This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File: pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier: c05C2fKdMSXCXpoCR4z/V1yhJ/90RgxzqeNqer0CcrU=
Subject key identifier: EE:5D:4E:A9:8F:CD:FC:41:67:84:EB:02:01:D9:19:4C:1A:5F:5E:6F
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer: /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial: 019BF53E2F92A7A75DDF25F615E4766C3E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number: 17ED
Signing time: Sun 25 Jan 2026 13:00:51 +0000
Manifest this update: Sun 25 Jan 2026 13:00:51 +0000
Manifest next update: Mon 26 Jan 2026 13:00:51 +0000
Files and hashes: 1: 7y0LOepFUcA8OxNwETjP06eOGqo.roa (hash: FtFNn3fJLuNl3O3fnntEfGbv+32KsAHr3SqeYeHUCL0=)
2: CuUaPGtvCMhbfFTKvA6UReL_F_Y.roa (hash: UAHd42O2KjlmEGP6gn2QJSSuqJWzfTB5HZHwnRpiaVs=)
3: JXnp6HlQC-5SqdfjYLJsbtC_UIQ.roa (hash: YlECxxfSPVhcfaZ4wCUWJKldj0fpn0G8ae7MLGJ3YLI=)
4: _UUS3q5BecQsPN01euTz6ZXEA3I.roa (hash: /n6cdrP+/xfyaY1mRVl4Rp3lZj1gk+c55nEDkiLkTlI=)
5: makv0shcZ5kNgnoatV93mdzUDzA.roa (hash: pcme59je8U1s3r4CfES9LEZanBL2hRJGysIwX84CTmo=)
6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: Jmss5iN1Iyewz0xw5R3PK3Wt4H8vO6QpSic46mEFwtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:2f:92:a7:a7:5d:df:25:f6:15:e4:76:6c:3e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
Validity
Not Before: Jan 25 13:00:51 2026 GMT
Not After : Jan 26 13:00:51 2026 GMT
Subject: CN=ee5d4ea98fcdfc416784eb0201d9194c1a5f5e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:3f:4e:f7:aa:52:5a:b6:56:a8:65:e1:3c:
b9:cb:06:fe:78:a3:89:2c:45:76:56:6c:5b:8a:7f:
1c:60:0e:ed:51:41:c5:61:ae:50:d6:5e:bd:84:b5:
62:93:45:09:07:a2:a3:29:e1:96:44:9a:6d:48:9b:
80:9c:30:d7:ca:da:62:44:95:ab:cb:3d:74:3d:50:
0b:a8:82:8d:53:5b:e8:02:6e:6c:8d:95:19:4e:e1:
b8:7f:94:21:45:1c:b1:72:d4:b6:a2:35:81:d1:07:
96:44:f4:0d:c2:cc:2b:92:1d:da:0d:74:aa:60:72:
7d:df:38:7d:0e:f3:cb:2f:84:2f:10:23:93:d1:a4:
b4:4e:90:2c:46:b2:c1:ad:36:55:61:f2:27:c3:be:
c1:e8:7b:b9:83:0d:71:eb:99:3a:03:4d:dc:e3:8c:
c1:fd:42:64:7a:08:27:b5:2f:b1:2a:42:fb:94:18:
20:bd:36:3b:fe:ec:ef:e6:34:62:fc:be:45:1b:9e:
9a:ee:dc:d0:50:c1:03:d0:52:46:a1:70:c1:4f:c5:
ad:20:d9:37:a7:e9:62:cd:df:cc:cf:12:91:c1:78:
d6:f3:ee:28:52:43:50:97:34:fb:80:42:d6:d3:56:
37:da:0e:94:c2:16:e0:3a:53:1e:0a:4d:56:0f:65:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5D:4E:A9:8F:CD:FC:41:67:84:EB:02:01:D9:19:4C:1A:5F:5E:6F
X509v3 Authority Key Identifier:
keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:38:b7:86:70:55:df:df:70:0f:30:72:dd:43:59:a1:14:b6:
1a:b3:9d:3c:6a:88:d8:90:20:f7:bf:23:fe:4d:46:28:ae:fd:
a0:4f:1b:1c:48:8f:25:23:b0:32:b6:2c:5c:13:22:d3:34:fb:
89:78:75:a1:f2:74:f7:15:d3:9f:3b:af:4c:22:d9:cc:63:1a:
e5:d2:8d:96:36:74:bf:01:41:7b:25:5c:d4:37:aa:47:35:a1:
30:3b:c8:d9:08:74:f9:99:54:cc:15:11:3f:89:1b:41:78:55:
7e:03:45:64:24:1f:43:56:32:fc:11:d6:3d:81:6f:95:9f:7e:
98:e9:20:fb:c3:c5:fe:2b:b1:99:bd:d5:8d:8b:d4:e2:74:25:
94:90:cd:ad:da:5e:34:d9:37:05:ba:ba:6a:dd:d4:71:9c:73:
4c:a1:0d:2b:ec:24:ed:31:3c:ff:bc:3f:9e:75:3f:42:79:ce:
e2:4e:25:bc:84:41:a3:60:27:57:96:a3:af:65:1c:ab:fb:99:
98:75:34:ca:9c:f8:f1:73:74:07:85:a9:57:90:c0:fc:f0:19:
f6:c2:e5:50:62:4c:cd:3a:83:1b:6c:cb:32:ee:b5:dc:49:cf:
60:73:53:7c:e8:45:cd:5b:82:07:6e:55:d0:7e:5f:3e:a2:37:
0c:a5:4f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:53:10 2026 by rpki-client