This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
File: S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft (raw, json)
Hash identifier: 2WCFXZyeq5vng8Z6RcRq/lbdIgxypvTQjXTgZEYOol4=
Subject key identifier: DF:0E:40:80:BB:21:A5:7A:16:20:AA:DE:38:09:3A:36:6A:10:8E:33
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019BF34F7DD3D8D9EF56EF85694BC0DFFEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
Manifest number: 05AD
Signing time: Sun 25 Jan 2026 04:00:31 +0000
Manifest this update: Sun 25 Jan 2026 04:00:31 +0000
Manifest next update: Mon 26 Jan 2026 04:00:31 +0000
Files and hashes: 1: 9m7ReBFYFvLyFLeOct7H9hJ6pAA.roa (hash: jkRYU37RE8ZKYId1y2rgWa5Ij1FGdMuhHsJM5SV9bJo=)
2: CCsDJ1C_PsswfklipOHR_Lm7Dt0.roa (hash: 9Hs9+9hllW24VkNsrEOAjRUnft2CZTNY/e59yHFhQNg=)
3: HJo3CRIyATBS7g-UDXuzQV1nuKg.roa (hash: EQakd71H1sWHiuQgGDjS23hEg0bJr+KP+TwWXG16xS8=)
4: S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl (hash: RB2tW4xIiNtSlontxMBIxX9o52xm2ZoKo31oGc6VKbU=)
5: VsFQPt4uWCua0n1HDigGa7MZykI.roa (hash: aO7sXpE7LufWLa9ldjPsDpWQqb+o3sWR/YPv+p5OWvM=)
6: dnHIHXnxDIPVRKYK4BjBEl9rRRw.roa (hash: 22Pf0XjeESbjL/t+0AIAcsw4G9pn5ax3ko7GmRs5HKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:4f:7d:d3:d8:d9:ef:56:ef:85:69:4b:c0:df:fe:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Jan 25 04:00:31 2026 GMT
Not After : Jan 26 04:00:31 2026 GMT
Subject: CN=df0e4080bb21a57a1620aade38093a366a108e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:0a:a9:34:3f:e9:d7:59:64:d2:65:73:72:
60:a6:ca:61:e6:e9:63:f1:69:2c:5a:b4:d4:31:ba:
ce:ff:37:f7:c1:a4:0f:4e:c6:ad:a7:c1:81:97:3c:
a3:31:4b:87:06:0b:a4:03:6a:87:8e:e9:15:bf:f9:
0d:4f:c9:cb:32:16:37:de:63:39:03:ea:90:8f:9d:
6c:23:71:12:cf:71:f0:f3:f9:4b:bc:a1:ac:d1:37:
ab:0a:f8:ce:d9:03:7f:b7:31:bd:50:9c:6e:42:0d:
61:06:b5:a1:67:40:95:fd:f2:b4:14:a3:ee:2b:9a:
4d:9a:3a:4a:c8:cf:68:77:b1:28:95:e5:c9:e7:dd:
c5:9f:34:40:ff:f3:d3:d9:14:2f:35:9d:24:06:e6:
90:87:37:dc:61:d0:1e:0a:1f:6b:1d:64:9f:c0:b5:
9d:e5:65:34:41:84:93:0e:f2:f7:f4:a5:80:23:3a:
c7:09:ea:aa:ad:51:c4:a7:c9:b6:48:a4:8a:34:50:
48:bd:c2:27:40:f9:4f:2c:93:da:1b:25:9f:f0:1a:
db:6d:8c:6e:10:c9:59:cd:71:a1:5c:23:01:cf:4f:
03:d1:0c:b8:64:ce:0e:04:68:64:ba:77:20:37:dd:
b1:06:ef:26:03:09:c4:08:c8:e1:17:0a:84:d1:3c:
62:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0E:40:80:BB:21:A5:7A:16:20:AA:DE:38:09:3A:36:6A:10:8E:33
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6a:71:f2:25:38:f5:2c:f6:47:cb:15:50:50:cd:b9:2d:58:
ca:01:ca:46:cf:85:b7:96:58:e6:4f:f4:0b:46:af:32:f9:e0:
af:6b:b4:f1:55:89:7b:3d:14:8d:a2:25:b7:a8:8d:ed:d2:43:
30:d6:60:76:7b:db:b1:54:a1:5d:b3:6e:c6:cf:01:04:6c:79:
45:65:00:ad:21:46:6a:23:67:06:14:b2:46:50:13:62:79:06:
ce:25:63:63:8f:5b:e1:b4:b2:c6:05:b7:0e:c5:8e:ac:c6:a9:
f2:96:cb:f8:40:13:07:d2:f7:58:78:37:c2:e9:67:b6:21:4e:
26:e8:ba:fa:d4:6b:ae:10:7c:7c:8a:98:4e:cf:9d:98:ea:26:
87:d9:82:a5:46:35:c1:e8:cf:47:e1:7c:7b:02:28:aa:3c:a1:
a8:9b:7b:9c:67:c9:b7:31:24:7f:6f:ab:21:a9:85:67:d7:cf:
b1:b7:7a:61:36:8e:92:8b:e9:85:f1:be:e2:59:0d:74:ec:50:
b6:e5:3d:e6:38:f8:21:57:79:89:08:49:0c:b1:89:15:ae:67:
ea:e4:96:52:60:8d:99:b1:a1:c7:71:ee:d0:06:e7:29:8d:16:
2c:59:05:e4:b9:03:3d:48:a9:32:59:83:f8:8f:a0:7e:cb:15:
59:08:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:30:35 2026 by rpki-client