This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File: pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier: yrssFggmwjYHm2PzoEWnsjoYiS1lL5BwUwRVurPzEqg=
Subject key identifier: FB:5F:89:01:1E:DC:C4:3F:D8:03:5F:C3:51:24:29:0B:A9:AB:AE:DC
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 019BF53E369062E8235AED05676A61FA93B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number: 12A4
Signing time: Sun 25 Jan 2026 13:00:53 +0000
Manifest this update: Sun 25 Jan 2026 13:00:53 +0000
Manifest next update: Mon 26 Jan 2026 13:00:53 +0000
Files and hashes: 1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
2: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (hash: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk=)
3: JzElV8rMB35_r5yROjAIe1YSEGk.roa (hash: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4=)
4: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
5: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (hash: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0=)
6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: lbosnL6mU4j9TQK2Meoc9M0cLhzkk6KkA13uLgu50ac=)
7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
8: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:36:90:62:e8:23:5a:ed:05:67:6a:61:fa:93:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jan 25 13:00:53 2026 GMT
Not After : Jan 26 13:00:53 2026 GMT
Subject: CN=fb5f89011edcc43fd8035fc35124290ba9abaedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:fd:fc:60:34:a5:e7:61:a6:ec:91:32:11:
33:2f:df:05:d4:46:80:b8:65:07:1e:b9:82:98:47:
84:64:bf:9f:f7:a0:92:09:16:dd:e5:3b:bb:5e:72:
f5:d1:94:7f:dc:c4:c7:cb:70:6e:b0:fb:a4:ca:4c:
9c:03:f0:42:18:6c:bb:cc:b4:ce:5b:1c:e0:01:c3:
c2:fe:7c:86:a0:c1:87:33:5c:3e:31:bd:55:c7:89:
f1:c5:dc:cd:a1:0f:c4:3e:56:97:d7:8a:c2:67:21:
5f:fe:42:da:7b:37:12:d1:8d:fb:de:03:45:65:13:
15:89:6c:e5:ce:04:f6:b4:25:38:90:01:54:54:02:
82:87:c8:49:ce:5b:08:59:e2:d2:dc:86:b8:78:11:
d9:a5:d1:12:dd:b1:21:e4:2d:f0:a1:2e:e1:2c:16:
c5:8c:ec:ef:5d:fb:1e:78:ac:39:a7:7c:07:40:bf:
9d:a2:b0:da:e5:7f:78:9d:14:61:e4:db:7f:d2:73:
f3:13:d5:b8:b3:b8:38:b0:ae:82:b8:d3:fb:39:69:
61:11:a2:a1:37:8c:2e:9d:85:2e:54:80:45:98:51:
3c:af:3e:2f:b1:a7:cb:c9:1f:fa:72:6e:4d:1c:c8:
db:0f:1e:1d:c3:27:2c:ee:3a:dc:8c:df:3d:a0:2e:
e6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5F:89:01:1E:DC:C4:3F:D8:03:5F:C3:51:24:29:0B:A9:AB:AE:DC
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:36:cb:95:87:b6:04:d0:ec:49:4e:90:a6:5d:7e:91:1d:50:
01:f8:d0:85:36:1e:33:fb:e0:e9:85:e8:d9:54:a4:47:d8:50:
b4:d7:c7:7a:84:4c:50:56:2c:1c:3c:be:c0:c8:7a:d8:24:85:
38:6b:87:ce:e2:7d:58:22:d2:71:57:06:ec:75:e7:21:b8:30:
01:77:79:87:42:f8:04:a9:87:29:cd:e6:b6:d5:45:f8:5b:3f:
5a:19:13:86:4b:91:d9:44:f2:5a:78:9e:c1:6a:c7:58:1d:ba:
3a:f0:a7:c5:7c:5b:15:2c:39:8d:3d:39:3a:73:c6:86:9f:59:
99:cb:7b:96:71:48:51:2d:6e:a4:29:50:40:9f:81:d4:dc:2a:
1a:a7:b4:3e:70:0d:29:79:01:b2:7d:79:2a:28:83:43:40:1f:
1c:3c:a6:99:ec:00:19:d8:8f:29:a5:47:49:73:e0:1e:fe:85:
93:41:a2:d6:c7:64:5a:2e:0e:4a:ed:a4:30:39:b6:79:50:34:
25:a6:e6:26:c3:12:b3:b8:cc:ff:da:33:b9:12:d0:7b:95:b3:
37:2f:c2:d9:5f:b3:c2:d1:00:c4:46:9a:44:2d:34:58:78:20:
78:8b:9e:41:17:2e:9b:1b:ec:5b:a4:82:f0:2f:9a:dd:df:f1:
bc:e1:09:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PjaQYugjWu0FZ2ph+pO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjYwMTI1MTMwMDUzWhcNMjYwMTI2MTMwMDUzWjAzMTEwLwYDVQQD
EyhmYjVmODkwMTFlZGNjNDNmZDgwMzVmYzM1MTI0MjkwYmE5YWJhZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolr9/GA0pedhpuyRMhEzL98F1EaA
uGUHHrmCmEeEZL+f96CSCRbd5Tu7XnL10ZR/3MTHy3BusPukykycA/BCGGy7zLTO
WxzgAcPC/nyGoMGHM1w+Mb1Vx4nxxdzNoQ/EPlaX14rCZyFf/kLaezcS0Y373gNF
ZRMViWzlzgT2tCU4kAFUVAKCh8hJzlsIWeLS3Ia4eBHZpdES3bEh5C3woS7hLBbF
jOzvXfseeKw5p3wHQL+dorDa5X94nRRh5Nt/0nPzE9W4s7g4sK6CuNP7OWlhEaKh
N4wunYUuVIBFmFE8rz4vsafLyR/6cm5NHMjbDx4dwycs7jrcjN89oC7mYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtfiQEe3MQ/2ANfw1EkKQupq67cMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTbLlYe2
BNDsSU6Qpl1+kR1QAfjQhTYeM/vg6YXo2VSkR9hQtNfHeoRMUFYsHDy+wMh62CSF
OGuHzuJ9WCLScVcG7HXnIbgwAXd5h0L4BKmHKc3mttVF+Fs/WhkThkuR2UTyWnie
wWrHWB26OvCnxXxbFSw5jT05OnPGhp9Zmct7lnFIUS1upClQQJ+B1NwqGqe0PnAN
KXkBsn15KiiDQ0AfHDymmewAGdiPKaVHSXPgHv6Fk0Gi1sdkWi4OSu2kMDm2eVA0
JabmJsMSs7jM/9ozuRLQe5WzNy/C2V+zwtEAxEaaRC00WHggeIueQRcumxvsW6SC
8C+a3d/xvOEJvw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:23:33 2026 by rpki-client