This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json)
Hash identifier: rTSAGPDRI0cLbfQkJXFvA8Jfcx5C6bctwCO8fJJwexg=
Subject key identifier: FD:4E:77:6E:D4:85:11:5A:27:14:0B:BE:85:94:19:DC:47:89:A6:C8
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 019BF4627CAA6DA9C83E9E3F78E9A2935FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
Manifest number: 1837
Signing time: Sun 25 Jan 2026 09:00:53 +0000
Manifest this update: Sun 25 Jan 2026 09:00:53 +0000
Manifest next update: Mon 26 Jan 2026 09:00:53 +0000
Files and hashes: 1: 2X2Ba8rgbouM32gnizEyTUGgONU.roa (hash: /S0uaILIP04CzsCMDO3CxuQ/dGQk0LoPnR9uswe+Dno=)
2: BgYgNXUiTeu31n67bX2V90cAvTI.roa (hash: 0v54WM21W+/w7a0Su0L6xDmLThFZAOM3uY/lMR5ZoI4=)
3: H3tBAn476s18gPJKTSL87Rv5Hfw.roa (hash: K4eLaR9vBqA4AN5CoJGHX6K3zIZNHj23kEJNlCUBq5o=)
4: H7xAtviqUTTZ-2BturV__GojEYU.roa (hash: 7y/cFcrHkaXFHOFisDiq8TbDYWThg68s7xHeQ5K5iWc=)
5: R8F1DSddbUmoi5Lvz7GVdblbDkk.roa (hash: ti1BqLXIAMU2z5zdrrvdHJM6DJeICOfg1NjS+8ZVzTI=)
6: TRm4u9w4aHluG_xWq8D3WD9cjE0.roa (hash: t+LJY16hYEjvyFHAQ5NgBP7TAysJCOIWTLbr8ofTjqA=)
7: U8NQ-X6oXdPJtDvZC2bEGyclVuc.roa (hash: EnK49cFtZphk+Uu4vq0sYXSzWqCtB8Omy8Rc0kmt4Ts=)
8: YCkhVzl1kc7Gznj8NLyf1ekh9bk.roa (hash: pAjAIrqpfxVq+D0TEnCShzgTAby51DVmf4jXA87+HYQ=)
9: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: Syn9BaNgz6l9F+ZobhSXFDWmn++0R9WL1h4Df17neYM=)
10: _0309cZ1kikOxbfzcD2XJAY-ldA.roa (hash: cZXM6KU83tIxyiRuWRs4jXSNFO8qUxYJiHjRIWvBrHc=)
11: dLSSiZeltba729G3UFGH0XwLSho.roa (hash: 4MsOLvl+y1vyg93nB2nnBksXqFnl7fNEnQs0xIF73hU=)
12: vngvIz2KaFj8ZKtPi7_fxlNZjyQ.roa (hash: SSRAx6tIqP5pWWJsGfEi1oQj/WWXNPjtWbIrNaJW0nU=)
13: yHx7U3h6JZL7GjJtXadc-tvTWag.roa (hash: bHjlqHL1rl0Vu0vK21UaruHUNcXQbTCMAh8NovcebO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:62:7c:aa:6d:a9:c8:3e:9e:3f:78:e9:a2:93:5f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 25 09:00:53 2026 GMT
Not After : Jan 26 09:00:53 2026 GMT
Subject: CN=fd4e776ed485115a27140bbe859419dc4789a6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:7d:c6:d4:31:58:04:85:5a:c9:26:54:88:
4a:6a:a7:4b:b5:d7:56:6c:63:5b:ab:c3:93:b4:18:
5f:36:90:73:7f:b4:ec:98:68:fb:ec:e6:34:02:c0:
7c:0f:37:7b:67:a9:97:b5:53:c6:f0:fa:05:96:24:
be:09:ff:68:d1:42:26:93:9c:1d:26:51:43:64:55:
51:cc:25:11:03:67:9e:7e:78:d8:d1:6f:93:ed:09:
a9:3d:cc:ea:18:90:3a:e5:ef:9a:be:26:fc:94:7b:
5d:e6:d8:f0:d7:c3:e7:5d:39:87:1f:ee:fb:38:cb:
d7:2b:c5:ae:1d:f6:29:2c:34:78:b7:02:23:6c:a7:
bb:e3:3e:c1:07:3a:73:52:cb:c0:9c:c1:a3:5f:68:
80:75:ff:f1:2e:f0:25:2d:fb:0c:fc:ef:2a:85:a4:
2e:da:dd:cf:c4:af:fd:88:0b:ec:61:79:8f:d7:dd:
61:82:6d:58:e6:fa:38:d2:52:95:99:23:41:ed:57:
1b:44:66:ed:8b:3c:7e:1b:6c:6b:50:8d:ee:69:dc:
fa:a4:a8:e1:90:c3:1e:f1:46:cf:17:65:1f:13:8d:
f1:c8:f6:d4:69:3a:d7:8e:fb:d1:56:ed:28:f2:d0:
18:70:37:02:89:97:ab:08:b0:d3:9e:7f:66:82:0b:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4E:77:6E:D4:85:11:5A:27:14:0B:BE:85:94:19:DC:47:89:A6:C8
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:18:cc:b4:bf:2b:94:57:c7:95:be:99:be:ca:8e:12:8b:f8:
71:d5:fd:2f:a7:a8:e5:2d:c1:6d:33:84:94:0c:98:0d:87:4f:
83:2b:f8:fd:7d:25:02:63:bb:eb:5b:b8:d5:0b:6d:d4:f2:9a:
64:4c:ac:4f:c5:cd:2d:ff:10:31:6e:8a:2a:53:19:ab:91:8b:
c0:d8:38:d1:52:64:37:8b:ad:51:0a:21:93:73:b7:c1:b2:e7:
15:3c:3c:be:d4:61:5f:38:30:52:12:98:0c:30:7d:25:e5:53:
a2:e8:71:37:88:fd:d6:1d:85:48:de:20:00:c1:41:2d:c8:f9:
ed:81:83:b9:1b:b7:55:d8:8c:36:bb:bd:e3:be:f4:7c:5f:8a:
58:47:95:59:0c:e7:4a:6e:a5:82:2c:a6:9c:8a:38:59:c5:97:
94:c7:c2:51:c5:52:a7:34:05:55:69:06:23:63:10:85:e2:35:
f8:88:72:99:cf:f9:b4:10:0e:0d:d7:20:97:da:e8:a7:c0:c9:
23:03:de:c5:fd:54:9c:07:0b:d0:db:f1:8e:1a:fe:48:0a:18:
dd:28:57:36:23:97:db:d7:3b:70:af:80:48:32:27:25:86:a1:
a4:37:97:0f:86:b3:29:80:6a:f4:5a:99:24:73:b2:f2:71:ed:
df:05:e8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:48 2026 by rpki-client