This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
File: 5cveddU26RsoojRpNJ0c8ouISjs.mft (raw, json)
Hash identifier: i9bcRD1xizxDB14i/ffuKMuZZe2YxYQli+AN1rcOSO4=
Subject key identifier: DB:69:BC:EA:9B:98:0B:A5:4D:87:1B:EE:04:17:1C:02:DD:FE:B0:6B
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Certificate issuer: /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial: 019BF6511D9BDB9E381F56F27E92D1D9D3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
Manifest number: 1712
Signing time: Sun 25 Jan 2026 18:01:09 +0000
Manifest this update: Sun 25 Jan 2026 18:01:09 +0000
Manifest next update: Mon 26 Jan 2026 18:01:09 +0000
Files and hashes: 1: 5cveddU26RsoojRpNJ0c8ouISjs.crl (hash: 0aMktldQhQN4ZBIDaig9MNXG+i93dA2l8mQipIj2OL0=)
2: bTd9b59X3xCVqHskXGvrFeaO9v8.roa (hash: EN2goF9sb3IS/bx2WJv29WoAXPuGDZ3/PX98KuSaxyM=)
3: fmHmQj_X4OHvN_8PimpHxojzpV0.roa (hash: eS9ppZZmO2TIgCAS2V6bNk7YbtOdQ3Bv62jIi3WaUeg=)
4: zE9HbI7BKRJnOxPJyfZqqZZHuXg.roa (hash: /XMUTbGL/UqNtuY35Gp0SBdfX/z3vMQWC8vSiInHi6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:51:1d:9b:db:9e:38:1f:56:f2:7e:92:d1:d9:d3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Validity
Not Before: Jan 25 18:01:09 2026 GMT
Not After : Jan 26 18:01:09 2026 GMT
Subject: CN=db69bcea9b980ba54d871bee04171c02ddfeb06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5a:5a:c0:cb:08:34:86:c6:00:94:fd:21:45:
7b:bf:5b:35:12:5c:93:25:50:2a:9e:03:d9:a3:49:
a4:16:1d:9a:48:51:a7:bf:1b:1b:83:86:bd:11:72:
e1:40:03:bb:de:6b:97:58:e9:10:9e:d1:dc:15:69:
f7:ab:28:a0:d5:8c:cb:e1:ea:45:9c:a9:cf:42:9d:
b9:47:e0:89:dc:55:1e:a9:e6:fb:84:d9:00:98:b9:
8a:a6:67:e1:9d:02:87:34:38:7e:9d:83:6f:4e:ba:
b4:eb:c5:94:8e:e1:2a:1e:85:76:0f:24:3d:d2:12:
d2:35:6c:55:88:6b:21:2f:64:b4:c8:10:b6:98:ba:
30:7d:09:d0:fd:98:5c:1a:4f:18:5a:8a:c9:98:7d:
00:2b:d4:fb:1d:d6:ba:e8:98:20:3f:8e:ce:7c:9b:
0b:02:61:5f:22:b0:fb:a8:5a:99:c1:ae:2a:d2:c6:
5d:e9:cc:84:a9:c9:c5:56:5a:a6:e2:80:d2:41:f9:
cd:a0:fd:29:8d:52:7d:5d:f3:ff:28:ff:6b:91:f0:
5f:2e:96:41:1f:e1:66:a1:a9:aa:02:99:17:9e:0d:
98:98:b1:3e:72:9c:6e:f9:37:5b:d2:cb:5b:e2:89:
9a:1e:63:e4:7d:8e:1d:d6:70:c7:c6:6d:72:e8:bc:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:BC:EA:9B:98:0B:A5:4D:87:1B:EE:04:17:1C:02:DD:FE:B0:6B
X509v3 Authority Key Identifier:
keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:77:f3:43:86:d5:0e:22:c9:c2:26:d5:4c:9f:75:cb:3c:2d:
9a:67:76:c0:44:9b:ff:1d:c5:ea:a2:44:70:ed:55:4b:19:c6:
ca:82:7f:aa:c0:e0:87:82:9a:80:dc:15:a4:bc:1e:8f:8b:35:
12:39:f9:9f:78:2e:c6:78:25:4d:18:a2:eb:84:49:13:1c:e7:
fc:cc:95:f2:92:48:30:8e:48:51:c2:b5:7c:20:63:6d:15:f4:
28:77:b1:26:1d:7d:ca:8b:f1:dc:ef:70:14:7f:b5:ed:2d:a9:
02:38:7b:68:85:f3:d8:b4:04:0f:3c:96:ec:a3:f3:d6:18:80:
19:59:c9:8c:73:5e:f9:99:05:ff:ee:f4:97:ee:95:3e:d8:75:
8a:d8:ee:ac:f9:b7:62:e8:c7:f9:f5:89:60:0e:ef:74:83:43:
7b:8e:b1:01:55:83:7c:c2:1f:d5:aa:f4:1e:9b:38:17:f2:b2:
f1:d1:5e:b3:b4:28:45:30:4a:3b:59:15:02:26:96:00:b9:51:
03:56:b5:0c:62:7d:67:ce:3e:24:49:0d:c5:c4:d3:6e:c3:05:
42:65:99:6d:87:20:b8:38:a6:a3:05:c1:91:c7:70:af:ed:ca:
79:07:af:42:79:e9:2b:e7:67:9b:50:b2:18:16:83:c6:29:ad:
f2:2a:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:09:23 2026 by rpki-client