This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
File: cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft (raw, json)
Hash identifier: dExIbQ/l4csn8cDSsxoRB86OCDY+alMawX8GkhmoLxA=
Subject key identifier: 4D:BE:40:1D:B3:B8:45:8F:58:8A:3F:13:C2:FD:35:0D:89:2A:70:33
Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
Certificate issuer: /CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Certificate serial: 019BF6880CDAA593A695D76C3547A5279836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
Manifest number: 17EF
Signing time: Sun 25 Jan 2026 19:01:09 +0000
Manifest this update: Sun 25 Jan 2026 19:01:09 +0000
Manifest next update: Mon 26 Jan 2026 19:01:09 +0000
Files and hashes: 1: 1BSkcVOn1qfh4jN9Y9DJswoRbtE.roa (hash: LWd2G+pwtnf/D4Tz+gcRRy7rXH1Fkn75SR7a0vRuma0=)
2: D6outDiE1pK_DydHGZyVGQce45w.roa (hash: k67yvwHSAG5YZmtQAvs13ltyI5n27aqgR+L0RdVOVfU=)
3: Fd5umUhcoCCaJGYibKCvP6v4FDo.roa (hash: aX4f/4JkLGsDLe+rXVPfGB2prsQe4LXC6c7f8OmsATA=)
4: cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl (hash: GMOctIpuhYJO/gQQMel4nakpNpp5LXa3I293XRqiKRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:88:0c:da:a5:93:a6:95:d7:6c:35:47:a5:27:98:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Validity
Not Before: Jan 25 19:01:09 2026 GMT
Not After : Jan 26 19:01:09 2026 GMT
Subject: CN=4dbe401db3b8458f588a3f13c2fd350d892a7033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:82:ab:ed:b5:1f:5e:c5:51:a5:19:50:9f:
82:a2:1e:c7:da:82:fd:d1:c5:fb:f8:3f:c3:0e:7b:
f8:6a:bd:8b:e9:38:90:18:fb:ab:87:54:d7:e0:f0:
e8:5e:5e:f4:20:94:f6:68:65:ea:16:bf:4c:69:3a:
c5:f2:ee:45:d7:d3:eb:e6:f4:b7:4e:ab:72:22:49:
b2:57:a1:fd:3f:41:07:f5:93:fb:d7:26:cf:0d:ca:
4c:87:e9:07:f5:34:04:19:bb:a1:76:fe:af:e5:c9:
78:58:38:40:fb:30:e2:40:09:ca:c2:07:4c:19:e5:
ea:5d:73:b3:e8:27:59:98:fe:7f:93:6f:01:68:1b:
2b:fb:24:0c:ed:a4:52:ce:8f:bf:df:6d:c6:73:3c:
88:91:49:f4:14:e0:9d:d0:e2:52:38:95:16:c0:fd:
fb:de:df:c3:ae:4d:df:f5:ca:18:e5:31:c4:b7:e2:
e6:cd:b1:b0:dc:15:ee:18:ac:9d:24:55:b9:31:9e:
05:95:61:e9:bb:ea:c2:1e:94:ae:e2:79:4c:44:34:
bf:38:f7:0a:1d:57:11:ec:8b:22:70:c7:5e:88:0e:
33:8a:6f:75:b8:4b:b2:2c:f4:16:7d:be:4e:61:1d:
e6:47:e8:cd:a2:b5:0c:39:49:21:eb:21:34:d1:8a:
d5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BE:40:1D:B3:B8:45:8F:58:8A:3F:13:C2:FD:35:0D:89:2A:70:33
X509v3 Authority Key Identifier:
keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:33:d3:91:c5:5e:19:23:23:25:69:18:89:97:25:58:44:60:
32:df:07:5c:a1:b2:24:4c:97:99:97:78:5a:6e:d0:db:10:87:
bc:3c:17:bf:5f:27:65:f0:1b:cc:59:b8:4e:46:ca:aa:ee:f9:
23:b0:9c:e8:fb:90:eb:98:78:af:ef:8f:24:d3:1d:07:01:70:
2c:96:47:4c:d2:d8:ed:e9:e0:60:74:df:80:2c:57:ef:37:7b:
cb:10:d5:6a:3c:1e:01:76:a9:e4:06:de:63:65:47:95:87:c5:
29:bc:a5:1b:ff:2e:e7:11:ed:ff:b4:6b:3f:28:8b:63:3d:f5:
91:d3:71:53:42:d7:36:1e:18:19:fb:6f:d0:26:78:3a:01:db:
8d:47:03:f1:9c:36:39:16:c3:1b:4a:fb:e9:11:58:f7:93:be:
04:62:37:b6:8d:c6:21:f5:22:2c:f3:fc:1b:16:af:11:53:dd:
f3:ec:b4:45:0c:83:1e:79:94:a0:b1:c8:55:8d:c0:ec:ad:12:
16:3d:8c:fa:c2:80:23:14:c1:83:b8:7d:2a:40:62:d5:24:d6:
ab:36:92:2d:7c:3e:8d:32:28:78:dc:28:67:ce:1b:7d:f0:e7:
e2:f2:65:dc:61:20:44:c1:3f:58:95:71:40:f8:00:04:67:ba:
b1:df:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:30 2026 by rpki-client