This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
File: 53e8jj7CUM6F-5CRPCxJBRBD68U.mft (raw, json)
Hash identifier: jrae4+welC2pbXIiTz10+KYVi5OjkE0vOCo4Su3jA8o=
Subject key identifier: 53:6F:0B:B5:6E:79:A4:1B:26:A4:49:C7:46:49:76:42:40:23:B4:AA
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Certificate issuer: /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial: 019BF6BF78428815E1057764C01FAA9EC66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
Manifest number: 0EC4
Signing time: Sun 25 Jan 2026 20:01:41 +0000
Manifest this update: Sun 25 Jan 2026 20:01:41 +0000
Manifest next update: Mon 26 Jan 2026 20:01:41 +0000
Files and hashes: 1: 53e8jj7CUM6F-5CRPCxJBRBD68U.crl (hash: Ooilozz7nl89slrNUhq8Y6ePcpEqYsjqtARNdKiwPYE=)
2: I8DLFrJ2msVqUEuzFno0D_irlA8.roa (hash: 1h2HkVpROX6HNV7YxSDEIynkaKQ12aPkXI4aYGmsPhM=)
3: RvyFZGbQbeijXMu4H6shnCgImmo.roa (hash: DYIYWvmC8bzZdyJiE46TNQl9vdrwG3VWwrzYZPcGmag=)
4: ozaWo0KwzXlTDDMNGIN9Oh6_1G8.roa (hash: KZJSx3qW0uUiecQVsBeBVEHaMiHc39LHJYCjD72U8wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:bf:78:42:88:15:e1:05:77:64:c0:1f:aa:9e:c6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Validity
Not Before: Jan 25 20:01:41 2026 GMT
Not After : Jan 26 20:01:41 2026 GMT
Subject: CN=536f0bb56e79a41b26a449c7464976424023b4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9c:c0:8e:80:e4:de:b1:0e:1d:36:54:6c:a8:
c9:e6:29:29:2e:d9:02:a4:75:d7:e9:63:23:7b:a9:
7b:2d:8f:33:db:4c:ef:41:9f:01:74:99:fa:76:a9:
90:ad:7b:e1:92:72:8a:e0:0c:8c:e3:02:80:f1:6e:
70:db:da:74:d7:50:aa:af:34:20:84:81:a5:37:1b:
a4:a5:e2:c8:41:74:83:4c:94:ac:2d:e8:ab:e4:35:
f4:13:b1:10:3a:b9:a7:50:2a:45:f2:30:63:5a:31:
16:93:06:ef:98:c4:3c:bc:39:22:49:36:9d:42:37:
2d:e4:9d:04:46:ae:fe:8d:87:7e:08:28:16:6e:10:
05:9b:9d:07:cb:db:e0:c0:86:58:26:bd:bb:3e:d1:
84:c4:63:20:b5:a7:aa:33:91:1a:74:56:e9:69:97:
dd:2d:f4:2a:ec:3e:b0:94:71:c1:19:14:0b:e6:e5:
9d:26:37:11:66:26:2a:b7:3f:48:21:bc:5a:c8:2b:
9b:df:31:f6:17:87:82:ac:13:d2:65:e5:4e:6c:fb:
c8:e3:b5:b1:30:e3:35:44:b0:30:fa:34:e3:31:fa:
9a:64:a3:66:24:a4:e3:23:97:aa:7c:11:c6:a7:b7:
84:74:02:cc:1e:46:c1:1c:cc:d1:f9:13:b8:5f:10:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6F:0B:B5:6E:79:A4:1B:26:A4:49:C7:46:49:76:42:40:23:B4:AA
X509v3 Authority Key Identifier:
keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a1:97:f9:e4:75:7d:78:f8:7b:99:0b:92:9b:e9:4a:f1:5f:
2c:3d:57:ac:d3:df:fb:f6:9e:eb:74:1e:42:13:ef:5f:83:56:
a1:7d:83:04:87:65:80:ae:b0:83:00:64:d0:a4:ac:a4:da:c3:
d2:17:bd:c8:7a:65:20:be:bd:d0:03:d9:d9:06:85:95:ca:06:
2a:69:e3:12:0f:f5:5d:e9:f3:97:69:5b:f5:85:7b:0e:a6:0c:
0b:7c:73:e3:ba:9e:ba:eb:5c:d3:ee:fb:25:02:c9:85:6b:6b:
5c:85:65:47:27:59:3d:23:ae:7e:f6:7e:31:bb:39:99:b4:33:
23:94:11:c2:2b:32:d9:1f:b8:80:d1:e4:26:d9:1d:a1:05:f5:
5e:5a:b4:33:c6:a8:e5:ec:bd:28:7b:f8:2c:c6:71:f8:cd:71:
c7:e2:37:d2:35:bf:87:8f:1f:6b:eb:a3:67:5c:1b:14:32:d7:
78:43:8d:5e:a1:c0:74:67:ca:99:fe:0a:56:93:a8:3d:2e:01:
7c:40:91:16:05:03:e4:2d:20:c3:7b:cb:52:70:20:e1:14:ba:
3a:1c:10:3d:54:80:99:8d:59:45:e1:56:99:b1:02:79:f3:48:
76:50:13:52:9f:0c:b0:b5:28:cb:60:27:36:c5:3a:3e:d1:ff:
4d:99:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:04 2026 by rpki-client