This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
File: X-U8C_w8j7VrgRkTFxREQ-DinSU.mft (raw, json)
Hash identifier: BZhTfem1TGEccUFzSM3HQUfVvFezVkQDgCnQI+2NgjY=
Subject key identifier: 7C:24:AA:70:FD:5A:24:75:EA:2A:9C:D2:5D:9C:C6:B6:9A:1E:A8:BF
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019BF2E2994AC98CB0B117651837E4444889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
Manifest number: 14
Signing time: Sun 25 Jan 2026 02:01:35 +0000
Manifest this update: Sun 25 Jan 2026 02:01:35 +0000
Manifest next update: Mon 26 Jan 2026 02:01:35 +0000
Files and hashes: 1: 3sJ6F883UE4toONTcAneJxfZCig.roa (hash: ufXqJ4GZO0y/jJw+oVkfQY3Jd0w/SaLieFtWrMb5hjA=)
2: WT8soFb0G2lfILU2qZ5H18IGdzM.roa (hash: UUtAQrRto8WY3idcaUY5KVtJEryFTswf23QBr9mGoPQ=)
3: X-U8C_w8j7VrgRkTFxREQ-DinSU.crl (hash: MTxXllwOBACd33y3XHDPMYqFv4oKgSTam+cfuTae87w=)
4: ZfXj0Cs-w3tqd3nR2H1CQe4DSjk.roa (hash: R+MPHlzGGciK9ag+NGwWU+mFvTI8dUefoBQsCIk0KTk=)
5: g0ZAxJSuPSJG1gQOC_5v3ou5jc4.roa (hash: 0LxCPswYncb2CNHosJNX9XRvk+qmpVFru7FGUDOFYJc=)
6: rwGpW4rplS3HHtgebmY44eIYOGo.roa (hash: kNy2CiPdlTnpuyB9W6wLc1+xpE7hDldySuoRvEO4j5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e2:99:4a:c9:8c:b0:b1:17:65:18:37:e4:44:48:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Jan 25 02:01:35 2026 GMT
Not After : Jan 26 02:01:35 2026 GMT
Subject: CN=7c24aa70fd5a2475ea2a9cd25d9cc6b69a1ea8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:52:a7:39:4c:7a:d5:ae:78:7d:4c:39:b9:
c9:ee:2d:fd:e4:c2:50:b6:3c:77:04:ec:88:c7:50:
ae:87:64:82:d0:c6:28:c2:bf:c9:9e:82:29:6c:f6:
02:2c:84:c2:06:ef:ca:19:1b:30:bf:6f:fd:6c:2f:
8c:83:2d:f7:c8:3d:63:f6:1d:0d:c5:92:a6:70:b7:
24:45:2d:31:3d:76:6b:05:2d:09:4f:ec:60:93:ff:
f1:01:b3:90:a8:7c:93:ff:51:5e:55:54:13:cc:7a:
dd:be:04:61:25:c3:0e:06:6f:bc:79:f2:30:46:e7:
5d:22:ee:03:ed:a6:a9:4f:07:4f:ef:c3:53:a4:2a:
e8:d1:37:58:ed:a9:1d:ba:db:36:74:90:bd:2b:2d:
cc:d2:01:1c:a9:37:3c:4b:7e:c7:80:52:ef:79:1d:
fd:1c:36:14:93:5b:67:ad:ef:57:7d:22:7f:c0:40:
9c:d4:aa:c3:b5:79:66:9e:10:16:3a:16:84:83:b4:
e7:16:86:a1:d1:8d:bc:a0:9c:a1:1f:cf:0d:57:04:
1d:dd:9d:1e:49:5c:04:7f:0b:13:a3:4a:f8:a0:1a:
d2:fe:c0:8d:9d:86:43:a7:6f:c1:28:b4:8e:3e:f3:
5a:68:6a:17:63:8c:05:b3:d8:d9:2a:69:ca:51:fe:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:24:AA:70:FD:5A:24:75:EA:2A:9C:D2:5D:9C:C6:B6:9A:1E:A8:BF
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8f:d0:05:67:ec:42:b5:ea:73:39:30:d3:48:40:06:a1:9c:
db:95:19:91:f5:90:45:99:00:fa:ef:a1:71:04:6c:56:e6:8c:
ba:5c:57:57:ec:55:be:5b:4b:f6:15:8f:f8:e2:a8:02:bb:3f:
33:b2:22:55:fa:0a:0a:6d:8e:0b:89:20:25:a9:60:47:be:a9:
33:68:f5:a0:f3:09:59:c1:1b:00:39:db:2c:63:16:66:74:75:
1e:ac:b6:f2:7f:91:2b:17:b4:4a:56:e0:10:2d:27:98:00:ca:
aa:e6:c5:fa:dd:23:db:8f:fc:21:07:5e:2a:a7:93:2a:66:1b:
c9:6e:8e:6e:63:7d:c1:08:83:7c:f9:a2:35:55:e6:c3:2f:22:
b9:1a:12:2a:8a:7e:71:42:3c:98:e7:66:4b:23:8c:89:b1:f7:
4e:7c:a8:50:5f:a8:a0:e1:eb:79:cd:c8:6c:94:44:82:eb:fc:
88:f9:52:ec:38:4e:4f:bd:79:90:25:05:5c:4c:51:60:c1:84:
a9:be:12:b8:53:06:bd:24:b8:ce:be:5d:ea:71:0a:f8:a7:b9:
dc:9a:2d:bc:14:df:0a:05:f8:1a:41:df:ad:3d:66:2e:ed:f8:
15:cb:dd:ec:71:90:44:1d:f5:5a:a4:fd:c9:15:97:0e:8c:8b:
b2:68:2a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:36:38 2026 by rpki-client