This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: vP3wjU4jAcUc/V7+zXyOTZf1lBg/HUFAuWORUK/Em3s=
Subject key identifier: 66:49:60:65:9D:88:FC:38:18:DE:C3:E9:E3:00:4A:D6:62:22:A3:2C
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 019BF79A7260F51AE075F7BE4FA7370462AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 0E2D
Signing time: Mon 26 Jan 2026 00:00:52 +0000
Manifest this update: Mon 26 Jan 2026 00:00:52 +0000
Manifest next update: Tue 27 Jan 2026 00:00:52 +0000
Files and hashes: 1: E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa (hash: A+TYWIOmRpCeA175k18MhvZXgytX5Jk9nQ0FQ6VBaqA=)
2: Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa (hash: JfuU3qW2LSn3VZ4RrrVe6pLBVqp+kUuKYjX2iO0ocCI=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: F5mqfRjtTlerMEJa4fK6kMAj1yy0ZHPOdFKAGYs9SiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:9a:72:60:f5:1a:e0:75:f7:be:4f:a7:37:04:62:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Jan 26 00:00:52 2026 GMT
Not After : Jan 27 00:00:52 2026 GMT
Subject: CN=664960659d88fc3818dec3e9e3004ad66222a32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:49:07:ec:de:f1:26:64:fa:43:4b:e9:c5:
10:87:d4:73:ca:90:8d:6f:25:f5:e7:e1:42:40:4c:
b0:9b:73:eb:0b:30:8b:48:3c:1d:2c:9a:4a:e7:63:
d4:b1:23:6a:d2:70:c8:a3:81:ba:7a:3d:c2:08:f7:
0b:4f:bd:54:30:50:3c:65:e1:af:cb:c0:b9:7a:5b:
50:d3:7c:a1:c1:f2:b4:3a:c1:de:12:6d:63:50:82:
9f:c5:1f:d5:b1:64:cd:99:5b:98:21:05:87:73:b7:
0f:88:74:d6:63:5e:81:09:75:c8:0d:94:fd:93:59:
cc:95:39:34:a6:4d:74:60:55:ab:ef:b6:51:fd:77:
ed:89:b1:f4:94:31:63:59:59:87:42:77:fc:63:dd:
d5:1e:e6:bb:3c:7a:84:c5:1e:a0:60:be:f3:f3:c6:
2d:80:d8:42:28:18:ec:2e:8d:f1:38:c5:a5:f3:6b:
6f:7f:49:02:d2:30:67:bc:09:b8:db:c9:a9:62:22:
c5:71:c3:7d:1f:a2:32:f2:2d:3d:5d:ba:dd:b5:be:
ce:50:60:8b:79:2b:b0:d5:42:37:1b:04:5c:97:36:
7f:b4:26:c1:37:b6:61:3c:3b:b8:93:a5:a9:c1:fd:
27:96:5d:46:04:63:fc:37:22:32:38:a7:7d:17:f3:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:49:60:65:9D:88:FC:38:18:DE:C3:E9:E3:00:4A:D6:62:22:A3:2C
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1d:42:11:1a:2b:3c:36:6e:f4:c3:bb:cb:6f:34:ae:14:23:
67:c4:86:82:52:30:c8:68:6d:23:84:66:aa:8c:d3:29:d3:be:
17:57:92:e9:57:99:03:7d:5f:2e:77:d8:30:47:a0:fb:c4:5f:
5e:46:83:c5:ac:b8:02:07:2f:86:fd:ed:24:c2:28:5c:72:13:
c5:ea:de:84:07:c0:fb:78:5a:d7:3d:cb:83:be:b5:15:63:9b:
07:72:6b:1d:35:6c:10:8b:84:10:c3:4b:2e:f1:0e:4a:31:67:
d3:a6:d9:e1:da:c8:a9:82:90:25:e0:d1:c6:7e:00:d7:dd:4d:
5f:ea:65:c3:a6:92:fe:f1:e6:65:45:b3:61:f9:a5:92:a7:d6:
a6:d3:46:cb:9b:1d:43:45:43:1a:eb:c6:bf:cd:0d:f1:ca:db:
c9:a0:41:97:7c:1b:b2:ef:6e:f4:f9:a9:2a:78:e9:bb:97:3d:
a5:47:8f:ed:27:f8:01:34:b8:ee:b5:c3:82:43:ec:4b:2d:1e:
7a:e8:88:e4:3c:14:14:70:60:83:8f:df:37:3a:c1:98:5c:0b:
f4:f1:e6:f4:4d:3f:ed:1f:ad:30:53:64:c3:7c:6a:12:8c:26:
e7:00:89:48:62:6a:90:5e:28:83:d4:1a:94:db:de:4e:00:2c:
bc:a7:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:46:24 2026 by rpki-client