This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: zQZKvM4s/YvedRVDSL0Tcl2CzPfBsRq4FoY0L2uw29Q=
Subject key identifier: 18:E9:48:8B:3A:9E:51:CA:64:C7:6A:F7:27:D6:61:E4:88:F1:60:F0
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 019BF808816701D96BCF1063CC09A634D443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 0635
Signing time: Mon 26 Jan 2026 02:01:05 +0000
Manifest this update: Mon 26 Jan 2026 02:01:05 +0000
Manifest next update: Tue 27 Jan 2026 02:01:05 +0000
Files and hashes: 1: 2VmhrnY1R-y6rxXotPMotrQDcR8.asa (hash: Ap3BdSC63YcAczUKkEzGKumr15/KgLHB6Jp/DYCbOq4=)
2: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: Ba57AoLVgUrGxIsy4235uhG2ltqNrK2uJyozjSrV5dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:08:81:67:01:d9:6b:cf:10:63:cc:09:a6:34:d4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Jan 26 02:01:05 2026 GMT
Not After : Jan 27 02:01:05 2026 GMT
Subject: CN=18e9488b3a9e51ca64c76af727d661e488f160f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:52:5d:65:17:28:ca:b9:2a:62:7b:f8:85:5b:
84:ce:e0:c6:64:f3:ac:95:d3:b6:11:cb:dd:a6:19:
d2:e7:3e:e2:d3:5b:ed:fc:a6:93:b0:f4:94:e8:ae:
d3:7f:6b:c8:1f:fc:a4:e3:0a:5a:4f:51:75:f1:0b:
89:6e:2f:5b:67:51:1a:4e:06:12:d7:99:b2:d3:58:
9f:7e:33:d0:5d:34:e3:b4:87:a7:19:83:82:ef:99:
86:f6:99:e2:95:0d:83:78:95:11:82:12:3f:9f:c6:
bc:01:54:52:01:89:10:86:ca:4c:04:db:6d:64:aa:
da:5f:0b:54:f2:8f:d2:78:7c:f7:bd:a8:08:58:35:
32:73:81:27:47:6e:10:da:d1:79:1c:ba:d9:6e:78:
4f:52:93:ee:1d:fb:ea:c1:45:d3:f9:02:91:f4:5b:
49:5c:24:28:55:db:80:a2:fd:ec:1a:dd:83:b1:f2:
3c:3f:6b:c3:8f:a2:75:a3:40:07:23:2a:f1:6a:20:
e9:a9:63:ad:3e:b1:1e:51:b8:46:72:8a:8d:c5:5c:
ad:48:6e:3e:49:7e:72:a2:ba:d9:ed:ff:74:3e:54:
3f:9e:ba:59:56:54:b1:b1:4b:76:97:62:af:a3:34:
db:e0:13:72:e6:9b:4f:40:09:eb:a5:e1:e6:f7:89:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E9:48:8B:3A:9E:51:CA:64:C7:6A:F7:27:D6:61:E4:88:F1:60:F0
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6d:a8:cd:1a:ad:85:3f:a7:d2:cd:07:df:1b:9f:83:65:17:
c1:e5:32:02:c1:7c:2c:5b:ee:dd:ba:7d:61:56:fa:d5:88:9b:
56:f6:e1:a1:e9:5f:ff:91:8d:26:ac:6a:c2:27:13:7c:b8:8e:
3b:c1:af:7f:61:75:23:31:2c:86:b1:0d:28:2f:e4:15:ed:38:
5a:dd:af:d6:51:8c:22:27:b8:08:ea:62:ae:04:4b:45:f4:64:
cc:e7:4f:ca:1f:3f:c1:2d:9d:9b:7f:ed:2d:52:5a:72:6f:1e:
31:c4:9a:ea:e4:f7:64:89:55:02:53:90:ea:61:39:8f:60:e9:
df:63:2d:3d:0c:f2:e8:9e:8e:f1:b8:21:ff:55:38:b5:28:cc:
4d:a9:b5:af:d2:47:c0:96:8a:f8:4d:ce:0c:d3:79:85:01:62:
ea:bb:46:80:7f:8f:90:d5:bb:06:8a:b7:a0:35:98:bc:5e:64:
42:89:41:3f:a3:e6:cd:55:d2:5a:b7:9e:2f:a5:ad:bc:db:d8:
8d:fd:3e:c9:56:f8:9d:98:3f:2d:a3:ba:aa:a0:f9:64:f5:e2:
7a:74:bf:0f:83:89:ce:d3:1f:44:c5:0e:71:00:8e:47:e0:c0:
76:56:3e:61:40:e6:37:89:9e:3d:c3:5e:ef:ab:6a:9f:c3:a8:
fb:93:0b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:46:55 2026 by rpki-client