42:b1:ae:33:81:3f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
Validity
Not Before: Jan 25 12:00:57 2026 GMT
Not After : Jan 26 12:00:57 2026 GMT
Subject: CN=9e8e4596242011e923dc03162c7733c9463f2be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:b4:5e:b5:ff:79:8e:5c:a2:3c:f5:13:bc:
70:2c:ae:e6:c6:87:82:8a:9e:27:42:35:f4:8f:3e:
9c:c2:bf:48:ee:83:e5:8b:d3:59:20:5d:a7:06:ea:
db:a8:32:36:f5:a6:3e:82:2f:97:d9:07:5f:a9:ff:
59:33:06:7b:37:c8:e0:aa:d3:05:be:7b:40:f7:20:
62:3e:85:f2:35:14:f3:9c:8d:80:23:6d:82:d6:fe:
c7:e3:da:8f:08:2f:83:a5:1c:42:46:b3:9e:a0:a9:
b5:89:76:88:7a:33:d3:a3:84:07:52:86:15:a4:9c:
9f:c5:ff:ea:82:7f:0e:27:94:88:19:a8:c0:0f:21:
ab:4d:22:23:9e:d7:dd:a1:63:1e:c4:65:d6:a2:07:
d7:17:1b:3a:2a:c5:3a:43:5c:b6:79:97:cf:ea:0b:
ff:34:84:83:91:7c:30:ff:b3:d4:02:74:51:3e:c0:
12:00:da:77:60:10:70:53:86:3b:b3:ce:6a:7e:24:
cc:f5:1f:f1:2e:80:21:ec:7b:76:12:89:17:4f:4a:
ad:18:03:a2:53:af:2a:6c:db:92:14:9e:5f:22:ea:
1e:35:e7:92:44:90:e5:d3:d9:0b:b3:4d:6a:be:d1:
3d:74:3d:96:a4:f2:47:13:27:b7:af:6c:03:9d:37:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8E:45:96:24:20:11:E9:23:DC:03:16:2C:77:33:C9:46:3F:2B:E1
X509v3 Authority Key Identifier:
keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e6:d1:45:1c:4d:21:0b:de:16:fa:aa:6b:58:55:22:26:45:
db:09:6a:ff:bb:1c:90:f8:4e:12:b9:e4:07:26:bf:b0:18:a9:
bd:08:d3:75:21:4e:bf:eb:f9:48:59:ec:11:e9:c1:60:25:a8:
e3:ad:94:6b:00:34:e9:98:b7:65:cd:19:7f:e8:1d:ed:d0:5a:
2c:f7:15:28:2e:8d:c1:8b:48:05:14:a5:48:93:1e:a1:4f:ea:
ea:ed:2d:94:1b:b5:a2:55:4c:b0:c2:73:ea:d2:4e:8d:11:dd:
f3:7e:f3:1b:af:d4:70:9d:58:e7:1a:d2:59:74:a6:b0:96:98:
2c:d8:a5:8d:19:43:7f:52:fb:dd:72:b6:6a:b9:21:bb:a1:74:
3a:d4:e9:10:e7:7b:aa:27:cd:a1:3c:bf:73:fd:b8:a1:b3:51:
6d:3d:3c:f8:c2:9c:93:da:3f:01:dc:fd:54:37:92:af:b6:3c:
50:8a:04:59:3f:00:5e:9e:28:3b:7d:9b:4c:8d:d5:83:ba:f8:
2e:b5:50:85:f7:7e:54:b4:0a:07:56:a7:9a:14:14:9d:34:79:
95:75:f0:a9:d9:0c:d1:96:cf:f7:49:93:5b:6d:05:2b:59:eb:
0e:eb:37:be:3d:cd:67:1a:a4:22:48:55:56:80:df:cc:bd:f5:
04:3c:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:55 2026 by rpki-client