This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json)
Hash identifier: fJSwY/GgjcbRCmUMKk4qqO8sYfIZzgaXrgNg1K5LUO0=
Subject key identifier: B9:2E:61:F9:31:61:8A:3D:0D:2D:CD:AF:62:64:D9:32:D4:6A:A4:11
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019BF499752D2D6E8B6F52C5927BC7998E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
Manifest number: 19EC
Signing time: Sun 25 Jan 2026 10:00:56 +0000
Manifest this update: Sun 25 Jan 2026 10:00:56 +0000
Manifest next update: Mon 26 Jan 2026 10:00:56 +0000
Files and hashes: 1: 7RL8fW_Dxg4EDW5Z4ivLdpWOrN4.roa (hash: tokUjmASP17ooknmkjuaRsQxCEPLh9f9RrrnBdI6iu8=)
2: EvXfIy8EpPQdaMKFJl6e0cyJ_rE.roa (hash: jUhRht5BMAytGX6b74o8TZEZnw6UUGNbksquStGyuoA=)
3: GoX9g1-BvEDBwc2mnD_QhckWvkc.roa (hash: iwAHyRmv8fh6MiZyHh25bmItIDzU2/7EGoZ3U3OP5g8=)
4: HwToTvgRw9T4lA9g5K0rO88w4H0.roa (hash: FEQGesGC1cDIcYxW+IYwU/HsfSATdWUe+I45NYQRh7w=)
5: LdR35CJOae7iz3CM-YuWRxPH7Fg.roa (hash: BIlVeu2/j4tsszDfAyZKfwhNNrK6w/YcyhtzgIGoLCU=)
6: Qcy7H8pptHALc_HRlSPBrAjHQFk.roa (hash: c34mSfwg8wGcF0HxnO7HpnD3dUE7IsUJP/VVpFraSK8=)
7: R4_SJs76nKZn0cSBV0Fo8ieHskA.roa (hash: c/IdymIEHuxEUxv3cqvY3uKO7Hvs1Km9DwMMsG6LoKE=)
8: YXmTCTbpKSFbSlq06tikXeR5yjM.roa (hash: bTeAPWMnuRlE1iuV8G+ltD+aKezdlcucu0xXk0jbOXQ=)
9: a6Erf_tnT8pMndq3WnrW7H4B990.roa (hash: 9x4c63CxJ5UoigQePJxkpntm40rkErQOAY2jQ4vUfMc=)
10: bsp6BDSIWkrxR6u3xicw9RBKbtM.roa (hash: KBNbBNVVMKDz24iMEiDHeH6Ud37u/sKie2hM0HuZtdo=)
11: gCJ11xRpXYuuTIBFGGCZMoDz4zU.roa (hash: 2ejthbbSiGWzvnDRD4RyBPTLsVVX1AibHnvI5hPXIK0=)
12: knLrELnamRbYKI_hmZ4VPtqQHec.roa (hash: KpZhnOp+uvDR1vqjA12HnP6hCAQUJOuMRCA2L33u3s8=)
13: qFHjepGd1W1NeOB2M_HnT_9NnkI.roa (hash: qeCuA+kLoBoYh5DPSa7sfbtMwdjrN2PNoIXoYyFRFww=)
14: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: tks482E7KGxayJJifjD9hvpEu6MAJ2KkypQpiGZabw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:99:75:2d:2d:6e:8b:6f:52:c5:92:7b:c7:99:8e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 25 10:00:56 2026 GMT
Not After : Jan 26 10:00:56 2026 GMT
Subject: CN=b92e61f931618a3d0d2dcdaf6264d932d46aa411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:de:ce:75:0b:16:f2:98:2a:8e:87:5d:2c:
d2:07:6b:2b:d3:56:e1:32:2b:7a:42:f4:12:f7:06:
a4:1a:e3:40:ed:6f:5b:e9:a6:fe:16:a2:03:8a:2c:
e7:97:0b:b3:15:5e:0f:e9:5e:d0:6d:79:0c:bb:52:
88:97:a4:5e:6a:f5:01:a5:f8:5c:ae:cc:a1:e0:c7:
8a:af:db:04:79:bb:f8:09:5d:68:c8:35:68:c5:0b:
14:0f:e3:b7:17:93:3f:70:a1:a3:74:b9:e7:72:7c:
3f:62:42:4d:8f:17:fd:27:c4:4f:bc:f9:ee:41:b3:
d3:71:bb:dc:b5:f9:a5:75:6e:62:80:11:5f:15:37:
0f:ee:b7:8f:e0:d1:e0:04:73:1d:ae:a1:9a:dc:ce:
28:8b:eb:40:08:5e:ea:fd:5e:11:f9:de:fb:63:ac:
98:8a:0e:d8:5d:b3:74:26:02:5a:3d:49:97:bf:5d:
5d:e0:db:fa:0c:90:4f:a3:aa:5c:ea:c7:a8:79:1f:
e3:4e:e7:2e:b6:3d:bf:25:21:d2:e9:4e:86:b1:a3:
31:8c:27:fe:f2:1f:25:aa:7f:ca:f6:ca:41:b6:8d:
4c:2e:95:f2:05:66:b5:2b:e6:c0:a7:38:a9:20:de:
26:4b:db:7a:71:b7:92:3b:b1:38:6d:23:65:d0:28:
4a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2E:61:F9:31:61:8A:3D:0D:2D:CD:AF:62:64:D9:32:D4:6A:A4:11
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3d:b6:2b:cb:3f:98:bf:ac:d7:09:fc:e3:fc:47:43:34:dc:
47:1e:71:8f:3a:71:4a:b7:e2:49:dc:fa:cc:93:27:3f:a7:58:
0b:09:f8:77:70:b6:41:ff:fd:b4:87:6c:9e:f6:86:d8:aa:8f:
cd:34:46:c5:d2:e0:27:b9:43:1c:31:08:b8:15:48:0f:63:f3:
ba:a9:db:e1:e8:bd:68:3d:8b:09:27:1c:35:0a:d7:8c:a3:f5:
74:dc:57:ff:60:1a:9b:97:8a:46:5b:f2:4a:5e:c9:82:b9:77:
01:b6:74:e5:bf:65:71:fb:26:a3:12:06:bc:37:8f:53:40:73:
5e:e6:cc:97:3d:14:51:f6:8b:4c:56:49:35:ff:59:a9:38:a5:
98:f7:a4:86:35:e4:f7:ec:66:ae:6f:19:45:98:ae:e5:73:d7:
59:9a:22:e8:0e:d9:19:0b:1e:63:47:20:99:00:c8:05:e7:b7:
f9:cf:4a:91:8d:61:eb:47:a8:ea:34:a1:21:b1:a1:72:91:76:
a5:13:1c:ab:6c:bc:e4:1c:13:61:b4:42:22:df:00:e3:eb:56:
16:2b:31:41:fe:a1:0d:09:3e:67:66:6d:a6:40:16:6b:f1:a5:
b4:26:1f:67:d1:55:71:91:56:ff:0f:5d:46:e1:4b:ac:b0:92:
62:0f:22:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:24:05 2026 by rpki-client