This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier: IFZEfMeuwDNAN18iIlASMsYD07sCaEHq7b/qkvXwcdM=
Subject key identifier: D5:24:32:03:34:B3:A0:1C:23:E3:48:4A:3E:BB:79:A7:F0:D5:80:B5
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 019BF91BCD0309497D3762B055D1360AD99A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number: 058B
Signing time: Mon 26 Jan 2026 07:01:47 +0000
Manifest this update: Mon 26 Jan 2026 07:01:47 +0000
Manifest next update: Tue 27 Jan 2026 07:01:47 +0000
Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: AIPKedRppfxdsCn6gt+MYGiQGZzCU1Vu0FOzzAj+gUw=)
2: sorUGGWe1LLztpuUErMIMbx90dE.roa (hash: e/DVtYzq//vQzs5AELDtVTrdhuXE8VIADl3/vxdL9m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:1b:cd:03:09:49:7d:37:62:b0:55:d1:36:0a:d9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: Jan 26 07:01:47 2026 GMT
Not After : Jan 27 07:01:47 2026 GMT
Subject: CN=d524320334b3a01c23e3484a3ebb79a7f0d580b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:36:c0:13:04:89:35:dd:5b:64:10:53:64:b5:
c2:06:3a:7e:3e:36:9c:69:d7:79:27:40:3a:48:43:
d4:a8:ba:31:e1:68:a2:39:cc:20:46:13:96:0c:1a:
b9:4f:30:4f:ec:76:73:56:fd:5f:0e:f4:bc:8f:2e:
35:3d:a4:fd:72:fb:42:38:f1:b6:0e:c7:7a:e4:88:
76:5a:ac:38:cf:28:bf:97:ea:1a:1d:42:79:80:9f:
e8:89:b7:8c:1e:a3:5d:30:82:36:3a:6b:2f:ca:72:
13:09:09:cc:cf:0f:84:4c:9e:82:fc:01:72:2a:c5:
9b:87:11:1c:f8:54:6f:e3:29:42:f9:55:72:91:8d:
cb:be:94:77:33:b8:92:a0:bf:5d:95:b2:ac:c2:c0:
1f:80:d4:a6:40:e0:a6:ff:cb:7c:41:8f:35:9d:38:
b2:e3:b8:42:48:d9:62:6f:05:0c:7c:dc:c4:dc:40:
e3:de:c4:8e:7d:d1:db:60:45:4f:3d:06:98:71:15:
61:99:e4:5b:a9:7a:c8:7b:5c:c0:94:a2:bb:d9:51:
14:08:0b:63:96:e6:8e:21:90:39:d0:ef:36:a1:da:
8c:a4:21:c9:86:54:56:1e:42:e1:7c:c8:aa:12:8c:
57:bd:29:c0:11:2d:f9:3b:d2:a8:62:cc:d3:b7:a1:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:24:32:03:34:B3:A0:1C:23:E3:48:4A:3E:BB:79:A7:F0:D5:80:B5
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:38:7a:fc:45:b6:b1:49:60:f8:23:1e:80:73:26:39:67:f5:
ef:cd:f9:af:bb:8b:43:41:a2:5b:e8:b3:9a:11:d9:24:50:5a:
2b:0a:3c:0e:33:6b:32:80:7a:03:30:aa:f8:1b:a7:0a:e8:47:
d5:f3:39:be:11:bb:ed:c5:c9:ba:c8:c1:f5:05:76:8c:89:fb:
a2:bd:61:10:d7:9c:62:a5:f5:14:d5:82:20:c0:14:39:2c:32:
c2:c6:71:31:26:5b:63:05:b8:b5:07:c1:d8:e3:91:3e:53:03:
1f:3e:30:b1:a1:29:d3:2d:5c:25:06:3f:cc:88:b5:c4:da:61:
7b:37:e9:3d:4a:cb:f1:a9:12:4c:de:5f:b3:22:2c:f2:ae:90:
f1:e0:d6:2d:2f:da:2d:d4:c5:9a:0e:28:a9:99:f9:09:e7:43:
02:d1:53:b7:73:ed:b7:9d:be:63:d7:35:26:67:10:f3:bc:bd:
58:8b:ff:28:62:0b:0a:78:74:5e:dd:84:b2:16:9e:7c:19:29:
00:09:34:52:3c:3d:d9:d1:ad:3e:ae:f7:c5:12:5a:f8:2d:57:
4d:21:4b:25:53:bf:d9:f3:50:f1:5e:30:53:29:64:e3:4b:a9:
53:00:67:3f:f3:82:a5:d2:55:12:e5:dc:fb:1d:15:29:cd:4a:
0b:80:4c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:45:59 2026 by rpki-client