This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier: sbJq1MVOaoOhDsR1v6KgBj9osek6+abDMdb43yvaD8g=
Subject key identifier: 5D:54:FA:47:3B:29:3E:C1:15:10:D1:1E:86:C1:4A:62:CC:D0:FD:87
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial: 019BF4D08124E4A47C4397C5BFA2FC7AB244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 11:01:03 +0000
Manifest this update: Sun 25 Jan 2026 11:01:03 +0000
Manifest next update: Mon 26 Jan 2026 11:01:03 +0000
Files and hashes: 1: 8q11ZXlsuNY-5BnKL-DZjg8yXCc.roa (hash: ouWFvShqIiSVhc7XwLMg1RvjjhIXPIC2TEXQAFnoIdY=)
2: NWmG-3ib3K9ny2X2v2uTxM0DQqA.roa (hash: CGIiGH/Yy5fY3u/pl6DzCecfrnnhokhuxjI5pup6gIw=)
3: W0KBm5HEcFXtVXifacsZfmIqvhY.roa (hash: W8Izm3ucgflTtw/kXP/v/wyRWH1PXzlBhUPfbe4tfxo=)
4: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: MHTbuDUjlFA5RYX83onXmgKZkc/NdNwesMYYxlCxzk4=)
5: hFwOd0_YEOVcJRwShM4Rz_JX8w4.roa (hash: 2ZVK7MUTm4O+cKvEyp+XBJuaZn8IX75XJYPFZQbyyqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:d0:81:24:e4:a4:7c:43:97:c5:bf:a2:fc:7a:b2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
Validity
Not Before: Jan 25 11:01:03 2026 GMT
Not After : Jan 26 11:01:03 2026 GMT
Subject: CN=5d54fa473b293ec11510d11e86c14a62ccd0fd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:77:8a:8f:da:c6:b2:1d:c7:dd:89:51:fe:
ee:37:76:17:06:c1:6a:81:be:41:05:5a:f4:26:42:
32:9a:55:9d:08:ca:47:e4:0d:94:6d:b8:cd:ec:d7:
d5:10:97:df:0d:5f:e3:09:fb:f9:2e:f4:21:44:d5:
e6:63:a4:c9:aa:46:bb:49:29:4e:50:6d:5e:cf:e9:
54:70:08:b1:9d:a9:76:0e:d9:79:b9:a8:e4:2c:c0:
97:99:4a:20:2c:aa:5c:ea:22:a6:2f:cf:2b:bb:4b:
cc:9d:aa:52:01:51:73:fc:d9:60:0e:6c:70:cb:da:
5a:a1:71:c1:2c:83:02:48:65:a7:3b:e7:18:b3:55:
1f:36:f9:f6:f7:24:1f:45:c4:07:bb:6b:ac:f5:b1:
40:ef:92:25:b4:a8:04:ff:c5:2c:25:93:b2:4b:4b:
d3:32:75:b1:10:99:5a:9e:bd:aa:c4:83:82:f8:33:
ec:f1:42:32:54:b8:62:87:d7:fb:31:df:1a:14:52:
82:01:81:d9:43:95:56:df:42:79:2d:ab:4a:b7:63:
a2:3f:d7:d2:90:47:8e:a7:31:80:f6:c0:81:4d:a6:
41:de:2b:52:4d:0c:2d:84:14:da:bb:46:32:f9:00:
35:1f:e1:45:f6:ec:86:1c:11:90:65:5f:20:43:f5:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:54:FA:47:3B:29:3E:C1:15:10:D1:1E:86:C1:4A:62:CC:D0:FD:87
X509v3 Authority Key Identifier:
keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:32:1c:bf:f1:b3:10:ef:85:2c:e7:65:5b:c8:01:ba:40:70:
90:76:32:11:96:d8:88:5d:69:61:2b:e0:cc:2b:6e:a2:5a:07:
c8:81:2f:0d:4e:f4:fa:c1:72:6c:6f:23:a2:f3:49:65:0f:c2:
99:ae:35:85:9d:99:3d:56:53:2a:0a:a6:bf:a0:0e:e5:1a:40:
c4:c1:8c:f2:e7:ad:6b:92:2b:de:7d:01:f2:4c:62:00:42:7a:
48:a4:ed:d9:51:cc:07:45:c3:ee:cf:16:2f:8e:6d:ce:6e:42:
8f:58:8a:a0:98:80:d6:e0:57:56:e4:16:01:8d:71:9c:0d:92:
f6:1d:9e:0f:84:20:5f:97:54:90:0c:0c:d8:ba:f6:d5:e9:b2:
33:c9:ba:a9:be:82:e2:0c:4f:31:f6:d1:68:d7:d7:fa:8a:43:
57:4d:fd:34:7b:3c:db:d8:98:8f:1d:46:bb:45:dc:c4:10:ab:
37:c2:a6:87:02:6f:f6:de:c5:4d:c2:5e:2b:f5:3b:75:97:0c:
0a:bc:c4:9f:69:8e:2b:b0:25:69:78:c9:b2:45:57:40:c6:18:
ca:86:ec:dc:56:a5:50:51:de:69:62:8a:21:49:09:33:99:44:
af:91:38:c6:ac:cd:70:1b:4a:92:25:5d:c7:ba:20:89:95:76:
b4:ca:1b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:32:59 2026 by rpki-client