This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
File: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json)
Hash identifier: I27stnmRcBbaQ+vTuoAC79Gae4LTTevIrJ9oguDlapY=
Subject key identifier: 98:C8:BE:C4:7C:0E:2B:F1:24:9A:76:9C:FF:5B:53:32:80:EE:7B:52
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 019BF5AC1E06515D576E6F52BC76E57B6C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
Manifest number: 1573
Signing time: Sun 25 Jan 2026 15:00:56 +0000
Manifest this update: Sun 25 Jan 2026 15:00:56 +0000
Manifest next update: Mon 26 Jan 2026 15:00:56 +0000
Files and hashes: 1: ErNXrycTzph6JSf18PtwwsQoz2w.roa (hash: JFPJWJTX9AS74O2qvrW7DFe57VW6uqTN8mG7Rp0yt+w=)
2: SZE5e1h7vVE1K8b37udvVnSNQcM.roa (hash: DCVuhDnUxaJKtTV6uLri/M27ey5GSqDohY5/pt5Ejsk=)
3: Z1IlhEZgiQwk8auaQbQKsQhfjGw.roa (hash: GuAHOBM9mGxQz1BFFSnguR68MvXbC1uYn6q2dEBSyQ0=)
4: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: 929YHjDYPLfRvlfY+Y40LyQE+DBr5odqiQirBKEEU4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ac:1e:06:51:5d:57:6e:6f:52:bc:76:e5:7b:6c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Jan 25 15:00:56 2026 GMT
Not After : Jan 26 15:00:56 2026 GMT
Subject: CN=98c8bec47c0e2bf1249a769cff5b533280ee7b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:7b:c1:11:c8:19:44:88:64:3b:c4:bf:6a:
13:ee:1f:00:9f:df:27:2e:7f:88:85:a6:af:da:3f:
14:eb:13:48:cc:01:6c:83:b4:87:23:7e:4c:22:8e:
84:cf:8f:4a:49:c1:a3:2d:8d:71:2a:58:b0:92:52:
bd:12:03:49:be:08:e1:34:64:ab:fa:0f:15:78:49:
d0:45:f7:08:5a:66:6a:2c:70:7d:9f:9d:a8:f4:ee:
3d:66:22:26:91:61:80:37:06:84:c2:7d:81:45:da:
82:58:6d:9e:dc:89:bc:f6:87:11:20:77:06:b9:5e:
b0:9e:46:2f:2d:76:99:5f:52:97:16:1c:02:7b:73:
81:47:eb:29:92:44:6f:50:dd:08:8b:3d:26:37:9d:
2a:ce:3d:de:27:ef:8f:2b:06:19:e0:cb:4e:9b:1a:
a9:f9:62:83:ca:fa:a6:8e:55:ac:43:8d:d8:e9:d4:
1a:bf:ae:06:59:f0:e9:fe:e7:14:95:45:0d:40:41:
1d:3a:a3:8c:16:3c:b5:58:f7:9d:0b:ee:b1:8a:49:
fb:b7:19:fd:64:d8:23:d6:f8:30:0b:82:9f:63:4d:
13:7d:d9:56:99:11:d5:66:ee:da:39:54:92:12:d5:
b3:c3:cd:b4:a5:78:25:51:72:63:fd:43:3e:a6:30:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C8:BE:C4:7C:0E:2B:F1:24:9A:76:9C:FF:5B:53:32:80:EE:7B:52
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:21:de:d4:ba:fa:85:a5:10:a3:cb:ca:9b:32:0e:17:62:30:
07:40:fc:d8:aa:39:81:5c:1b:d2:ea:d1:5e:b0:aa:49:eb:a0:
5b:ac:34:29:43:16:59:e5:c3:a3:43:d8:7c:e7:d8:16:b3:16:
36:e4:10:1b:15:88:85:5b:37:6b:f3:1e:04:b7:a6:5b:9a:c1:
c8:20:fa:69:ca:f4:59:b6:da:e3:b4:9f:38:9f:a7:f9:31:0c:
0e:21:4a:27:b3:5e:37:8d:68:7d:b7:d9:39:b1:64:51:c3:b5:
25:7c:37:0c:22:01:83:6b:5b:fa:f4:b1:b1:d8:f4:80:66:9c:
8b:d6:78:36:fe:cb:94:39:98:ad:c1:1d:ae:cc:17:b0:ad:e1:
10:58:a6:65:c6:86:94:fa:8b:38:28:8f:d6:e0:92:be:2a:5b:
c0:1a:1d:05:21:2a:87:6f:f8:b5:4c:3c:fd:d9:f0:53:84:41:
78:94:ef:52:88:a7:ea:2d:f8:ac:4e:df:a9:77:df:44:b1:ad:
4c:e2:57:96:2c:0e:82:ee:86:77:25:f3:3f:6e:c0:50:3a:d2:
be:64:fb:70:d8:cf:cf:5d:2c:bf:a7:21:00:65:c3:e8:be:a5:
49:6e:41:30:a5:c1:ce:2c:d1:30:57:ea:c5:71:ec:72:d5:2a:
e8:b1:31:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1rB4GUV1Xbm9SvHble2wkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNWZjNmM2YWVhM2YwZTRlZGY3Y2NiOTJlNmViMjM3N2E3
NDc5YTUwHhcNMjYwMTI1MTUwMDU2WhcNMjYwMTI2MTUwMDU2WjAzMTEwLwYDVQQD
Eyg5OGM4YmVjNDdjMGUyYmYxMjQ5YTc2OWNmZjViNTMzMjgwZWU3YjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujJ7wRHIGUSIZDvEv2oT7h8An98n
Ln+Ihaav2j8U6xNIzAFsg7SHI35MIo6Ez49KScGjLY1xKliwklK9EgNJvgjhNGSr
+g8VeEnQRfcIWmZqLHB9n52o9O49ZiImkWGANwaEwn2BRdqCWG2e3Im89ocRIHcG
uV6wnkYvLXaZX1KXFhwCe3OBR+spkkRvUN0Iiz0mN50qzj3eJ++PKwYZ4MtOmxqp
+WKDyvqmjlWsQ43Y6dQav64GWfDp/ucUlUUNQEEdOqOMFjy1WPedC+6xikn7txn9
ZNgj1vgwC4KfY00TfdlWmRHVZu7aOVSSEtWzw820pXglUXJj/UM+pjA0CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjIvsR8DivxJJp2nP9bUzKA7ntSMB8GA1UdIwQY
MBaAFKxfxsauo/Dk7ffMuS5usjd6dHmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjIt
OWExMzcwOTJjZGQwLzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjItOWExMzcwOTJjZGQw
LzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyHe1Lr6
haUQo8vKmzIOF2IwB0D82Ko5gVwb0urRXrCqSeugW6w0KUMWWeXDo0PYfOfYFrMW
NuQQGxWIhVs3a/MeBLemW5rByCD6acr0Wbba47SfOJ+n+TEMDiFKJ7NeN41ofbfZ
ObFkUcO1JXw3DCIBg2tb+vSxsdj0gGaci9Z4Nv7LlDmYrcEdrswXsK3hEFimZcaG
lPqLOCiP1uCSvipbwBodBSEqh2/4tUw8/dnwU4RBeJTvUoin6i34rE7fqXffRLGt
TOJXliwOgu6GdyXzP27AUDrSvmT7cNjPz10sv6chAGXD6L6lSW5BMKXBzizRMFfq
xXHsctUq6LEx4Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:14:12 2026 by rpki-client