This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json)
Hash identifier: GZtxsYadJNYiK9y5hCzh1xeIS72ZWh4pVAYI2zJ9YUQ=
Subject key identifier: 7C:6B:54:6D:5D:65:CD:C9:43:44:CD:58:C9:8E:E6:D3:45:99:31:FD
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 019BF5AC55F83AC21448543D96FE2EF105F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
Manifest number: 17EF
Signing time: Sun 25 Jan 2026 15:01:10 +0000
Manifest this update: Sun 25 Jan 2026 15:01:10 +0000
Manifest next update: Mon 26 Jan 2026 15:01:10 +0000
Files and hashes: 1: 1jh-7uha-4k_yznOuFtMZfFjuVs.roa (hash: AizGw3X7tT6ekzOxf8TOv3axo6nylx0oByvDgVQolps=)
2: CNUfiKvpSJ-WDTNl-84qlrCz1pc.roa (hash: G7YZZuqmByrC2YyMXfXbfApWC4fYr1PvZdU2/f31kE8=)
3: W7nZVgb0zUWTa-CQSc8zglFn-yk.roa (hash: 8qZZ+7l1ZHC/t+K4fj+5zc9uGqORgxBHYmAlmab2Xnc=)
4: bFCiT-xm8pNFWWzoBOkYrKOTCD8.roa (hash: yLGiXFTaycTRRK4U/+Au/PGXnPMnZr+N3txpommAKyk=)
5: ePhJRyKt0-yBQZxDLefUcoLBEBQ.roa (hash: UHzKib5+JGmW2WEcbEdpa4gFy7zL2c+OqxrmnN7xcck=)
6: foQpbry3Rd7cIVHoGwPbNUEQzJA.roa (hash: YeKA8xu/nluThLS+3wNeRMaiot0rKjIzr+b6mcEkW0Q=)
7: g8ACjhxQk5J0DU745hi99GsFqfc.roa (hash: /h98eurUCwI/ZM7sMftwVJTVqywWLaik3VpX3tKiswU=)
8: gvmtotg3-G7C4Va6UzlSGJozsjc.roa (hash: mFRFlXOUP4cVoFa3wC4kCHkSiaXUH9pe3FPWW9xHeGk=)
9: nwIwVLXIvem69G9q9KDnzvsmAhg.roa (hash: 2+aHQGuqT9Ohp8sqd8VoWtkoMLGI1sXdFboz6ZhVoNo=)
10: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: tkh8MgHjZ1ORpX2HX2Qpwz0clg5ixcj0Lbcqtn5Ebks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ac:55:f8:3a:c2:14:48:54:3d:96:fe:2e:f1:05:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: Jan 25 15:01:10 2026 GMT
Not After : Jan 26 15:01:10 2026 GMT
Subject: CN=7c6b546d5d65cdc94344cd58c98ee6d3459931fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:da:4d:f8:d4:0e:2c:71:9d:c0:cd:1d:87:
66:0c:e3:01:b9:dd:e1:5a:17:b1:eb:aa:c8:90:53:
9d:d3:03:fa:13:c5:de:df:15:26:b9:28:c3:1d:c6:
f7:5d:99:64:49:1f:90:de:cc:f9:d1:6f:e1:9f:43:
77:7f:7b:e2:9f:23:f7:4f:79:72:4c:4f:26:e8:12:
3c:2e:bc:df:a0:39:25:15:cd:e4:2d:c1:02:f4:7f:
36:1f:e8:b1:6d:5e:b8:b0:6e:c8:2d:fb:de:bb:87:
cc:3f:bd:65:06:e6:a0:44:4c:58:50:38:69:31:67:
9d:b2:42:50:a9:ab:2f:78:fc:bb:f1:8f:06:a7:cb:
1c:61:26:a6:8f:38:9a:36:a8:ff:56:46:06:f7:72:
b2:dd:97:3e:7c:2a:8e:36:9f:18:78:d2:b1:12:53:
43:32:bc:64:0e:1d:4b:59:51:ef:72:ec:d9:dd:3e:
a3:88:69:db:ee:b0:7c:be:7a:64:c6:17:5f:29:56:
a6:e6:bf:50:a2:7c:b5:ad:15:c6:0c:cb:6b:17:f9:
c6:b7:a0:18:38:96:95:45:1f:a0:8a:8d:56:f1:f3:
db:f4:dc:8b:a4:46:df:42:f0:e4:71:23:33:f7:6b:
e8:76:80:d2:f7:9a:2f:da:a3:c2:b2:d0:a6:db:02:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:54:6D:5D:65:CD:C9:43:44:CD:58:C9:8E:E6:D3:45:99:31:FD
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5a:c3:50:72:72:6d:71:ee:1c:8f:ea:0c:d6:59:87:e3:f3:
7d:45:81:df:6b:c0:8b:8c:75:16:c6:e5:b4:87:50:0d:0d:4a:
47:d0:52:b4:54:db:f9:46:5f:fa:3f:39:d3:90:81:83:b3:28:
76:bc:da:ed:5f:ea:6d:e9:1d:47:d6:26:7d:0f:56:8e:ac:e6:
49:0b:85:0d:25:cb:69:e2:a9:57:d7:40:63:32:6d:b4:32:ea:
53:72:45:96:72:21:0e:f8:7c:e4:17:93:f9:fa:49:14:b2:32:
a8:a9:44:88:ea:cd:b6:43:3d:f9:f5:45:37:e3:af:9a:b2:ce:
ea:36:8a:f9:16:5a:e9:7b:3a:e9:ae:60:6d:08:d7:7a:13:47:
40:8a:88:07:16:0a:4d:78:20:cd:7d:fc:f7:36:17:b9:2c:51:
71:8e:73:85:0d:eb:be:92:72:6d:ad:8e:0c:5f:d8:d8:23:e6:
60:eb:31:4b:70:7f:e6:0f:56:23:f9:a8:c8:a5:47:53:0c:c2:
f9:90:3f:03:b0:13:0b:b7:f8:f1:d3:ca:62:fb:f0:5c:d2:e7:
1e:9e:98:0e:8d:7b:d6:2d:e6:06:0b:98:4d:8d:17:84:c2:01:
9e:30:1a:42:6d:bc:08:65:fc:a9:9e:2b:f7:ee:1f:11:b9:f5:
f3:94:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:13 2026 by rpki-client