This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: 1uZMcWRxYf/gdmYTB+ZXLzdtD4O62+SnlsMe3m9PFew=
Subject key identifier: 5A:08:7E:99:0F:B1:09:A0:0F:10:3F:A8:22:88:78:AD:47:44:53:53
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 019BF619BA9E57A57D21DCD6E4F7F9F91BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 14C8
Signing time: Sun 25 Jan 2026 17:00:39 +0000
Manifest this update: Sun 25 Jan 2026 17:00:39 +0000
Manifest next update: Mon 26 Jan 2026 17:00:39 +0000
Files and hashes: 1: 1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa (hash: pObdATG8V/x1kQuTr2uqeIMaWJhyU9KZK2VfEs01ILg=)
2: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: SuzCTEeD9AsWGCk3KiO784fqQUZrpiFnplo/7HqnVy4=)
3: 8Q0plViYhTMAKVQAAXl5nNj-BBI.roa (hash: Fg0eMhaPWp57qj9BoW/Q3H9dkIdZE5CHVzhDBBdEeZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:19:ba:9e:57:a5:7d:21:dc:d6:e4:f7:f9:f9:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Jan 25 17:00:39 2026 GMT
Not After : Jan 26 17:00:39 2026 GMT
Subject: CN=5a087e990fb109a00f103fa8228878ad47445353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:c5:90:db:df:2f:63:dd:30:8f:73:db:20:
3e:83:66:ec:10:b2:cb:18:9c:e9:91:05:f4:74:47:
ea:b8:73:99:b7:6d:e8:6a:90:a6:5e:a2:af:c1:1e:
c7:f5:a7:36:a6:e1:16:d2:b5:b9:75:3b:b0:c0:f3:
c1:7d:89:0f:31:b3:78:ed:6d:50:72:7f:d5:f4:8b:
ec:6b:0f:5c:e0:eb:be:d8:69:61:57:9c:02:65:01:
69:31:29:da:f5:bf:11:3f:af:1e:57:42:34:25:0e:
68:60:16:e8:00:04:7e:d4:1c:b8:22:da:50:cc:a5:
20:1e:f7:0e:20:b5:58:33:af:55:d7:24:17:17:12:
6f:bb:38:2a:99:04:43:95:6b:1d:77:89:22:15:5d:
87:de:a1:7b:09:55:66:63:05:78:a0:7f:2f:df:c1:
06:4e:0a:df:2c:c2:75:4b:f9:dd:47:5e:af:94:28:
6d:4b:7e:7e:fe:04:bf:d3:28:0a:65:49:2e:d9:df:
63:8c:df:4b:63:dd:0a:55:3a:18:35:30:bb:64:9b:
0e:f6:bc:c7:82:12:e6:b2:0a:ca:ee:fb:47:4d:bb:
7f:5f:98:c7:d7:fa:66:c4:4c:ef:b8:dd:43:87:c1:
54:e9:1e:b1:96:b4:0d:23:45:d8:57:e6:b3:2b:b4:
95:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:7E:99:0F:B1:09:A0:0F:10:3F:A8:22:88:78:AD:47:44:53:53
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:6e:b4:52:e3:b8:3b:b9:c4:a1:96:c3:37:3b:8c:bb:f6:db:
84:7c:b1:b3:43:b0:e2:fd:a1:47:33:92:5f:a8:90:a2:2b:fd:
6a:89:c3:f2:32:39:99:bf:61:04:c0:a5:4c:8e:29:96:26:2e:
f8:85:6c:0e:aa:f7:c3:10:8e:48:dd:e5:88:58:96:3d:e0:2c:
34:96:d5:6f:94:62:6e:7e:0e:1f:dc:09:b8:63:ee:1f:b0:5f:
38:30:7f:1c:36:65:97:28:62:42:13:cb:5a:1e:1a:ae:23:3f:
e6:e2:9e:ee:67:30:f5:88:ff:67:9b:a0:59:1e:b2:d3:d5:75:
0b:d5:1c:4b:7d:9c:75:61:c9:0b:40:e4:84:9e:c9:fc:33:e7:
51:9c:d1:01:8a:cc:69:1e:5f:76:85:a7:b9:db:ff:6a:ed:76:
39:86:75:11:0d:99:31:19:da:19:d4:41:45:f1:45:a1:2c:e8:
db:4f:7c:04:a6:67:29:56:ab:12:f6:85:a0:61:c8:9e:73:e1:
30:37:7d:50:4b:01:05:d3:29:64:e4:0a:4c:d8:a3:d2:79:3a:
22:68:29:8c:de:0c:33:06:2f:cb:9d:63:cd:c0:3e:16:fc:1c:
d5:f2:d8:e1:f3:cf:05:c4:d3:2e:b0:f8:23:33:72:ed:cc:61:
1c:4f:ca:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:26:41 2026 by rpki-client