This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
File: DvgMyei0RaB_7srAr8WeQtxxAmM.mft (raw, json)
Hash identifier: 2jDNQDeJGg1zZBnuI91DId2cGVc0GPNxYEPqXu0V97M=
Subject key identifier: 51:6F:FC:87:16:6E:9B:42:03:69:B3:C0:A1:06:DB:B0:4C:5A:4B:1B
Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Certificate issuer: /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Certificate serial: 019BFA9C10FE6D25DDAB1D91A6B5656D29AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
Manifest number: 053B
Signing time: Mon 26 Jan 2026 14:01:30 +0000
Manifest this update: Mon 26 Jan 2026 14:01:30 +0000
Manifest next update: Tue 27 Jan 2026 14:01:30 +0000
Files and hashes: 1: DvgMyei0RaB_7srAr8WeQtxxAmM.crl (hash: JtjbOs8aTmXYF9daGOtJsTXT0hMMlb4BOh0w5TyItqQ=)
2: Xm1NyxAzrsVfmOit8GLDJIUr3T4.roa (hash: FBeGZgtFYVn2jU+qekRgjUacFdjECcP1nPbLiXskECw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9c:10:fe:6d:25:dd:ab:1d:91:a6:b5:65:6d:29:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Validity
Not Before: Jan 26 14:01:30 2026 GMT
Not After : Jan 27 14:01:30 2026 GMT
Subject: CN=516ffc87166e9b420369b3c0a106dbb04c5a4b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:ec:81:45:e2:34:c2:5a:c5:01:8a:68:10:
d9:48:f2:25:b0:cc:c7:38:09:c2:11:5c:2e:8e:bc:
41:a0:35:f1:c1:f9:e4:08:3d:99:ec:30:97:a1:c1:
b2:91:38:df:1b:b4:39:48:a9:84:89:9d:22:28:e4:
db:15:3f:16:3c:8d:52:5a:b2:11:81:4c:0b:0d:7f:
c8:11:33:be:92:af:b1:6c:c3:e2:42:1f:a2:38:2e:
56:b9:80:71:ce:72:e0:b3:b7:84:9a:08:77:85:8f:
df:79:73:9e:52:32:69:be:1b:55:fd:40:8f:46:5c:
2b:27:55:76:b1:e5:29:e5:07:00:a6:45:ea:01:39:
d4:ac:c9:4b:46:f3:d3:17:0a:3b:f9:8c:ce:cd:92:
0f:2b:b0:5a:f3:c8:b9:8a:0c:62:cc:65:cc:e6:6b:
4f:59:b1:3b:25:85:a6:80:35:71:81:81:f6:d8:a8:
db:2f:c9:f3:a8:d5:b2:73:fe:cf:54:83:88:c4:b2:
be:70:e6:df:fe:60:cb:09:33:b7:70:56:93:92:33:
8a:04:4d:b9:38:95:5b:9d:74:03:6a:5c:6e:e9:fd:
dd:6f:1b:42:05:b2:1c:e5:9c:3a:14:14:7f:86:aa:
15:b8:ff:54:a0:15:1c:1a:57:50:bb:7c:34:0e:ce:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6F:FC:87:16:6E:9B:42:03:69:B3:C0:A1:06:DB:B0:4C:5A:4B:1B
X509v3 Authority Key Identifier:
keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dc:93:5f:84:76:58:c8:37:7d:c2:f2:85:10:7a:6f:2e:ad:
80:72:c6:40:2b:03:17:42:7d:db:45:f0:28:02:00:36:f3:f8:
cd:97:c8:30:18:a2:31:6d:4b:93:a8:63:49:da:42:b4:34:60:
a6:73:75:77:9e:23:91:b1:c1:81:23:b6:4e:57:15:98:18:48:
71:d6:29:c1:30:37:2d:a9:a6:99:8d:cd:c9:93:db:94:65:a5:
f2:93:b1:fc:e6:76:eb:73:94:01:ab:54:80:f4:27:62:e6:8a:
c0:dc:2d:76:5f:b9:5b:e2:98:9d:a6:d8:45:c6:75:89:03:97:
3a:f2:9f:48:48:c0:af:82:9b:37:c6:f3:33:94:15:df:54:9d:
bf:4d:b7:0e:15:a5:a9:60:3e:18:be:5b:94:47:0b:cf:27:45:
70:0f:0e:ad:ab:6f:fe:bb:74:f4:39:cc:a7:8b:4e:7f:ed:7b:
cd:81:af:a5:d9:f2:48:ba:ff:0b:9c:17:45:79:2d:1b:98:28:
70:00:06:45:0d:b4:b5:13:99:62:db:21:0f:92:f9:43:14:c6:
4a:3e:a8:a4:54:ff:62:83:fd:53:47:27:a9:08:c6:a5:50:aa:
cd:fa:28:df:cd:03:3d:5e:57:e7:99:14:41:69:9d:9c:10:a8:
50:54:75:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:23:31 2026 by rpki-client