This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: pCGf2j91RWTR75jXi/FUG47pXGGhWDHezO6ktHQftJc=
Subject key identifier: 0C:B7:2A:6E:D7:32:0F:81:76:32:D8:9F:6C:74:76:4A:2B:F5:CA:D4
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019BFCF870AB1B89B3200F6E80F04F372B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 17F5
Signing time: Tue 27 Jan 2026 01:01:38 +0000
Manifest this update: Tue 27 Jan 2026 01:01:38 +0000
Manifest next update: Wed 28 Jan 2026 01:01:38 +0000
Files and hashes: 1: 1AAfNkOtoDPkV923JU6uKxUBzig.roa (hash: m+bM/ZO45nJYI69NyHTcglKt6eRpdsvdb8DCz1bIBG0=)
2: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: zWUDWO8mJ6In83PwZVivHKhHHoNEH0AkdGJfNuzKp7U=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:f8:70:ab:1b:89:b3:20:0f:6e:80:f0:4f:37:2b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Jan 27 01:01:38 2026 GMT
Not After : Jan 28 01:01:38 2026 GMT
Subject: CN=0cb72a6ed7320f817632d89f6c74764a2bf5cad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:40:8f:aa:ce:a2:7a:e2:d8:5f:0c:b6:c2:4d:
94:d6:79:bb:46:1e:e9:ec:1a:36:2d:52:b4:80:6b:
af:ca:ca:7f:1f:e7:63:fd:51:2d:61:8b:59:b4:b1:
ab:d8:fc:df:a8:20:e4:27:04:be:07:24:3e:ac:a8:
94:0b:2b:a7:9d:d1:1c:2b:68:e0:70:ce:0c:31:2f:
88:bb:b7:aa:77:d4:4a:27:dd:7f:f4:ae:7b:2b:c7:
37:6c:6a:1d:40:e9:5b:77:d0:2a:e7:cb:6a:c9:cd:
f0:ba:c9:18:30:e1:c2:b5:40:70:2e:0d:e8:cb:9c:
84:2d:5a:af:13:9e:7f:7f:94:2b:6e:cf:b2:16:a8:
5d:5b:25:04:8a:0c:c8:9d:4f:aa:2f:82:e6:01:c4:
d4:b5:d3:81:80:7b:c9:2c:a2:aa:25:9c:6f:12:59:
dc:0d:35:b9:07:19:1d:5f:1b:3f:23:94:a6:b8:63:
c7:5c:40:15:fe:cb:eb:37:e2:27:c6:7f:3b:3e:b8:
f2:85:43:de:34:15:6c:82:41:94:54:65:37:c6:28:
05:d0:52:73:6b:0c:66:01:8b:7b:64:9c:ad:43:71:
18:66:4d:0c:3a:99:ed:0b:73:df:9b:e6:61:1b:6c:
c0:98:93:6d:49:51:24:5c:80:3e:24:b1:67:7a:e6:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B7:2A:6E:D7:32:0F:81:76:32:D8:9F:6C:74:76:4A:2B:F5:CA:D4
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:dc:aa:78:76:db:40:c4:30:7b:7d:e3:18:62:34:82:97:a7:
f8:5a:0e:c9:72:8a:c6:e3:b4:cc:24:8a:17:76:e7:35:07:c5:
df:ad:34:b3:f6:6b:39:39:bc:a9:ef:9d:65:4a:6c:88:41:75:
0f:57:3e:0c:64:28:da:6a:72:5a:1e:2b:3b:b5:a1:f8:43:5c:
0e:5d:47:ba:16:1e:2a:68:22:43:04:4e:86:32:ee:a0:25:5d:
9a:0e:e6:53:53:a6:77:b0:4f:58:32:69:d1:55:c1:be:4f:d4:
c8:ed:e9:6c:43:63:b6:93:6e:60:11:b1:b8:ad:43:c3:47:74:
9c:8b:f9:fb:99:2d:d4:fe:25:0d:03:1d:f6:32:14:8e:2f:54:
3f:a9:2c:fe:ad:59:7c:1f:e2:42:57:2c:7b:ab:4c:f5:51:4f:
da:83:20:56:2b:d7:d3:df:e7:57:b4:ba:a4:5c:a5:bc:12:75:
7b:c7:a8:d9:46:11:cb:dd:39:35:6d:fd:6f:ac:01:ed:c9:55:
2b:d5:59:c8:4c:b7:4e:a6:3d:77:4b:bd:03:ae:d9:c0:ec:f9:
c2:62:a7:57:24:10:42:21:39:77:62:f9:24:0a:ad:8f:1b:14:
e2:a1:07:4b:b0:ce:58:af:76:18:de:9b:0f:fe:36:e4:4d:9a:
64:a6:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:58:41 2026 by rpki-client