This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: A3NQfoBGKxTaSUVG4siYeSVvSTTUFkrrCdqP3QKEsd8=
Subject key identifier: E8:71:90:19:58:03:74:90:99:CD:89:6E:74:B9:B7:C9:C4:74:CE:3F
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 019BF840010E18EEEB430C8DD2C57D9792EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 16E9
Signing time: Mon 26 Jan 2026 03:01:42 +0000
Manifest this update: Mon 26 Jan 2026 03:01:42 +0000
Manifest next update: Tue 27 Jan 2026 03:01:42 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: Vo2B5R9cNJvoVfRdggALLMy7VI4C865mH8i80yxlSbU=)
2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:40:01:0e:18:ee:eb:43:0c:8d:d2:c5:7d:97:92:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Jan 26 03:01:42 2026 GMT
Not After : Jan 27 03:01:42 2026 GMT
Subject: CN=e87190195803749099cd896e74b9b7c9c474ce3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dd:d9:fb:13:2b:b8:c0:ae:29:45:23:32:cf:
a7:00:d4:08:9f:53:52:22:75:39:61:25:cd:cc:82:
f7:33:2c:5e:f2:23:73:d7:86:df:63:97:df:b5:22:
1e:08:5f:45:e8:ea:f0:12:1e:9a:aa:af:b4:47:6b:
a5:20:87:9a:66:8c:2c:79:3a:11:1b:34:86:af:06:
47:62:a9:8b:aa:c8:d6:e0:dc:8a:79:a8:1c:9b:2f:
b5:22:03:fc:c6:6d:83:df:fd:54:c8:4d:4a:60:2f:
02:02:6d:4a:ff:7a:c1:22:6f:46:e2:6a:60:b4:ab:
15:f8:37:f6:90:ad:32:f8:e7:6a:a0:77:00:d2:03:
ab:d9:e7:e6:b0:a2:aa:75:2c:1a:99:73:77:68:cc:
51:0c:78:9a:f5:b2:4b:26:c6:f7:2a:a8:cd:fc:54:
b2:84:de:89:c4:0a:00:5b:32:a9:5c:ec:cd:80:7f:
89:e4:a1:62:12:5e:c8:98:79:36:43:e0:ca:e2:45:
35:3f:77:38:76:d5:53:06:6d:e3:8b:f0:7c:57:82:
90:2b:35:6d:ef:c0:4a:20:dc:e7:32:c3:0e:d3:d8:
56:b3:34:14:2a:2a:88:65:15:ab:fd:c2:95:32:89:
63:96:2f:12:83:9d:4e:71:3e:47:aa:32:84:1c:c7:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:71:90:19:58:03:74:90:99:CD:89:6E:74:B9:B7:C9:C4:74:CE:3F
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ab:44:1f:3d:98:f4:f8:e6:ef:a6:a8:4c:f7:95:cd:5f:5c:
80:62:ff:0f:38:50:c4:e7:9f:f3:77:06:e1:93:12:c8:71:c9:
df:77:86:4c:fb:f7:5e:71:20:4d:12:e5:5f:c8:fd:ae:24:d2:
c7:fa:f1:ba:a2:3e:77:8f:a7:9d:44:5d:dc:19:e8:f9:52:fb:
02:b8:a5:12:a0:a9:b1:f5:66:9e:f2:b8:2c:aa:8c:0b:2f:c2:
cc:41:4d:bf:09:a0:c5:51:22:2c:ab:96:3a:2b:3c:f1:32:d9:
b2:f2:2e:4a:d4:99:d4:ad:4b:eb:50:79:80:4b:1b:c0:85:fa:
7f:c7:0e:7a:4a:ef:d0:d4:a1:e1:24:a4:71:d9:1f:21:15:14:
cb:f2:59:51:08:dc:9d:04:ca:b7:28:af:ab:ec:53:b6:b4:ff:
2e:b0:96:17:8a:a2:6d:4a:36:db:32:77:54:df:a0:64:5a:12:
81:89:97:51:1b:34:ba:ad:d4:be:9f:ce:fc:27:0b:fc:79:39:
d3:c6:94:5d:cb:63:c9:1d:b4:7a:d7:91:ad:18:85:92:a1:58:
19:07:77:fb:5c:b5:7d:f3:ac:3d:3d:02:ba:c3:ab:0b:46:9c:
03:2c:62:c9:b2:a8:12:e7:ba:04:98:ea:b2:79:18:92:28:45:
ac:f8:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:05:32 2026 by rpki-client