This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
File: IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json)
Hash identifier: C3Aws1CroJuY8kZuMNBHDi+zsYkw+nsbeZlQZ+pYUAI=
Subject key identifier: 6A:95:D9:D9:3D:A5:63:40:B9:20:2A:E7:B5:19:13:B7:26:ED:3E:7C
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Certificate issuer: /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial: 019BF8AD42A86979005DAD3685C1D153E230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
Manifest number: 17E9
Signing time: Mon 26 Jan 2026 05:01:02 +0000
Manifest this update: Mon 26 Jan 2026 05:01:02 +0000
Manifest next update: Tue 27 Jan 2026 05:01:02 +0000
Files and hashes: 1: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: Q+zaZPCA/NQJKtyyAXcmEk9+PoTejlyahOpJHdG/fFU=)
2: Oe7wTUeOifNOrZPE6s11kQOKX-4.roa (hash: gsLsf04/fdLsccMrWMJ4qLZbQv2ayrUfRSE5fjnchYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:ad:42:a8:69:79:00:5d:ad:36:85:c1:d1:53:e2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Validity
Not Before: Jan 26 05:01:02 2026 GMT
Not After : Jan 27 05:01:02 2026 GMT
Subject: CN=6a95d9d93da56340b9202ae7b51913b726ed3e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:30:7a:bd:a9:b6:6e:0c:c7:45:7d:bd:43:
a0:44:67:4e:78:af:da:b5:c2:63:e0:71:0b:fd:a8:
6c:eb:1f:32:41:6d:73:03:d4:07:d1:06:e7:3b:d5:
81:34:dd:6b:51:40:d4:56:14:18:a8:ff:90:d3:39:
15:22:d8:54:3d:1b:d9:97:44:cb:ad:85:0d:33:a0:
c9:70:79:06:a8:f6:86:4d:51:ad:c0:27:e1:ed:f0:
ec:ed:e0:94:05:6b:02:27:39:ea:aa:04:d4:ec:26:
45:62:e8:78:3e:a3:d0:e0:ea:38:dd:36:df:63:a5:
ef:06:08:92:52:19:d4:7a:b1:8c:f3:66:f6:53:e4:
e4:33:a2:81:ad:bc:ca:13:8a:02:fd:d1:2d:de:4c:
47:7d:27:9f:26:c1:eb:18:1d:2a:bb:c4:80:2d:99:
e8:a5:18:76:60:01:6e:f8:e9:b6:b5:fb:8f:74:0b:
96:86:8a:3c:a8:df:3f:22:dc:6e:81:f5:c7:69:ca:
db:0d:12:6e:72:38:6e:8f:0f:30:a0:6e:19:37:0e:
d5:df:a3:f4:9c:78:f9:7f:1e:ca:f8:7e:26:37:40:
b9:0e:d8:fe:36:c3:cb:9d:39:76:16:05:48:e6:37:
4f:42:cd:c0:2c:c8:9a:c1:04:2e:ab:44:5a:49:e5:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:D9:D9:3D:A5:63:40:B9:20:2A:E7:B5:19:13:B7:26:ED:3E:7C
X509v3 Authority Key Identifier:
keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:98:8d:ca:7a:6d:3c:50:ae:f3:3e:d8:db:8c:80:b0:22:e5:
82:37:03:37:72:3f:75:7f:73:7b:b1:bd:0c:e3:72:a0:50:eb:
98:1f:d8:80:b5:41:17:05:bb:c0:d3:3f:c6:0a:64:86:0f:41:
1e:d0:11:a4:1f:b2:63:cd:09:5a:d0:d4:48:db:74:fb:96:60:
09:a2:d7:ff:d9:c9:1f:fe:dc:8e:e0:9b:58:2b:82:c0:66:af:
1b:d8:24:57:0e:7b:86:c2:db:4b:17:ec:b9:22:03:1b:21:69:
d9:6e:6e:21:3d:30:49:74:91:cd:57:e5:a6:8e:2e:47:3a:94:
dd:44:8c:32:02:42:c5:05:b5:35:25:58:d3:56:57:2c:5a:31:
00:24:03:35:31:53:26:7b:3f:77:b5:e8:03:49:db:4d:c3:c3:
93:fd:9f:30:a5:7d:67:76:9d:8a:03:62:b6:76:9b:d9:20:dc:
c2:b2:97:13:2d:ae:0b:36:f9:57:8a:c4:3b:3a:ec:30:63:81:
75:78:1c:1b:3c:e2:fe:c9:a2:d4:46:5f:c0:d7:b9:e6:26:d7:
92:bc:04:ea:00:16:ff:ec:6b:75:8c:c7:46:cb:ca:74:2e:f3:
d7:72:37:35:df:7d:6d:6c:8d:24:7f:87:f1:0e:cf:47:c8:bd:
d5:64:9d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:09 2026 by rpki-client