This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
File: 7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json)
Hash identifier: JMt+IiAFBLpKuQ8YRkCCOFQqel7lunN743Zb1ev0Sz4=
Subject key identifier: B6:00:DF:BF:7A:76:60:6E:90:EB:A8:48:43:EB:CD:A0:F1:48:20:82
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial: 019BF5070511E43965E44E9961A2CC27A8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
Manifest number: 0DC5
Signing time: Sun 25 Jan 2026 12:00:36 +0000
Manifest this update: Sun 25 Jan 2026 12:00:36 +0000
Manifest next update: Mon 26 Jan 2026 12:00:36 +0000
Files and hashes: 1: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: rEEjU2s03vyVq7c/vMRsOU5yEkBo/T5cmqb2v3kb+CQ=)
2: IUQL4amfQO9d-_mgLtZ7DQFH5lY.roa (hash: IsUWoVhHWQJZPcVz+Jmd+g0d0TZ9a4iovWnR9SxBaAE=)
3: TzXS_x8rKVrlwoD9v8BqI47TEeo.roa (hash: rfp9dhL99iZjM0D0pF2I+WlGwD2HUU0+KsiqjFKP2sQ=)
4: yL6M7fiRcsCEJ9f3V81bkWsxt2k.roa (hash: hMXJaJNre81zhT3gUCMgF7Syv2XmMikjjKFj903XrQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:05:11:e4:39:65:e4:4e:99:61:a2:cc:27:a8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
Validity
Not Before: Jan 25 12:00:36 2026 GMT
Not After : Jan 26 12:00:36 2026 GMT
Subject: CN=b600dfbf7a76606e90eba84843ebcda0f1482082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:0f:68:f0:1a:05:89:76:2d:64:e9:43:27:
f2:93:d6:66:3f:f7:01:42:11:b6:57:a4:ff:20:7a:
3c:76:09:f3:87:b1:09:18:bf:e2:92:71:11:3f:c4:
4d:9f:74:2d:be:b5:b7:87:e8:87:29:6d:65:a1:bf:
71:1c:3d:6b:8c:e4:67:cd:60:c2:93:92:32:eb:fb:
44:cb:4f:07:5f:d9:6b:83:5f:7c:74:ff:07:84:3f:
56:65:66:b5:78:0a:ae:dd:b9:c0:53:25:e3:f3:ed:
f3:a8:ca:37:dd:fe:1e:35:15:62:47:92:65:5c:07:
6a:26:0b:90:49:d4:f6:b5:5d:ff:56:31:8e:e3:48:
52:ef:25:5b:33:15:66:11:b7:c3:b8:43:7a:3e:5b:
2a:79:cd:0c:2d:42:f2:7c:43:d2:67:bc:eb:f3:c6:
3a:5e:04:78:24:be:5f:9b:a7:cd:0d:74:b1:5a:d7:
d5:a5:da:9a:5a:be:4f:ae:b9:da:f6:b8:6f:68:4c:
e8:d3:b8:73:e0:f2:d7:7d:20:1a:c2:03:40:61:c7:
fd:e1:10:9a:30:ae:3a:92:25:28:ec:13:8c:46:c4:
34:ec:dd:26:14:eb:be:79:4f:b4:6b:55:0e:0a:1e:
e7:b6:88:08:d1:2a:05:36:ff:fa:40:c5:25:20:a9:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:00:DF:BF:7A:76:60:6E:90:EB:A8:48:43:EB:CD:A0:F1:48:20:82
X509v3 Authority Key Identifier:
keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e4:47:4e:23:70:da:c5:8e:59:51:ca:93:4d:21:b7:77:5d:
1b:1c:f0:ae:0f:d0:48:43:1a:54:48:27:e2:ea:22:af:b0:76:
4c:20:6a:57:47:ba:bd:27:43:4c:1d:33:77:72:b8:d3:72:02:
57:09:ed:d2:35:d9:c4:a6:fe:bc:c9:13:b5:5a:27:1d:87:0d:
bd:70:be:c3:7e:95:83:f1:e4:45:61:c2:c5:26:14:32:a9:f0:
26:3e:be:cc:a8:38:d3:eb:9b:39:1f:00:77:ce:f5:6d:0b:b3:
97:1a:83:62:26:39:99:d6:67:d5:71:05:0d:20:2b:a4:f5:a6:
03:99:5f:e6:1e:21:6f:4c:c0:21:d8:82:eb:f9:73:d7:bc:a5:
08:36:08:a9:90:65:48:ce:ab:8f:a8:19:98:a9:b2:66:96:84:
5e:3a:81:1d:cd:29:7e:59:3d:a9:af:b8:7d:4d:83:2a:e6:4b:
23:c1:7b:9c:19:98:b8:10:f8:d9:45:cf:b8:67:a5:62:cf:b0:
89:50:fe:e1:63:63:d3:cd:95:12:8a:f7:eb:74:f7:6f:15:04:
31:17:c8:3f:e0:37:bd:43:e7:56:04:44:e8:92:13:d7:4e:fa:
bc:de:93:15:ad:73:53:e4:a4:a4:37:cd:c6:68:56:08:11:67:
93:e9:c9:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1BwUR5Dll5E6ZYaLMJ6itMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4
ZWJiYjQwHhcNMjYwMTI1MTIwMDM2WhcNMjYwMTI2MTIwMDM2WjAzMTEwLwYDVQQD
EyhiNjAwZGZiZjdhNzY2MDZlOTBlYmE4NDg0M2ViY2RhMGYxNDgyMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3goPaPAaBYl2LWTpQyfyk9ZmP/cB
QhG2V6T/IHo8dgnzh7EJGL/iknERP8RNn3QtvrW3h+iHKW1lob9xHD1rjORnzWDC
k5Iy6/tEy08HX9lrg198dP8HhD9WZWa1eAqu3bnAUyXj8+3zqMo33f4eNRViR5Jl
XAdqJguQSdT2tV3/VjGO40hS7yVbMxVmEbfDuEN6Plsqec0MLULyfEPSZ7zr88Y6
XgR4JL5fm6fNDXSxWtfVpdqaWr5Prrna9rhvaEzo07hz4PLXfSAawgNAYcf94RCa
MK46kiUo7BOMRsQ07N0mFOu+eU+0a1UOCh7ntogI0SoFNv/6QMUlIKkBaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYA3796dmBukOuoSEPrzaDxSCCCMB8GA1UdIwQY
MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It
ZTQ1ZmE2NGQ0ZDJkLzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk
LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+RHTiNw
2sWOWVHKk00ht3ddGxzwrg/QSEMaVEgn4uoir7B2TCBqV0e6vSdDTB0zd3K403IC
Vwnt0jXZxKb+vMkTtVonHYcNvXC+w36Vg/HkRWHCxSYUMqnwJj6+zKg40+ubOR8A
d871bQuzlxqDYiY5mdZn1XEFDSArpPWmA5lf5h4hb0zAIdiC6/lz17ylCDYIqZBl
SM6rj6gZmKmyZpaEXjqBHc0pflk9qa+4fU2DKuZLI8F7nBmYuBD42UXPuGelYs+w
iVD+4WNj082VEor363T3bxUEMRfIP+A3vUPnVgRE6JIT1076vN6TFa1zU+SkpDfN
xmhWCBFnk+nJyw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:23:14 2026 by rpki-client