This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json)
Hash identifier: /OYl1C2YB+b9wccMaJs4EHUH3P80nyjd02ZI5IsNA1k=
Subject key identifier: 7F:BA:C5:90:89:77:F0:33:33:9C:B2:3B:68:FF:F0:69:58:B6:C2:61
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 019BF650B1142CF2653F4EB3D72935FF5DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
Manifest number: 0504
Signing time: Sun 25 Jan 2026 18:00:41 +0000
Manifest this update: Sun 25 Jan 2026 18:00:41 +0000
Manifest next update: Mon 26 Jan 2026 18:00:41 +0000
Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=)
2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: iEUFncV/GUuovMHMdXZzG9PixDzY/IRBo2LJx8foWfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:50:b1:14:2c:f2:65:3f:4e:b3:d7:29:35:ff:5d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Jan 25 18:00:41 2026 GMT
Not After : Jan 26 18:00:41 2026 GMT
Subject: CN=7fbac5908977f033339cb23b68fff06958b6c261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:b8:e0:93:c1:65:85:a6:01:89:8c:3f:be:
70:16:27:2d:4e:ec:cb:b7:04:61:d4:34:a6:31:1e:
04:4a:74:ec:60:7f:61:9a:58:ac:30:d5:35:37:77:
d2:9f:9d:f2:83:00:d2:32:d2:5e:14:63:e7:0e:5c:
9b:cb:de:e2:e6:b4:f0:ab:93:94:af:92:5a:b4:7e:
80:cf:67:c0:11:68:fd:96:73:06:4b:9f:25:58:21:
ab:d7:1e:ab:19:5e:08:f5:f7:f2:6c:49:ca:ae:a5:
1e:60:a5:b4:17:a4:ff:83:ca:3f:7e:f3:96:7b:66:
44:77:cc:c8:33:12:9b:06:ab:f6:dd:78:85:3e:af:
95:41:4a:0c:03:fb:f1:30:bb:fa:c7:7f:d9:9c:17:
2b:5f:e1:5e:ac:75:ec:cb:4f:c8:2f:4d:a2:36:03:
b7:75:7f:cf:8c:a6:c7:55:b0:84:51:06:b1:8b:58:
2e:80:0f:83:6e:6e:8d:b0:15:d9:00:7a:90:49:a4:
32:73:8b:5c:ce:7c:31:43:92:c2:d8:df:71:22:1b:
5f:6f:f1:3c:ef:7f:51:b0:33:4b:c9:66:12:3b:a9:
0e:0c:01:6c:5e:85:9d:f1:26:2f:ac:63:2b:7a:62:
0d:95:a5:25:91:5d:61:e5:41:e0:05:55:4c:d6:36:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BA:C5:90:89:77:F0:33:33:9C:B2:3B:68:FF:F0:69:58:B6:C2:61
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4b:4c:ae:80:8f:f9:46:2b:d9:6d:5a:38:eb:6a:b3:f1:9a:
3e:97:bc:26:d9:e4:58:a8:0e:11:43:71:f2:0a:ad:76:8d:89:
49:7d:11:d0:5a:4b:b7:cb:43:6d:fc:48:6d:11:5d:b1:e4:d7:
66:22:5a:b4:1d:4b:c1:96:dc:38:91:dd:c2:d2:82:a7:83:d6:
80:32:05:70:1f:db:30:eb:27:fa:b4:5d:a7:ab:50:20:74:61:
0b:2a:6c:be:ad:45:ad:2d:c8:40:25:71:2b:ce:a0:dd:94:9c:
82:9f:64:10:ba:33:cb:e8:58:3a:96:cb:99:d2:7d:e7:e2:e8:
4a:14:14:4e:8b:56:df:67:bf:46:88:76:13:60:c7:67:c7:e3:
ba:2f:a9:ef:7b:95:3e:34:3d:70:dd:96:2c:69:68:5a:50:79:
81:8f:41:f4:84:84:06:86:cb:6b:5d:17:c1:15:18:a1:c8:d3:
44:ae:d3:ad:78:41:ea:e6:74:7d:73:59:43:33:bb:cc:5e:8b:
e3:dd:04:25:18:6f:67:40:9b:1d:a7:a6:a5:3e:60:bd:32:f4:
90:2b:79:d2:14:1c:1e:98:1e:85:1f:83:94:9b:47:11:0e:53:
cd:4f:56:78:5e:65:e0:45:5b:73:23:a3:14:9c:b9:2b:8a:3d:
f4:86:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:48 2026 by rpki-client