This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json)
Hash identifier: yH0xi+UE+XbQyLQzMbmnCE8bq2Y408rCEhGV6naDrvo=
Subject key identifier: FC:5F:1C:A7:BE:88:32:E8:22:22:C8:0C:1D:46:2D:18:17:41:43:6F
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 019BF2AAC45108E5841F7D788C5A0CC33D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
Manifest number: 17E6
Signing time: Sun 25 Jan 2026 01:00:36 +0000
Manifest this update: Sun 25 Jan 2026 01:00:36 +0000
Manifest next update: Mon 26 Jan 2026 01:00:36 +0000
Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=)
2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=)
3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: qg+pENAECaap3Rg1H8HuezC1sOPR+hbdPFTBLId1sKk=)
4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=)
5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:aa:c4:51:08:e5:84:1f:7d:78:8c:5a:0c:c3:3d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Jan 25 01:00:36 2026 GMT
Not After : Jan 26 01:00:36 2026 GMT
Subject: CN=fc5f1ca7be8832e82222c80c1d462d181741436f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:30:c6:1c:6c:d3:fc:6d:25:4f:77:55:66:8d:
bd:15:cd:e5:23:03:dd:25:25:44:ba:a8:cf:e8:a9:
fb:fe:10:1b:7d:1c:0d:a3:d8:ba:e5:34:76:6a:09:
d3:07:d7:71:d4:d3:6f:62:fd:2a:21:f0:51:87:15:
ae:c6:d1:24:33:bc:4b:b7:23:67:06:a6:81:ca:8f:
78:22:20:05:8e:a3:b2:90:d8:d8:84:17:f9:ab:29:
69:46:dd:51:fe:bf:29:28:65:07:6b:fb:ed:9c:85:
9a:01:b1:19:f1:02:d6:36:23:6c:31:43:31:16:e7:
1f:4c:6d:14:e6:04:9b:72:3e:2d:fc:98:60:5e:d3:
1a:6d:72:dd:50:c9:81:e8:b0:4c:cb:b5:32:b0:7d:
d3:c5:26:76:81:ef:b4:9e:18:82:dc:d4:bd:c6:93:
2c:16:5d:16:3f:71:79:12:e7:ec:27:5c:d1:01:7a:
86:30:a8:ae:32:c3:eb:a5:cb:37:d5:c8:ad:12:48:
94:29:b0:62:08:86:44:88:c2:9e:9c:b5:eb:f8:1d:
54:e8:36:dd:4f:63:99:85:1f:b2:11:6e:81:ae:09:
3c:2d:e3:65:61:24:ca:c7:24:53:e2:58:35:6f:c3:
e1:ca:0b:64:96:23:5e:1c:bd:46:cc:7d:90:6d:18:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:1C:A7:BE:88:32:E8:22:22:C8:0C:1D:46:2D:18:17:41:43:6F
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ca:8c:2c:66:21:9d:22:2c:13:0a:42:60:7e:e6:b2:71:93:
08:08:a4:a7:a6:39:04:ee:0d:22:07:00:96:c2:40:f3:03:9c:
36:90:e2:20:2e:6d:77:76:8a:85:ee:23:c3:50:90:61:e8:d0:
8d:04:e5:fc:48:b7:50:4c:5a:87:0f:f6:76:81:ce:8e:4e:65:
6c:70:47:86:eb:e5:76:a8:31:9e:ec:39:3c:b5:bb:1d:f9:09:
1b:7d:22:60:56:15:ed:06:a2:9c:aa:04:c3:eb:7c:a2:8c:30:
2b:5d:31:9d:62:7a:c4:ff:5d:d5:fa:19:5d:7e:58:44:9d:30:
02:2f:cb:92:62:5c:ca:a4:57:92:c9:35:6f:a3:32:eb:74:af:
8a:e1:c6:c3:f8:ad:9f:30:d4:28:8a:29:41:14:45:74:08:3a:
01:5e:0c:94:3f:ce:1a:fc:5b:b1:7e:e2:f9:b5:c4:a0:a7:a7:
2a:5b:99:bc:bb:03:62:f4:8b:eb:67:51:7c:2a:93:f5:39:06:
10:85:81:6b:e1:40:27:3d:de:60:18:cb:7f:21:b0:07:15:6a:
7b:55:7a:1f:6f:eb:84:5a:2d:a5:e2:aa:1a:e6:00:ff:a8:f4:
a5:96:89:88:e7:a7:a4:55:f0:9a:20:0a:fe:d6:2b:86:93:f3:
52:c2:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:06:28 2026 by rpki-client