This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json)
Hash identifier: xzzrtV1DEXMKfoJ6jtqh8XmJRMFf8gtk4DUeYfZT5Oc=
Subject key identifier: BF:EF:3A:53:83:07:EA:09:A3:F6:02:94:5E:26:69:76:19:1C:C1:A5
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 019BF2AAD9B28E1A52A91638E8687647CD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
Manifest number: 1863
Signing time: Sun 25 Jan 2026 01:00:41 +0000
Manifest this update: Sun 25 Jan 2026 01:00:41 +0000
Manifest next update: Mon 26 Jan 2026 01:00:41 +0000
Files and hashes: 1: 2nUwwPJNj_s9fBPQ7yo03MqL_q4.asa (hash: CsSUMWf2oxlwJkwV4aRI69KhfP/gEtcH8Nazof9pyiY=)
2: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (hash: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI=)
3: OyXa5XHUgsJSBsdbc3Qrhq4QU1Y.roa (hash: Gyfd0tsIEQsaZgvjHA4zwq5b2ZqvTwYd6Np55tiRmHQ=)
4: P_IQf465IziNUba5nDDuA9mYb2E.roa (hash: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg=)
5: S80TpmMDEDlG_oVstXDtQDYfT48.roa (hash: jZSQkaiCbuv+uvY1vuqOn1jvU4dPfhAJzK6O+BcjXNA=)
6: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: XYPmCHGHACI8hzbaVSTd4F5BphnINHx5xjLtJwreJxc=)
7: ui51XHUFpfxoecFvT4ZbcqKc5iY.roa (hash: da6ufJ9bXMD7myfVTTwqLlgukGg80tnNiHNQQSUgwz4=)
8: vREpqPygKpqEUBRK1WP9YRnHT1U.roa (hash: aIOz9LGkgfShAFeGoLvJK3zSpzEcpe5gJpmAOuZIS1I=)
9: xbEhOdTGtK79EP0Hua6zp2g53GY.roa (hash: UhufiohNKNchaGiqQq0NBGvPLk1S1fa3tNlXBIgXEyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:aa:d9:b2:8e:1a:52:a9:16:38:e8:68:76:47:cd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 25 01:00:41 2026 GMT
Not After : Jan 26 01:00:41 2026 GMT
Subject: CN=bfef3a538307ea09a3f602945e266976191cc1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:08:66:f5:91:02:b5:12:27:e3:53:d4:d4:
7d:73:ef:02:00:28:76:48:5f:99:b0:61:77:74:d5:
e1:38:ab:f1:2b:a0:a4:34:8d:5e:b6:be:00:ba:f8:
dd:cc:16:1e:06:69:a7:df:64:4b:40:a9:3b:23:bf:
3f:a1:20:9b:0f:94:09:b9:16:4d:6f:72:9d:b7:c2:
ed:c4:4c:b7:9b:d2:b9:39:7d:5a:d1:cd:ec:d7:fd:
19:1e:e9:8c:a6:3e:03:47:f6:d8:39:cf:cc:19:43:
31:20:e7:94:1f:06:ae:04:3d:0f:c3:cc:54:3e:87:
88:ee:94:2b:c9:7c:ca:55:0a:0b:2f:56:b7:4b:8e:
98:65:3a:72:f1:48:b2:c1:41:fd:51:eb:6e:21:db:
41:3b:48:3e:2d:f5:9b:55:2b:6c:ec:82:dc:a1:2b:
c8:74:06:c2:8b:22:c3:7b:01:ec:2b:69:aa:9d:e1:
6a:9f:5d:b3:48:77:0d:30:87:d7:e9:88:65:4c:e3:
3b:39:c1:35:99:0d:67:05:97:14:6b:cc:93:4d:51:
be:38:52:77:1a:bc:69:f4:d7:56:f7:47:b3:bd:f0:
e0:5a:45:92:75:66:27:33:c4:33:a3:07:e5:4b:36:
80:b7:e2:3f:f9:26:6c:cb:42:43:a6:e9:1c:b4:69:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EF:3A:53:83:07:EA:09:A3:F6:02:94:5E:26:69:76:19:1C:C1:A5
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0d:22:ad:4b:b4:f4:b8:6e:59:32:fd:77:6a:5e:df:45:47:
be:3b:1b:41:c4:ce:e1:5e:73:6a:ba:3e:ec:f6:32:a7:7a:55:
12:fa:e0:47:67:47:aa:91:90:11:92:c9:3c:af:21:c2:bd:9b:
a8:12:ca:2e:cd:b5:9c:06:72:52:54:be:2c:f2:87:8d:b3:11:
69:50:c8:b3:9c:28:c5:c0:b3:f6:89:92:8b:c9:91:a5:5e:47:
1a:05:5d:37:75:16:b3:17:58:20:a4:87:42:e9:2f:24:91:d3:
33:cd:08:e7:f6:57:66:64:e3:b6:8f:5e:3b:45:29:3c:98:d7:
7e:07:af:e7:0a:93:2a:e0:34:1e:04:76:1a:c1:40:d4:24:0d:
dd:f9:ff:45:f9:ac:72:c2:c2:4f:6a:44:4d:2e:b7:b4:6f:a7:
0c:dd:13:83:50:db:9a:49:53:bf:d6:e4:70:a5:8c:43:86:b4:
b4:4a:2a:98:76:10:28:0c:8d:56:f4:b9:aa:65:4f:d6:57:bb:
09:f8:eb:aa:2f:e3:08:e6:52:ac:df:a2:ed:8a:0b:a9:c0:f2:
19:0d:0a:c7:d6:8b:e7:79:db:0a:6f:a4:66:e8:6a:32:b0:7c:
16:97:e9:47:2b:c0:e2:92:8a:24:31:10:98:e2:8f:80:ab:7c:
1a:45:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:38:59 2026 by rpki-client