This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier: 2zLjSmcmxSk6EUipZ2RkxoHEkuA9Kp4dfuj7frcAPIc=
Subject key identifier: 16:54:31:EB:39:FA:79:AC:E0:48:7D:49:D7:D8:EF:D9:DA:91:0C:3C
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial: 019BF42C1ACE05436661E7315A650E3E87AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number: 17E8
Signing time: Sun 25 Jan 2026 08:01:29 +0000
Manifest this update: Sun 25 Jan 2026 08:01:29 +0000
Manifest next update: Mon 26 Jan 2026 08:01:29 +0000
Files and hashes: 1: 9ZxAC10NuAqnXMcED-lsCy84WUc.roa (hash: 2Vs0nLDkGXSJoDb56Vxw17AmovqxUT3lVuAZuNKdDYU=)
2: JWBtzeLFUDlhmERoUCTbc_uAex0.roa (hash: kxreH6y2E+SNRj6sI1npU33Oy4JXyeQw/3NaAYiK4Gk=)
3: hbbJ0MKd5AI8GzkfAZt3l1L7uR8.roa (hash: qiesRgMfoPlRIvGxB5feazmMjwpZhmvrVOznCajAxhM=)
4: p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa (hash: OH559fj6Vr/ZVBWmRgyMZY/pv/BDJUIdzOx8psGNE+4=)
5: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: f2hALwupCa8l09pgr7FSokP4R2CXqpfin5LxSJAicuI=)
6: v7DRMSksGTlDfhs744praVhJlnw.roa (hash: whajyGy/1UYHTBKdIHCPuA5IumZDHCjke/Rcxhk8gpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:2c:1a:ce:05:43:66:61:e7:31:5a:65:0e:3e:87:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Validity
Not Before: Jan 25 08:01:29 2026 GMT
Not After : Jan 26 08:01:29 2026 GMT
Subject: CN=165431eb39fa79ace0487d49d7d8efd9da910c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:7d:64:23:e4:67:f3:78:86:cd:df:b2:09:
fe:97:a7:9c:f2:80:4f:30:b2:c9:3b:3d:7b:3b:b1:
59:a5:10:8b:59:05:61:61:a4:ec:02:cb:3a:bd:aa:
2d:2a:56:ef:cf:30:8f:6f:0e:bb:c4:a8:e3:80:42:
f0:6a:a5:be:0d:6b:88:63:5c:b3:66:e9:ff:1b:e4:
a2:e5:d2:ac:9a:ee:4d:b6:04:9c:04:b7:9d:ff:27:
63:75:61:80:e8:7d:36:ac:c2:3c:f7:cd:f0:de:c1:
49:bd:43:17:2a:87:0f:5f:04:dd:51:3d:55:f2:59:
eb:79:8d:b4:34:4b:b8:4d:ad:27:27:cc:57:b3:cf:
59:9e:05:c9:43:cc:71:a9:a1:a6:a4:7d:8a:f5:64:
d4:f6:a9:5d:c0:64:2e:83:09:60:ad:c2:18:f1:07:
a3:8b:f7:96:24:4f:5a:2c:36:57:9e:79:45:7f:a5:
94:53:6e:db:cc:e2:54:05:ca:33:2f:e7:87:da:3d:
6c:db:51:b6:72:63:4b:cd:b3:de:e0:e8:05:be:8a:
68:eb:b8:a2:5c:8a:d2:ef:b0:6f:bf:a9:10:a5:b3:
68:1d:ff:fd:9f:22:08:e7:18:2a:10:bd:13:63:ea:
dc:e2:77:d3:f3:48:16:b8:85:12:89:1b:d8:99:d2:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:54:31:EB:39:FA:79:AC:E0:48:7D:49:D7:D8:EF:D9:DA:91:0C:3C
X509v3 Authority Key Identifier:
keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:93:87:53:ca:f4:81:cd:f5:fe:d3:38:b8:d3:c5:fd:47:ff:
48:ce:33:59:54:38:bb:37:ed:61:83:d4:62:8f:38:0f:f2:17:
94:6c:f6:d6:cc:62:09:87:98:f7:59:4d:55:d2:37:04:d7:32:
3d:12:7c:81:b5:ee:97:44:e1:f6:d5:df:73:79:c7:0e:3a:37:
dd:fd:76:30:5d:91:3f:ec:db:9d:af:73:8e:4d:c6:0f:5b:2b:
6d:55:2a:0c:d8:df:29:1f:d7:54:1f:cb:c5:f7:8e:b5:76:55:
73:cc:26:19:de:b9:e1:d4:15:1e:97:fc:62:1b:75:83:fc:49:
27:b6:e1:d2:1e:4c:2d:e8:97:2d:9f:20:3e:62:3c:4e:99:da:
84:00:6f:44:a5:19:8e:0b:9f:1d:62:36:be:7f:e5:32:4d:44:
d5:e4:20:15:67:d6:eb:26:46:c1:cb:83:26:98:09:e5:c9:ef:
88:db:90:8c:12:d6:a7:a9:e5:44:8d:09:2f:ba:71:68:6e:19:
af:64:f0:7c:01:b6:14:45:31:38:13:0a:d1:32:7c:8d:a8:32:
9b:6d:06:4f:c7:a4:b2:84:c6:72:c1:f3:f2:d3:7f:67:b1:76:
2b:d1:4d:d5:e9:b1:15:2e:36:11:48:ea:df:99:93:64:4b:d3:
4a:eb:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:01 2026 by rpki-client