This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json)
Hash identifier: XHSI5WwkKIYnNQQ2BgK19KPIDpcru63gMjrKM0X5d1o=
Subject key identifier: AC:B6:22:3E:85:15:2E:13:10:26:AD:F2:3C:5C:9E:BA:18:0C:C8:1A
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019BF3BE00BA3CB9E1B1C8C469FDE8AD7CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
Manifest number: 0B3A
Signing time: Sun 25 Jan 2026 06:01:13 +0000
Manifest this update: Sun 25 Jan 2026 06:01:13 +0000
Manifest next update: Mon 26 Jan 2026 06:01:13 +0000
Files and hashes: 1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=)
2: 7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa (hash: MHH4V/WoyGohF1n2EFtKGZHg+Qh7CQ9k4mUtJ9/Z04Q=)
3: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: hg+0QcuIjnLVakxxdN8X8k0YYXvyBpoCcN2Wnem+RQk=)
4: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=)
5: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=)
6: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=)
7: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=)
8: X0aB-vX6EDVAhk8JdQ1Jw4jClx4.roa (hash: rh/WCgNGpWe5SFzXuknTX7T5+ylOXQCOCuQbZtqKNPA=)
9: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=)
10: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=)
11: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=)
12: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=)
13: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=)
14: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=)
15: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=)
16: uPX022VTJ_bMjiHSPx4Do1vlriY.roa (hash: aq4O2cq08j8Fn88DS5wNdITiPLigSYRE0hYFpbgZqVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:be:00:ba:3c:b9:e1:b1:c8:c4:69:fd:e8:ad:7c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 25 06:01:13 2026 GMT
Not After : Jan 26 06:01:13 2026 GMT
Subject: CN=acb6223e85152e131026adf23c5c9eba180cc81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:a1:65:4b:cc:12:fa:a0:74:8d:20:32:b6:
b5:5a:17:44:30:25:ee:c0:0b:4f:d1:fc:ee:6b:ea:
2a:3e:c2:eb:02:9b:2d:76:d9:e9:5c:34:2a:ee:1f:
dd:09:90:b0:c0:53:97:95:74:a7:a2:0c:c5:a2:32:
8e:60:b0:6a:c5:cf:f9:a2:80:c5:b5:91:54:bf:fd:
54:ce:af:43:40:3d:6e:54:3b:6a:6f:b5:cd:75:4d:
b2:58:0a:74:38:0e:4a:34:f6:f5:57:0a:44:6d:1b:
bb:e8:49:43:0c:91:f3:fc:1e:ae:40:82:b0:24:e1:
cb:27:df:7a:90:f1:9e:ab:71:91:63:5a:8c:ad:d5:
98:2e:91:1d:d6:eb:f7:af:b3:10:8b:a0:f1:19:af:
23:ef:78:fb:b9:90:81:f7:76:93:1d:92:58:4b:a0:
b1:ff:26:7d:6d:c8:a4:3a:f6:8a:5a:cb:3a:6d:20:
70:80:74:51:7b:5e:b8:90:ff:e8:e2:04:1b:5d:da:
e1:94:a0:8b:fe:86:36:8e:f3:e9:7e:3d:72:28:b8:
9c:a9:b7:51:90:2e:48:f5:17:8b:f1:c4:7b:71:f3:
b1:1e:56:7e:c3:1a:9b:40:0d:d9:ae:33:d8:a7:6d:
ee:eb:5b:89:93:ba:be:89:63:65:85:b3:2f:21:76:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B6:22:3E:85:15:2E:13:10:26:AD:F2:3C:5C:9E:BA:18:0C:C8:1A
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cc:54:e3:40:c4:c5:8c:aa:07:63:17:84:1b:eb:cd:26:67:
37:02:3e:34:e0:b6:f2:7d:aa:a5:fd:9f:f0:4a:b0:83:97:b4:
de:13:ea:d1:55:c6:29:02:54:fa:d3:cc:6b:c8:af:70:86:a3:
db:5a:7f:f3:68:df:ef:40:56:b2:9b:3a:2c:42:ce:8f:a7:06:
c1:75:7b:06:db:84:29:78:b6:67:a9:18:d8:88:64:eb:94:e1:
d2:21:2a:96:ad:d0:74:a7:00:49:a8:67:47:af:7c:d4:12:29:
4c:70:3d:1f:59:6e:85:ae:d2:6c:d9:46:1a:03:2f:80:f0:35:
3a:aa:65:50:54:32:cd:d8:5e:8d:cb:31:67:3b:2f:a4:54:13:
0a:20:1c:cf:eb:1d:bc:37:b2:b5:19:6f:0d:5c:4f:40:84:7d:
a6:31:aa:57:66:a8:fe:1a:f4:50:58:8c:83:5f:44:67:8e:c8:
e6:c0:2c:bb:2c:c1:da:2d:af:5c:21:be:ef:bc:d0:ea:e5:65:
93:b4:e5:51:66:5b:63:88:d8:7a:0b:99:b2:97:c2:21:e5:bd:
7b:52:63:1d:63:8b:8c:56:1a:80:a3:bd:20:58:ce:02:1b:ba:
c9:00:1b:07:4e:6c:f6:d0:48:5a:3f:4b:4a:d0:30:11:de:bd:
f3:9e:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:18 2026 by rpki-client