This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File: 5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier: ZS40DRE6HILcMmTX/SfQvlWuHb29PNPt1XfUV3Hhljw=
Subject key identifier: 93:4A:6D:64:00:05:1C:43:E3:F0:8C:03:AE:8D:35:8F:9A:0A:1C:A2
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer: /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial: 019BF6F576241875793B78942B1373B2AD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number: 9C
Signing time: Sun 25 Jan 2026 21:00:40 +0000
Manifest this update: Sun 25 Jan 2026 21:00:40 +0000
Manifest next update: Mon 26 Jan 2026 21:00:40 +0000
Files and hashes: 1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: 6STKPm/4iRnFAN2ZUhFki9eSPwaDKzwmNqsUHmyRZg0=)
2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:f5:76:24:18:75:79:3b:78:94:2b:13:73:b2:ad:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Validity
Not Before: Jan 25 21:00:40 2026 GMT
Not After : Jan 26 21:00:40 2026 GMT
Subject: CN=934a6d6400051c43e3f08c03ae8d358f9a0a1ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:83:10:f6:ab:b1:8b:cb:1e:b6:22:c9:5a:
94:e4:91:d2:d9:52:d1:78:5c:d2:66:1c:dc:f7:cb:
e6:aa:0d:8a:c3:ce:61:54:4c:ed:20:b4:41:de:3c:
99:b3:42:e4:58:73:0c:c1:92:86:7e:4d:c4:2f:e9:
7c:bf:8c:9f:bb:6a:3c:ae:fa:1f:a6:da:25:a3:01:
06:49:f0:53:e9:79:4a:72:1c:1d:4b:72:13:59:9c:
df:31:8a:ef:92:df:3b:81:f4:15:69:7b:46:e1:b9:
94:a8:97:50:99:8c:f5:80:63:1e:21:77:db:af:42:
eb:2f:5f:85:21:55:8c:c6:eb:99:1d:03:e4:fb:23:
44:b9:a6:5e:2a:37:86:3e:7c:4f:11:6b:81:1f:09:
91:d5:7f:bc:7b:0f:81:f1:9b:99:8f:2f:6c:e5:e9:
21:14:ef:46:ff:80:05:9a:29:2e:fe:67:35:53:d5:
98:c3:e5:bb:df:bb:28:00:b7:90:07:56:36:d5:4d:
75:f0:40:f1:ca:97:e0:5c:c0:e0:bf:00:01:f1:45:
66:9e:94:db:bf:f3:eb:a9:57:10:fc:9d:56:95:5f:
3e:62:47:6a:62:18:0b:9d:e8:45:9e:b8:18:d4:1a:
21:e1:9f:e1:86:17:f7:45:a8:1e:f6:85:73:05:23:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4A:6D:64:00:05:1C:43:E3:F0:8C:03:AE:8D:35:8F:9A:0A:1C:A2
X509v3 Authority Key Identifier:
keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5b:d6:ff:39:44:87:a7:38:95:59:e2:5d:1c:37:87:43:96:
62:a5:42:04:88:f3:be:af:0b:c3:1a:ab:0f:49:84:c3:cc:78:
2a:04:d9:0f:2e:09:88:b2:31:72:69:b4:90:00:ac:20:6d:97:
bc:f5:7e:8e:72:12:69:85:44:ff:2e:a2:f1:7a:6b:fc:03:fe:
88:62:c3:0a:95:17:a9:c5:00:22:20:d8:b9:11:b8:1a:a3:f4:
b2:f5:02:2d:76:b5:c6:6a:a1:d0:7d:d7:2e:97:9e:d2:5e:6b:
9d:c6:3a:17:1d:b3:ea:85:e3:de:84:fd:48:bb:07:c9:70:24:
40:dc:f7:13:e3:eb:6a:f2:a1:72:30:9b:61:e7:07:e3:fa:3f:
94:6c:48:58:bc:76:ae:90:9a:e1:a1:3d:f1:44:00:f9:f1:85:
4c:13:20:e9:42:ed:91:9e:e4:d6:3c:da:b5:ce:c4:d4:f8:94:
68:18:e9:6c:c3:aa:8f:23:ac:4d:88:60:23:1a:f0:4f:73:0d:
f7:2a:47:42:cf:15:14:67:20:02:93:e3:6d:95:b0:89:9b:56:
36:6e:bd:95:b6:81:80:91:9b:1b:b3:ad:95:8e:2a:28:8a:b2:
97:f0:c3:ef:09:28:f3:8a:d9:6d:4f:30:25:3b:1a:09:92:4d:
13:9e:c8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:21 2026 by rpki-client