This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File: X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier: QJSkoa5qoQ1xtzjTfNIHjmx0hCYQIBTkGjtmxzlSj+A=
Subject key identifier: C4:BA:4A:EB:BD:94:D3:34:79:99:CD:A7:7C:B4:2F:64:5B:7F:5B:FC
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 019BF6511391968AD236F84DC7FD1905679C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number: 0BB4
Signing time: Sun 25 Jan 2026 18:01:07 +0000
Manifest this update: Sun 25 Jan 2026 18:01:07 +0000
Manifest next update: Mon 26 Jan 2026 18:01:07 +0000
Files and hashes: 1: EhpMBlG4nDKvcGQKRYPAEZtRdEU.roa (hash: 00M7VIQ9njSy4l1huIv3bbpiOTYXp7U9IOJHNMG4ZKk=)
2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: FkW7bhCkCh/svGO15fzxJM1/+PbFmeZPEfFPP8JiLpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:51:13:91:96:8a:d2:36:f8:4d:c7:fd:19:05:67:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Jan 25 18:01:07 2026 GMT
Not After : Jan 26 18:01:07 2026 GMT
Subject: CN=c4ba4aebbd94d3347999cda77cb42f645b7f5bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:6b:9d:ff:19:0e:56:31:14:0e:a8:40:f6:
cd:1d:b2:ea:ab:c1:21:d8:35:73:60:18:a5:01:9c:
2c:d3:4f:5c:e5:66:08:2e:ba:c4:a0:b0:ca:00:54:
5d:5f:dd:16:72:f4:5f:e7:ad:aa:7b:76:93:04:19:
6b:65:64:1a:4f:4c:21:57:17:84:b1:fa:46:45:28:
04:9a:ff:f3:ca:f3:a3:eb:81:bb:f2:ca:a4:3e:18:
ee:83:e5:2a:d8:69:8f:1c:37:74:e1:19:f0:87:97:
2b:68:84:f5:b0:87:ed:98:19:44:7a:79:59:34:db:
62:fc:be:42:b7:87:94:dc:62:5f:80:7e:55:13:a5:
2d:07:5f:1a:52:d8:42:c0:11:ab:48:55:f7:ad:9f:
03:a4:57:ac:be:68:f8:c5:6f:21:09:c1:f7:37:e3:
8e:bc:63:05:b6:7a:82:dc:f5:11:72:68:d1:7a:f7:
9e:41:47:fa:ae:6b:7e:e7:8c:92:1c:40:36:a4:1c:
78:5e:22:77:71:f8:be:3c:cd:ac:db:14:1e:bc:d6:
69:91:74:ab:1e:60:1b:b9:b8:84:6f:3b:e6:a4:8a:
5b:d9:af:95:1e:1b:18:9e:1a:c3:a3:b4:cd:a5:18:
2b:4b:ee:97:70:b1:9a:70:58:26:fb:2b:47:0b:0c:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BA:4A:EB:BD:94:D3:34:79:99:CD:A7:7C:B4:2F:64:5B:7F:5B:FC
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:72:55:dd:ad:9a:9b:9e:03:4c:9e:de:81:65:b0:81:20:72:
e2:8a:a7:e5:2a:77:46:84:4d:95:96:76:3f:5b:55:5b:f1:c1:
67:41:c9:84:37:cd:89:97:18:c5:e9:9e:20:b1:9b:ff:96:7f:
df:ef:da:c0:0e:59:f1:4f:d2:23:15:3a:73:23:d9:83:2c:e8:
b8:63:2e:1b:4a:6e:73:ba:fe:dd:b1:3b:8d:22:70:23:8a:22:
dd:e6:35:01:be:65:e8:75:47:72:56:0a:74:b4:5b:87:d2:9e:
74:da:18:cd:d9:1c:93:49:14:4b:ae:a5:38:39:a1:26:ce:79:
0d:bb:7e:12:ee:59:ad:ee:79:4d:f2:c3:22:c0:a2:bf:b9:82:
45:a2:9a:f1:b9:f3:84:58:2f:72:d0:56:4d:17:b2:8b:54:d6:
21:a7:32:66:e4:b0:e6:7a:ce:98:89:7a:2c:a3:2b:d3:d3:56:
70:74:1e:24:d2:2b:20:68:92:b5:d0:4f:36:0f:db:57:23:fc:
a9:fa:b3:ec:9d:9b:4a:16:c1:08:02:80:a0:86:f9:b2:a2:c2:
b2:fe:45:a4:1c:6e:31:fe:bc:a1:20:ac:0d:96:9a:f9:ad:9b:
79:01:bd:24:a9:18:ed:fd:c2:48:8d:46:b2:47:93:66:58:a9:
b9:07:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:06 2026 by rpki-client