This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier: nvmoHOIsWUhozwMrTfWeWXDkfXop4OGPEtE9YOwTPzQ=
Subject key identifier: 5D:36:88:B9:E7:40:5B:26:C9:D6:C6:9F:F6:E3:BD:DE:1A:AE:01:CC
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 019BF687A7AB84C641070F3B296884349E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number: 1854
Signing time: Sun 25 Jan 2026 19:00:43 +0000
Manifest this update: Sun 25 Jan 2026 19:00:43 +0000
Manifest next update: Mon 26 Jan 2026 19:00:43 +0000
Files and hashes: 1: j53A_1kF9aSNXUc59y7aaNnJTIQ.roa (hash: OEN7haodJOJY7ysf6XgmF/7hfw+3ZMgQrirEKvY0HS0=)
2: pBY-m3fTvRgCKA2fhrrC18yYXXo.roa (hash: rEOIvVPIx9D8zhJT04AIosT1AdrWPH4fBg2A4YDwjlQ=)
3: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: Z9BCK4mLV12XLtzwmn0UyBVwrIgOvQOwE6tiMeyFByE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:87:a7:ab:84:c6:41:07:0f:3b:29:68:84:34:9e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Jan 25 19:00:43 2026 GMT
Not After : Jan 26 19:00:43 2026 GMT
Subject: CN=5d3688b9e7405b26c9d6c69ff6e3bdde1aae01cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:63:ec:ff:23:6d:ed:5c:67:9a:01:19:da:
f9:65:2f:90:06:b6:43:56:53:2e:58:99:18:ba:a0:
bc:c1:78:2a:4d:60:70:05:c8:4c:f4:55:14:d9:db:
d2:9a:56:de:d9:80:45:11:83:c5:59:78:bf:6e:3e:
7a:30:0a:b0:24:42:27:70:27:8e:ee:b9:45:e8:ad:
75:4b:60:8b:b5:90:10:19:a0:dd:9b:5b:fa:ae:53:
b6:a4:d4:d2:84:dd:72:9e:bf:d8:4c:0e:c5:3d:85:
ca:ea:22:e4:dd:8a:a7:4f:d6:41:1f:28:b0:dc:34:
93:3f:8a:40:3a:d2:7f:51:d1:6c:b3:3e:4b:ff:50:
92:8b:2c:b6:26:36:1a:a4:d6:ce:65:f5:85:f8:09:
c0:e1:dc:b2:21:f1:d2:d3:65:8c:6d:87:e9:32:35:
6d:25:c8:36:cb:02:b9:e2:e8:e3:04:b4:19:96:bb:
e0:83:88:1c:a6:1d:75:70:98:3d:7b:ec:27:4a:ec:
7a:2d:f5:19:ca:99:98:d3:1a:62:8c:a1:d7:e4:0d:
c2:3a:90:b2:e4:80:c7:ab:2a:9d:37:bd:31:ca:12:
64:fd:8c:42:ad:ec:f2:aa:e1:84:30:f5:ed:de:19:
c0:96:9a:0e:69:da:9b:df:12:ab:b4:41:b9:0c:c5:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:36:88:B9:E7:40:5B:26:C9:D6:C6:9F:F6:E3:BD:DE:1A:AE:01:CC
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c5:53:68:0f:af:8a:0f:39:76:00:36:99:c5:e4:2f:f8:67:
dc:8b:79:be:cb:b8:a7:91:99:c3:58:81:3e:20:31:5d:c6:7d:
e0:4b:67:59:6a:79:97:79:2c:be:84:17:47:2d:27:b3:04:37:
e1:46:a6:ce:69:3f:ea:4e:0f:cc:92:c6:11:7f:a1:32:28:6d:
73:f2:24:60:01:54:a3:5e:19:68:5b:df:fe:de:16:09:b4:3f:
3e:52:b5:c5:ca:3e:34:97:30:5a:61:6d:2a:ad:b3:04:d3:32:
0c:bb:43:3d:bc:fa:39:58:6e:da:07:af:1d:2d:4c:86:98:ee:
a5:13:72:c8:92:4c:b4:c5:10:ac:a2:7c:14:9f:a1:fd:66:b6:
66:40:f1:96:d1:df:b4:c4:d1:b9:a9:23:7c:b2:19:1e:67:17:
d8:eb:5b:0a:9f:b4:fa:6f:7b:1e:48:26:c7:c6:14:0a:39:df:
89:a2:63:66:b0:47:89:bb:f7:38:9f:e2:b4:34:73:03:d3:e5:
41:02:39:8d:0c:6a:e7:d1:04:02:7a:83:bc:a7:b7:2f:8d:5f:
0c:1f:77:bf:30:d2:e7:ea:d5:6a:7b:74:e5:9b:b3:f8:40:c1:
40:56:9c:6f:13:3d:e8:fb:af:c4:10:92:b9:df:c5:38:e1:b6:
40:e3:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:40 2026 by rpki-client