This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier: BwMNH1JlgEVcHiEC+lGApFA2jfVnGlHdwOYjAVKYtoI=
Subject key identifier: F9:11:34:66:62:49:D8:90:8B:8A:87:EF:4F:07:90:20:5D:09:B1:D2
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019BF42BA3A0A2661FAC095A66A8DCBC9E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number: 155F
Signing time: Sun 25 Jan 2026 08:00:59 +0000
Manifest this update: Sun 25 Jan 2026 08:00:59 +0000
Manifest next update: Mon 26 Jan 2026 08:00:59 +0000
Files and hashes: 1: 1-GuB2dsXmhfM3FVaD28Jix7MeSQ.roa (hash: Q33tcZF/wyJSnNSwGnNmjRCSYTNjYtXeUBk3UB7+jJ4=)
2: 5lLrPkobYapeH_YEkj_cgVZiTl4.roa (hash: LA0ccb3eiNozv6xRtPbB9Y5+Y/meBI91YyWfOeIXed4=)
3: 8Zfz2__LOu7ePxal8cv-bKS2h6U.roa (hash: +2tAS/WTUahrAWaXWLGbsm0bJFPNFA2k1sshJOthojY=)
4: EGT7w7ccRY_aHsT2waQrmkTQOg0.roa (hash: G3orlxt1QVzhu0rMV7kl3OzYV++O6Mm3e1uJ14Jtm3Q=)
5: KfUaJnaGoAjldQlQx_gNfPDlBDo.roa (hash: Qm3Jl/tsptEy/pQrxdDz7rVbFdsrkSZMAosUglKD208=)
6: NSXspG9pQJvmWYLKS70532E0Tr8.roa (hash: MrTONSRvxrXJDrrYRMbIis/UbxqsqX2KcYYn/ZlA2eI=)
7: bA6W2S-w285Kjh7l9XsFw8TxaCE.roa (hash: j1Q+e1SFuu2Y0C7AC9AlCsZPK6iSWjI3vGpbo9K6Uz0=)
8: cDJOpXY5IOe_jLTdJ-OS8qr6SvE.roa (hash: 6iAur4FsqXDOBKEZajqm+YOOYdc6UHHVGhnROwWKxXk=)
9: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: riiQTCQLtiU3ogbaWEEVIqHrs7/4XfRg+fIr7sAiBVk=)
10: d_UGzNdnm51QADs8DNYUUySL-9M.roa (hash: JDA3qW1t0qSXif4u81vdBdu6MklOAan5plROG8p9IT8=)
11: dmYgWyLCXGOeE4eyvnO2ivb74hA.roa (hash: kt4YePEluoOacOx4bJ7guo47DhSRQjZ74NNWUhbB5i8=)
12: tK4p7XOY-9eMCfT41rNfDvMz8ZQ.roa (hash: +PzSpSLby2pKNdEalpx88bV8TrjpZ7AoJpGeiQ6ta/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:2b:a3:a0:a2:66:1f:ac:09:5a:66:a8:dc:bc:9e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jan 25 08:00:59 2026 GMT
Not After : Jan 26 08:00:59 2026 GMT
Subject: CN=f91134666249d8908b8a87ef4f0790205d09b1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:a4:fd:dc:c5:59:47:e0:5c:7c:27:2f:73:
a7:90:e7:84:42:8e:82:de:2f:a8:74:f6:40:5b:15:
85:3f:54:3a:19:b5:a8:c7:b1:68:ea:f7:b3:61:3f:
20:85:5e:a1:35:48:e6:48:86:bd:3e:5d:9f:22:4b:
1c:78:2b:2e:3f:e8:0d:c2:0d:8d:0d:c6:32:58:17:
87:a6:cd:dd:60:a4:e3:7f:c1:cb:23:45:c2:64:6b:
0e:7a:bb:25:82:85:95:97:cc:cd:c7:6d:a8:75:af:
26:57:f9:e9:21:a1:7c:4c:8e:e9:4f:fe:fb:76:b1:
25:5c:97:1c:b1:07:7a:7c:00:c8:0f:fc:c9:e6:f1:
10:09:49:2f:6e:ab:04:09:5b:d2:f4:38:54:e9:24:
22:55:e1:4d:6c:20:65:52:0b:91:c5:09:ba:48:6a:
04:6b:8a:7f:44:a1:b0:3b:0a:72:6a:7c:e9:8e:b6:
a7:53:0c:3b:13:7a:26:51:ee:2c:98:48:d7:52:89:
91:c1:72:a8:2a:a0:ba:03:17:3d:d2:f0:d5:c9:fb:
c9:75:00:7e:62:6d:a2:c1:f7:77:02:1c:8b:88:eb:
81:10:0a:e4:bd:f0:05:9f:59:aa:45:c2:af:35:7f:
a0:1e:5d:bb:b2:c4:f2:56:09:c8:9f:02:95:f9:27:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:11:34:66:62:49:D8:90:8B:8A:87:EF:4F:07:90:20:5D:09:B1:D2
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d3:c6:2e:df:5f:85:94:c0:c2:b3:b1:2b:3e:51:7c:0f:76:
2b:52:03:1d:71:73:0a:f5:aa:fb:42:07:e6:34:92:fa:6d:8e:
c4:2e:85:28:31:76:99:24:b3:fe:c7:fd:6e:ca:e6:da:86:a3:
0a:6d:16:b3:86:58:ef:67:38:6a:04:f6:25:24:08:15:be:fe:
94:2c:81:a6:96:9a:e5:63:fd:20:4f:f0:8d:97:de:23:8a:eb:
a8:6b:3d:e7:46:88:f0:a1:ae:61:30:e5:cb:33:3e:41:12:d1:
18:88:ef:35:60:e7:ed:96:12:57:44:7e:16:2d:21:94:f2:1e:
bc:03:d2:5b:dd:95:1d:06:3c:24:d4:14:fd:36:64:be:0d:9e:
ee:74:c4:45:e2:c3:4e:e4:e8:7d:84:a6:3e:12:3e:50:b2:ac:
5f:68:4b:43:39:be:f5:b7:eb:72:ce:68:05:6d:3f:1e:b7:27:
77:df:70:b0:f3:26:b9:15:ca:4a:4a:4a:a8:dc:a5:fb:31:f5:
90:2f:d0:2c:dd:8a:31:6a:ae:3f:01:20:e8:d4:bc:6c:cd:26:
23:6d:45:f3:cb:6b:37:73:24:66:8f:12:85:9a:a3:60:3c:db:
1e:15:d8:f5:8c:f6:7b:65:e6:bb:56:2b:2c:28:fb:27:6c:d8:
9f:31:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:49 2026 by rpki-client