This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
File: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft (raw, json)
Hash identifier: 71S9uA2b0OLH7zpIvwHnemjGQXmjNE9Xl4BV0GOrHiY=
Subject key identifier: D7:CF:04:55:13:3C:AC:8E:B5:C0:3D:3D:0B:83:CD:6E:46:B6:9F:B7
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 019BF876878E108EDCB9AB04D2D35943017D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
Manifest number: 17F3
Signing time: Mon 26 Jan 2026 04:01:15 +0000
Manifest this update: Mon 26 Jan 2026 04:01:15 +0000
Manifest next update: Tue 27 Jan 2026 04:01:15 +0000
Files and hashes: 1: 1-5huHUSJrcEvNTSiOAbVeQAMFgs.roa (hash: DJ99TC+q4xxss5vawQVLmXuez0d5nwvstY73IE5ysrc=)
2: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl (hash: IleEuJPhFxbLeVu8C3WRcmtae2yl3vMmF67hnmGOX4E=)
3: LrQ0vm_GIspdaaQ4ARH_PykzBXI.roa (hash: 9ZfR3ZtX3CAXZFDFgdJtkb7R/TyhsP5TAZR/1ws1AbQ=)
4: jep-7aYtEfab_WIlqXn5chr3Or4.roa (hash: TnIyAfIe+wdHdRGN4Ts6bBZJrV39Tpq22CeFLNqBbQ0=)
5: uxoBX2tmeZVjQ29keitWoq9xUoQ.roa (hash: 1gcoMG0xFgjZ/0XZ2WNsJIV6br76evfUP3Uy2y4mCNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:76:87:8e:10:8e:dc:b9:ab:04:d2:d3:59:43:01:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Jan 26 04:01:15 2026 GMT
Not After : Jan 27 04:01:15 2026 GMT
Subject: CN=d7cf0455133cac8eb5c03d3d0b83cd6e46b69fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:30:60:1b:66:bc:6c:6d:25:e8:e8:c7:18:
86:43:1c:86:cc:9f:74:e6:c7:81:89:0d:4e:4f:88:
9f:05:1e:2f:37:a2:52:68:2e:68:d2:66:76:20:36:
5b:00:56:2f:2c:2f:d0:16:f0:93:c0:d4:fb:8c:16:
6c:e6:1d:dd:6f:f4:e1:c7:c5:8d:66:d7:ed:21:f0:
7a:d8:a5:c0:6d:e3:0f:fc:8c:91:be:a6:7a:94:a8:
fd:80:93:20:03:74:c3:50:8c:9b:a9:e2:8d:4b:c5:
6f:58:38:7e:a4:a9:f1:fa:fc:84:36:0e:5f:a1:50:
37:b0:81:a4:96:0c:16:c4:51:9e:b3:7b:12:07:a3:
aa:4d:08:30:02:c9:0c:2a:ee:c5:85:c3:f6:eb:df:
89:41:3e:52:0a:bc:11:ba:44:59:7a:2f:c3:aa:9d:
e6:77:81:1d:43:26:b6:59:21:76:ba:84:02:da:25:
e2:cb:75:36:df:02:eb:f4:a2:49:86:42:e2:72:6c:
2d:e9:3e:d6:0e:4e:a1:86:90:54:57:91:87:87:0e:
1c:15:89:32:7f:a9:3b:e9:95:ee:3f:e9:66:28:ac:
3c:4f:72:ff:c9:11:d5:7c:22:c1:c3:0e:9c:8b:4b:
7d:cd:50:3e:3e:b3:b5:48:3a:35:67:21:da:2c:86:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CF:04:55:13:3C:AC:8E:B5:C0:3D:3D:0B:83:CD:6E:46:B6:9F:B7
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ce:de:ef:17:1c:8d:91:af:b9:c6:1a:ba:b1:ec:ed:b4:26:
90:38:ad:7d:d6:d3:a1:2c:a2:4b:c7:41:b1:be:a7:f9:04:27:
b1:0b:bc:ae:56:58:e7:fd:ce:a7:d2:f2:99:30:45:4f:92:1b:
8a:f8:cb:fc:54:5f:23:b8:e6:15:85:0f:7d:1c:dd:8b:e9:fc:
c9:51:90:00:ad:26:39:c3:a8:13:9e:e0:9b:c2:e1:8d:d9:cf:
6d:57:5b:4e:da:5c:8c:b4:5a:29:44:89:2a:8f:50:09:20:42:
e6:c8:07:62:9b:c2:23:fd:14:80:63:27:cf:40:1e:ba:61:21:
89:15:69:d9:e9:c4:a2:91:c3:dc:9e:93:00:d2:82:67:fd:d5:
ee:eb:6a:e5:cb:37:47:e7:c9:5e:83:40:82:19:99:60:17:df:
57:5f:d0:44:3b:65:10:4a:1b:36:0f:cc:04:70:df:69:80:44:
46:32:73:f2:e5:5b:13:d1:57:9a:57:b0:d8:64:9a:5a:35:1a:
78:1d:42:69:b5:30:06:39:e2:f8:42:e4:e0:c0:93:ad:26:05:
ef:52:a8:47:94:33:29:a9:0f:f7:30:2a:74:ea:22:b5:14:87:
51:f7:58:f0:db:f7:57:65:ac:7b:c6:05:7c:57:27:df:ed:3e:
57:71:9f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:47:12 2026 by rpki-client