This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: NRYm5HGfDKJoLnTIGJNmBvzoONpNJZMKZ/+1hKKym3k=
Subject key identifier: 5E:39:FA:90:44:7F:CB:0B:C1:90:12:1B:80:C4:A1:C6:26:77:74:9D
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019BFB40426C0EAC2B12BE8E022834C52D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 17EE
Signing time: Mon 26 Jan 2026 17:00:50 +0000
Manifest this update: Mon 26 Jan 2026 17:00:50 +0000
Manifest next update: Tue 27 Jan 2026 17:00:50 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: ekwO+pgzPeBTI5/8rN/TH5k2rGnXUwINvOkKwgAvFLM=)
2: KUodnXGsFwyNehqN551Z9d54ZJM.roa (hash: 6vmbRe0Gw7jdU6fIKbRaOK9xmSJJHl1pGRS+mY2Td7Y=)
3: RxQknk-i6X3uYtHklAq4xTvLElU.roa (hash: e3Fk8UZszFvxL51DyoJ+zqnCymh1Yk5n+ob0FV7BX9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:40:42:6c:0e:ac:2b:12:be:8e:02:28:34:c5:2d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Jan 26 17:00:50 2026 GMT
Not After : Jan 27 17:00:50 2026 GMT
Subject: CN=5e39fa90447fcb0bc190121b80c4a1c62677749d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:d4:cc:51:14:c3:ff:db:74:db:0e:9a:ee:
9d:ce:1f:22:bf:63:cc:db:df:39:8e:09:2a:0c:12:
41:0a:a1:39:70:cb:9b:2d:bd:15:de:e2:80:57:c8:
f4:16:f6:1f:07:9e:b9:64:6e:fd:41:3f:76:de:71:
47:59:0e:d1:3f:a0:8f:6f:60:38:8c:f8:5e:e9:86:
dd:de:cc:05:27:d4:38:cc:2e:8d:b9:08:71:ff:b4:
eb:6f:30:82:7c:93:db:3b:f4:19:c5:c6:0c:a9:a1:
24:74:22:8c:5d:59:f4:12:63:b7:2b:87:3f:89:42:
a0:4d:ab:11:cd:45:d0:9f:4d:41:ea:00:ed:51:be:
f2:04:7c:82:d0:7c:42:61:ad:6e:0c:9d:b7:7b:78:
1e:6c:b9:aa:6c:28:94:c2:32:34:6a:d7:5e:0b:2a:
71:8f:8e:23:d9:3d:c8:23:03:db:b8:25:e8:08:fd:
2d:0d:30:31:fb:a3:3c:70:f4:c6:79:4c:a9:39:85:
7b:01:6b:8f:dd:f4:66:a7:a6:5d:34:72:73:b0:d2:
6a:40:7e:9f:93:66:51:6c:f6:78:7c:da:12:07:41:
f6:ed:21:89:cf:a4:36:f0:ca:25:3a:70:29:86:d3:
47:de:07:75:f6:98:a9:8b:6d:e0:7d:d0:b8:a0:91:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:39:FA:90:44:7F:CB:0B:C1:90:12:1B:80:C4:A1:C6:26:77:74:9D
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:42:9f:45:1e:27:86:74:36:1c:c0:e8:7f:53:1d:c2:f6:68:
a8:ce:57:a4:c7:a6:91:9d:d2:2e:c5:3f:15:0f:55:e4:5f:c1:
6e:2a:62:d7:61:bf:7b:d2:88:1d:71:e3:5e:2d:de:77:fd:d3:
97:bc:60:2b:3a:9c:b9:fc:73:09:c3:1f:3f:85:54:bf:e6:e8:
98:8e:c2:dc:1e:9d:f0:50:55:55:8c:dc:8d:d5:c6:fd:6a:3d:
68:71:3c:b5:4a:0b:01:77:7f:de:b4:43:ce:a6:df:c7:33:c5:
ed:d5:41:f5:a0:68:bc:24:21:7a:0b:16:21:0f:7f:5a:43:25:
b3:4f:02:9b:9e:3f:06:4e:ed:c3:cc:7d:e0:54:fe:f2:70:cb:
7e:4e:91:15:a2:43:17:cf:7c:36:e0:91:35:60:34:a4:d1:6d:
3a:6d:dc:ad:e4:6f:ac:5a:b4:3f:ae:63:fb:05:9e:20:75:a8:
11:20:dc:94:bb:d9:85:55:77:02:03:bb:a1:09:97:3c:bb:53:
52:c5:d7:33:c4:04:14:1d:8a:cc:e6:93:f3:10:a2:8d:fd:a7:
f5:7b:51:1b:06:eb:47:ca:2c:37:f1:55:ff:7b:15:84:45:c7:
ab:99:1b:5f:c1:2e:a3:70:d7:8b:88:a9:0b:d4:d4:f1:d6:6f:
b5:00:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:12:19 2026 by rpki-client