This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File: xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier: iljeI/6865h430AEVpbKAE6u0igXjMkssyT3q3260EY=
Subject key identifier: EB:A1:17:43:A4:CD:E7:3A:DA:D8:BC:A5:39:AF:12:18:54:07:95:57
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 019BFE0AE735F5F9B94EF44E606E80599C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number: 0960
Signing time: Tue 27 Jan 2026 06:01:25 +0000
Manifest this update: Tue 27 Jan 2026 06:01:25 +0000
Manifest next update: Wed 28 Jan 2026 06:01:25 +0000
Files and hashes: 1: P0czBLbxFJ_vbZgPaB2DgNxcwSQ.roa (hash: ivVj2UBDr142ozpVQ0et+tsk9O7vfSnbWu53eKofLH4=)
2: XPbIAQjvWUhps2QzwB4FO6KMPQg.roa (hash: WmuXuAfgAD/HSjGwGkFBdZOZhMWpJ738UuXdMSLFck4=)
3: ZNFAAOVOA_TUHrjNSM4uKsZgqcc.roa (hash: 7v4wpy52S1nKFjEkeyyEFDHr8mGfzkP5V5Zp0vSSsfc=)
4: eqTX003eyxyptc_5akwZQ-er_vM.roa (hash: K3SbRlftewHG9cfG5hVXUNxxbzFwfkxJoPCLzQ3dz+c=)
5: qBNprkht_3wALG390SrSxt6PGBw.roa (hash: kjvF8COrbedUsxCSe7zrkJLG0/raxxFzLfphFFiIUxQ=)
6: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: suvGb8WK85W38UIBEab7b2WBzWcI+kpRxRupmXqmwHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:0a:e7:35:f5:f9:b9:4e:f4:4e:60:6e:80:59:9c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Jan 27 06:01:25 2026 GMT
Not After : Jan 28 06:01:25 2026 GMT
Subject: CN=eba11743a4cde73adad8bca539af121854079557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:bb:a6:86:54:e4:f3:b5:45:95:21:de:4a:
93:92:85:2d:ad:82:5b:84:9b:d3:df:08:ad:95:a6:
69:88:b8:08:38:6e:c7:04:8e:d9:18:c4:31:dc:bc:
7c:d2:1d:26:a9:b6:6d:d2:e1:6c:ce:d6:ef:4e:9a:
f2:fe:76:5b:65:93:b8:10:35:2c:a3:cb:46:3b:65:
7f:75:20:7b:86:6d:58:b6:59:97:c4:30:11:3a:6b:
db:8d:99:32:e9:7b:43:95:04:e0:93:07:d1:4f:00:
c7:52:1a:a3:37:6f:d1:8f:72:31:5d:52:db:df:09:
75:44:41:e2:29:47:16:a7:fd:7c:4a:fc:07:25:94:
a7:71:9e:d1:d2:f1:79:ad:ab:c9:25:5a:25:37:cf:
de:f0:54:71:a8:bf:ff:e8:c7:8a:b1:72:a1:2f:f3:
c1:44:e0:a6:03:74:e3:c2:72:77:23:76:68:60:43:
2e:c4:36:e2:85:ec:e1:45:4f:24:6d:26:92:42:1f:
d5:88:c4:85:33:c3:9a:a3:8c:11:1f:bc:90:dc:8c:
fa:f8:23:3f:cb:da:75:4a:9f:d9:e3:88:1b:1e:58:
cf:32:fc:24:78:a1:34:12:d4:f2:3b:3b:80:62:69:
d9:ce:58:66:5f:38:51:f4:3e:00:e9:0c:91:1b:a5:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A1:17:43:A4:CD:E7:3A:DA:D8:BC:A5:39:AF:12:18:54:07:95:57
