This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File: rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier: lmTsH5Nsk7LKwFWxG/V/Pm+l9SUeSUyYqxV6VtgqlZc=
Subject key identifier: 51:1E:99:D3:E8:1D:EC:47:ED:58:3B:A4:05:33:13:1E:C7:DD:3D:40
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 019BF5E342DB3FA394597A5D9788C75BA568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number: 14BC
Signing time: Sun 25 Jan 2026 16:01:10 +0000
Manifest this update: Sun 25 Jan 2026 16:01:10 +0000
Manifest next update: Mon 26 Jan 2026 16:01:10 +0000
Files and hashes: 1: 4QHBn9ucdlKQY-OkJvc7Ig6NIBo.roa (hash: 7wIOmcrsKNPm1pT+25Dr7MjY3mEMyojJiBNkSyV1lM0=)
2: Hz2CwE5wcYXTB8FSwWDK5Rt2kgM.roa (hash: IDDqSWOczA2q2urCjohT5PUeAUF0bht4zqH2G2v0ftg=)
3: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
4: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: fIoNVvXnkHdKV7KzijCY+B6Uq8Du3t+SynbEAADAmWs=)
6: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:e3:42:db:3f:a3:94:59:7a:5d:97:88:c7:5b:a5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Jan 25 16:01:10 2026 GMT
Not After : Jan 26 16:01:10 2026 GMT
Subject: CN=511e99d3e81dec47ed583ba40533131ec7dd3d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:f7:6f:12:7d:d5:3c:03:20:8e:aa:8c:da:
ba:00:fc:84:cb:0e:f4:4c:90:5b:56:d5:7d:43:97:
6f:23:38:0e:3c:91:1f:48:84:5d:33:34:62:c0:5e:
7f:50:45:23:7c:23:c3:5e:f5:d6:d1:04:5d:62:34:
c5:40:4d:a2:e1:09:90:3f:f3:fb:f1:6d:99:74:c3:
c3:da:69:17:7c:19:01:39:99:67:18:96:7f:89:a4:
53:53:c4:5e:ca:f2:13:e7:6c:6f:36:8c:21:8f:f7:
98:2d:bd:60:53:2b:c8:6c:37:cb:f3:cf:88:0f:97:
4e:40:e3:d4:bf:be:f2:ac:3c:8b:d4:9e:df:f4:d8:
d1:38:f8:6e:0b:86:81:d9:25:5f:d9:a3:48:f1:f1:
29:df:f0:a4:67:7f:be:eb:4d:46:de:37:4f:4e:28:
1a:c2:3a:00:af:a7:35:8f:13:86:d9:b4:7a:60:c3:
bf:32:d9:d4:24:99:8e:cb:c2:ca:f2:43:47:03:e3:
35:61:43:f9:ce:4c:0d:32:80:f1:67:4c:a7:db:76:
2b:47:bb:59:ae:cc:e7:dc:21:9b:4e:ac:3b:e3:79:
b4:c9:5d:75:fb:9a:4e:b7:ea:99:c5:6e:9e:8f:b1:
74:52:5f:e1:79:e1:25:0e:c3:59:72:0d:b3:1f:2b:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1E:99:D3:E8:1D:EC:47:ED:58:3B:A4:05:33:13:1E:C7:DD:3D:40
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4d:51:ad:e8:31:7a:06:3a:54:1e:72:cc:a5:2e:a5:a3:0b:
15:2e:62:4a:96:c8:4c:4d:fa:36:20:e3:92:e3:73:be:2b:fb:
e9:4d:10:3a:7d:45:35:9b:58:bf:26:eb:b3:c6:e3:77:37:53:
d0:c5:18:71:20:f9:d5:21:58:ee:61:fb:b7:d8:73:f1:45:ab:
5d:cc:d3:77:da:cc:21:32:6a:f9:01:30:aa:fc:4b:d7:8b:05:
a1:ec:d9:c9:78:d7:7c:55:db:7f:c8:b6:ad:df:5a:7d:eb:7f:
ef:09:c1:b9:cb:27:14:30:3f:39:5f:2f:74:07:01:49:75:97:
41:47:a9:c5:65:12:45:ff:94:90:3b:c2:f8:00:58:3a:b8:96:
6e:80:9e:54:cf:b2:59:3a:a3:54:ce:7d:7f:45:1a:b8:9d:a0:
0b:29:b4:ff:a5:37:ea:07:98:2a:db:df:47:d3:a0:a2:0f:16:
54:c0:2e:fd:e5:9c:73:b2:97:ed:64:9d:0f:f6:36:5e:66:ab:
29:13:45:3b:6e:5f:12:58:8c:64:fe:d7:23:cc:58:12:8c:1c:
89:bc:3f:45:51:c4:7e:40:3b:bb:44:8b:75:ae:e4:03:41:a5:
48:3d:a6:17:6d:dc:7d:68:b9:6d:4a:73:2c:ee:26:9c:21:5f:
22:15:7f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:08:37 2026 by rpki-client