This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File: a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier: HiOuN9hc9X7vhfaEoLqZIJVK9b1aytUXtDZd/HkreZw=
Subject key identifier: 34:1A:01:E7:36:89:72:5D:4C:FA:4B:04:27:20:89:67:92:B2:5E:1C
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer: /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial: 019BF4631324FCF0991777E75A069DB4FB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number: 0816
Signing time: Sun 25 Jan 2026 09:01:32 +0000
Manifest this update: Sun 25 Jan 2026 09:01:32 +0000
Manifest next update: Mon 26 Jan 2026 09:01:32 +0000
Files and hashes: 1: KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa (hash: 82rT1wn8tLHS3yTCKW0vJmoxGtSf+pDEWCX5BqeTJXM=)
2: WjMwl8ZfVOdoyhMOTA8BMehWEJI.roa (hash: RHZCcknMsS5tx01/QhJWB8dlrXaXtmtm/9S2WPp95p0=)
3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: nRcle2VXN8t83UrEXUzK/nZJ/79yyxmhiDMir9479QQ=)
4: kKa1XAZi28YxfpB3mEQct4rM5D8.roa (hash: WRwHyOAs556xA5lR2SanPEOIWdbcPQ5+gONgps5Y/Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:63:13:24:fc:f0:99:17:77:e7:5a:06:9d:b4:fb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Validity
Not Before: Jan 25 09:01:32 2026 GMT
Not After : Jan 26 09:01:32 2026 GMT
Subject: CN=341a01e73689725d4cfa4b042720896792b25e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:59:31:3c:13:80:e9:61:16:c7:a4:5d:ad:34:
62:e5:0b:93:a8:d6:39:63:14:6e:d5:6a:1d:a8:f7:
f4:d1:b6:04:3f:2c:e1:eb:e5:c7:3c:51:a9:18:14:
7c:2b:c5:7d:b3:b4:56:1c:fd:9d:51:32:34:71:85:
24:48:8f:e1:24:56:a0:80:cb:89:03:04:c1:d6:96:
fb:35:93:3c:48:36:be:66:99:c7:ac:4b:3c:69:9b:
3f:8e:54:40:65:60:48:da:4d:91:6f:c7:0f:59:2e:
75:ca:88:df:3e:fd:50:e1:75:dc:b5:1c:ef:9c:a4:
4a:2a:e7:ad:21:af:df:9b:5a:1b:66:f3:17:aa:bf:
bd:ae:0a:f3:ac:3b:6b:a4:22:e5:f6:d6:63:3e:3a:
10:36:1e:b2:cc:15:f1:c9:df:f8:e1:9e:d3:0b:fb:
85:89:14:22:84:93:14:85:f0:06:a8:84:ca:65:0e:
5c:7c:75:68:a3:ab:9d:e4:84:e6:c3:52:55:01:ac:
76:5b:ca:76:d2:88:2a:27:8a:55:4a:b6:03:7f:b3:
d0:a4:24:75:68:56:3b:90:2b:8e:1b:d9:6b:b8:78:
78:a2:8f:ea:0e:0d:27:05:53:60:28:cb:dd:e0:e2:
92:f4:00:4b:f8:5c:dd:4d:89:47:d0:9e:76:4b:f8:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1A:01:E7:36:89:72:5D:4C:FA:4B:04:27:20:89:67:92:B2:5E:1C
X509v3 Authority Key Identifier:
keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:93:13:a2:68:89:71:26:cd:36:c3:bc:39:6e:51:32:03:34:
3b:71:9f:ec:0e:7a:bb:81:cf:7c:59:2f:56:94:47:e3:b4:73:
97:98:9c:95:dd:c6:97:19:b4:cd:5d:27:ea:47:78:c0:05:ef:
67:18:e2:5f:fd:5b:f0:fc:9f:8c:39:2c:cd:6a:3b:61:32:1b:
2a:e6:7e:c3:1b:22:54:dc:0d:9a:4a:b4:8d:4f:1b:33:5a:15:
4a:b1:59:65:4e:d6:b4:2f:0f:92:15:f8:67:2a:a1:dd:e7:cd:
5a:5a:1b:a4:79:0c:86:25:29:cb:78:c1:f3:92:a2:d6:d5:d4:
98:df:8b:ef:bc:dc:e4:26:24:be:9f:36:f9:96:34:37:68:51:
44:64:7b:c7:6e:be:7f:d7:ae:be:75:c3:5a:be:3a:d7:ac:fb:
ad:74:e1:02:67:f2:e9:b8:48:08:5c:61:26:61:39:4c:5c:ad:
bf:c1:8c:1f:1c:f0:ad:70:20:d7:ca:bf:35:4a:36:9a:69:50:
28:a2:05:a9:14:40:ec:97:8a:13:4b:fb:a9:a9:45:93:c5:ae:
3b:2f:9f:ee:2c:e2:63:79:10:52:f9:d8:a0:4b:08:22:33:d7:
53:41:c9:a9:bb:33:d1:9d:24:b1:66:b9:81:19:aa:a8:ae:e7:
00:51:c1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:28 2026 by rpki-client