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:b4:bd:e0:db:fa:44:ab:05:85:b6:b3:f4:0d:af:f3:07:30:
9a:eb:fb:1c:52:21:0d:0e:23:18:bf:21:a8:fc:07:84:f2:82:
41:e2:0e:b9:2a:6b:58:d4:66:e9:d2:9c:02:b5:ea:c4:c5:ca:
4d:11:84:c3:ec:b3:78:28:3e:f3:e5:7a:24:b5:60:ed:57:08:
96:b2:72:c1:d4:b8:ce:50:12:1d:a3:24:bc:6f:c9:e1:54:72:
69:e3:0a:9d:6c:0a:2e:fc:fe:a2:60:a6:d2:3d:72:7b:b6:08:
1c:24:8f:ae:6d:32:fa:6a:66:a0:5a:b8:4f:c7:7d:f4:ff:45:
5f:81:e6:ce:af:64:41:79:ac:8f:14:f2:7c:b5:05:e3:3a:82:
c5:c4:bb:22:22:72:95:c6:03:2e:68:d7:03:b2:88:ae:7c:4e:
0c:71:e8:59:dc:8c:25:18:68:c1:26:fc:6f:f4:9f:b5:30:c1:
91:6a:fa:02:2b:77:b8:da:35:95:fd:ae:78:72:b4:5f:64:59:
5f:04:00:4e:8e:05:9a:d0:e1:20:60:53:24:52:4f:e0:3a:e8:
94:8e:ba:31:a4:2e:65:13:cb:06:7d:1e:c9:78:fd:39:83:fa:
7a:ab:87:b5:c7:53:70:69:4a:d0:ac:1b:2d:0f:a5:33:42:cb:
b7:f1:a3:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv+Cuc19fm5TvROYG6AWZx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5
ZjJmNjEwHhcNMjYwMTI3MDYwMTI1WhcNMjYwMTI4MDYwMTI1WjAzMTEwLwYDVQQD
EyhlYmExMTc0M2E0Y2RlNzNhZGFkOGJjYTUzOWFmMTIxODU0MDc5NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1e7poZU5PO1RZUh3kqTkoUtrYJb
hJvT3witlaZpiLgIOG7HBI7ZGMQx3Lx80h0mqbZt0uFsztbvTpry/nZbZZO4EDUs
o8tGO2V/dSB7hm1YtlmXxDAROmvbjZky6XtDlQTgkwfRTwDHUhqjN2/Rj3IxXVLb
3wl1REHiKUcWp/18SvwHJZSncZ7R0vF5ravJJVolN8/e8FRxqL//6MeKsXKhL/PB
ROCmA3TjwnJ3I3ZoYEMuxDbihezhRU8kbSaSQh/ViMSFM8Oao4wRH7yQ3Iz6+CM/
y9p1Sp/Z44gbHljPMvwkeKE0EtTyOzuAYmnZzlhmXzhR9D4A6QyRG6XZ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuhF0Okzec62ti8pTmvEhhUB5VXMB8GA1UdIwQY
MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt
MDYzNjc1MzY3OWI2LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2
LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz7S94Nv6
RKsFhbaz9A2v8wcwmuv7HFIhDQ4jGL8hqPwHhPKCQeIOuSprWNRm6dKcArXqxMXK
TRGEw+yzeCg+8+V6JLVg7VcIlrJywdS4zlASHaMkvG/J4VRyaeMKnWwKLvz+omCm
0j1ye7YIHCSPrm0y+mpmoFq4T8d99P9FX4Hmzq9kQXmsjxTyfLUF4zqCxcS7IiJy
lcYDLmjXA7KIrnxODHHoWdyMJRhowSb8b/SftTDBkWr6Ait3uNo1lf2ueHK0X2RZ
XwQATo4FmtDhIGBTJFJP4DrolI66MaQuZRPLBn0eyXj9OYP6equHtcdTcGlK0Kwb
LQ+lM0LLt/GjbA==
-----END CERTIFICATE-----
Generated at Tue Jan 27 11:16:01 2026 by rpki-client