This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
File: 0l7-VEtjV8f7woGy5BscsudD6Jw.mft (raw, json)
Hash identifier: uwm/FP/RadZzcEM0BKF4nzGnT/nAlzLeQnLOjR3uM9U=
Subject key identifier: 45:5A:E6:7E:80:38:BB:04:DD:89:5E:4E:DC:DB:0D:16:F3:EB:C0:93
Authority key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C
Certificate issuer: /CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
Certificate serial: 019BF9521BE97E04523D2C94ACEF6F3D9A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
Manifest number: 43
Signing time: Mon 26 Jan 2026 08:01:06 +0000
Manifest this update: Mon 26 Jan 2026 08:01:06 +0000
Manifest next update: Tue 27 Jan 2026 08:01:06 +0000
Files and hashes: 1: 0l7-VEtjV8f7woGy5BscsudD6Jw.crl (hash: cXJYXuwTQ6vYkPRvq27Ytwzb0Wf2cWpajhcq7hKBdaI=)
2: HYHPGDt2fjAgC47_M3DioNC03-E.roa (hash: cxx+e28mtQ/DOkAQ7RXQpszf/7Q5+36ijtIPOYGFO4M=)
3: LwR4VXrBpkRMHSbEFyenX6LXrCE.asa (hash: jVrxmc6svS9BB1rMG7dzIKPVWauhr47/OGDAYdAMkRY=)
4: QTLtDqEEsM_tlA6w6CJrYZAb75c.roa (hash: f/By1t4BWg4HCaNfNQT18viP9uwH0OR37HcliKJPeuM=)
5: b2VOFAnqw5bF8fvnjITcw0QPySc.roa (hash: p6e5jWlWStkGfYACB8q5Ip0Xm5alg3UPW1AjXMay8TY=)
6: h-9H8BvmwSMG-2kh1YXJYtXWY6Y.asa (hash: sCIUmJSoLok4G31DTxZhSpfZ1i35wAj3Z+H4d8mT8To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:52:1b:e9:7e:04:52:3d:2c:94:ac:ef:6f:3d:9a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
Validity
Not Before: Jan 26 08:01:06 2026 GMT
Not After : Jan 27 08:01:06 2026 GMT
Subject: CN=455ae67e8038bb04dd895e4edcdb0d16f3ebc093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:9b:ca:c3:13:aa:d5:72:63:33:c9:9c:81:
f1:17:10:fa:c5:27:a5:fa:96:80:f4:ea:fe:3a:67:
c7:28:c3:3a:fe:7c:86:73:2e:5c:80:0c:e2:0e:f8:
41:7c:09:54:c7:d3:6b:b8:a5:35:06:fc:c1:44:2b:
c1:58:6b:e0:70:db:a5:71:ba:20:fb:0f:f9:1f:22:
59:07:f5:3e:08:2e:fe:4c:f9:6b:4a:a9:61:6f:02:
a9:4e:c5:27:b5:bc:e8:59:e8:d4:fb:e3:6a:5f:f3:
8d:94:aa:78:f6:a4:5b:97:1f:88:a7:c3:36:6c:1a:
f7:0b:6a:38:9b:82:4a:75:ae:91:58:3b:cf:93:a2:
bd:a6:4b:65:cd:32:94:a6:fa:59:c2:be:49:9a:c9:
9a:27:26:ae:55:81:7a:de:0a:91:64:9c:df:ed:61:
25:c8:33:f2:82:ac:cf:53:8c:4a:06:5a:87:8e:d8:
56:3f:59:b1:33:0f:90:a6:76:5c:c1:e8:5c:b5:2f:
33:0f:f8:d5:53:d2:8d:58:d2:6a:af:74:0a:36:7f:
c0:ef:c7:85:05:d5:30:db:f4:a8:54:a1:2c:8b:4e:
bc:1c:35:55:c9:37:1e:52:e6:a2:61:d7:ea:b7:76:
06:85:6a:da:78:d4:38:84:06:d4:b5:0a:07:df:1a:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5A:E6:7E:80:38:BB:04:DD:89:5E:4E:DC:DB:0D:16:F3:EB:C0:93
X509v3 Authority Key Identifier:
keyid:D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:68:ac:ca:79:38:03:de:08:78:94:73:22:f8:a2:42:45:8d:
61:15:f6:df:3e:ce:91:1f:0a:d3:22:ff:d7:8f:f3:dd:91:ca:
75:4a:db:5b:6c:22:29:52:f6:a7:0e:4f:d5:c2:51:76:48:e6:
68:51:43:07:46:03:cb:3b:d1:e0:2d:96:8d:79:59:20:8d:24:
83:a7:5d:4f:33:11:04:c2:9d:e1:2c:1c:e3:29:cb:8f:96:e6:
bb:79:a2:3a:62:24:8a:3b:2b:a0:a8:79:24:35:82:35:89:97:
6f:e3:27:f0:1e:a1:c6:db:39:c5:ea:b8:ec:a4:4c:c0:b9:bf:
15:a0:38:97:39:a8:f5:26:00:d1:b4:4a:f6:c7:54:21:20:2d:
bc:92:93:ab:c1:7b:8f:c9:19:db:3d:d3:a5:1c:62:40:35:27:
e2:37:cf:18:5d:bc:ab:43:33:12:83:56:50:1d:7a:28:d3:48:
55:06:e4:e8:5f:da:1b:1f:97:8b:c2:4c:c6:50:fb:3b:11:05:
5c:9a:dc:bc:ab:af:96:c9:df:79:e5:10:8e:f4:63:bd:56:05:
97:b0:c4:b5:f4:1e:d2:9f:97:cf:34:13:2e:bf:a4:80:d4:0c:
3f:68:d2:16:ae:a1:59:91:f7:aa:fb:e5:06:8c:95:96:9f:d7:
48:64:da:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5UhvpfgRSPSyUrO9vPZpIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWVmZTU0NGI2MzU3YzdmYmMyODFiMmU0MWIxY2IyZTc0
M2U4OWMwHhcNMjYwMTI2MDgwMTA2WhcNMjYwMTI3MDgwMTA2WjAzMTEwLwYDVQQD
Eyg0NTVhZTY3ZTgwMzhiYjA0ZGQ4OTVlNGVkY2RiMGQxNmYzZWJjMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzKbysMTqtVyYzPJnIHxFxD6xSel
+paA9Or+OmfHKMM6/nyGcy5cgAziDvhBfAlUx9NruKU1BvzBRCvBWGvgcNulcbog
+w/5HyJZB/U+CC7+TPlrSqlhbwKpTsUntbzoWejU++NqX/ONlKp49qRblx+Ip8M2
bBr3C2o4m4JKda6RWDvPk6K9pktlzTKUpvpZwr5JmsmaJyauVYF63gqRZJzf7WEl
yDPygqzPU4xKBlqHjthWP1mxMw+QpnZcwehctS8zD/jVU9KNWNJqr3QKNn/A78eF
BdUw2/SoVKEsi068HDVVyTceUuaiYdfqt3YGhWraeNQ4hAbUtQoH3xptuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVa5n6AOLsE3YleTtzbDRbz68CTMB8GA1UdIwQY
MBaAFNJe/lRLY1fH+8KBsuQbHLLnQ+icMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDhiNDEtYmM2Ni00YTVmLTgyZTYt
YTgyY2JiYzczNjc1LzEvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZDhiNDEtYmM2Ni00YTVmLTgyZTYtYTgyY2JiYzczNjc1
LzEvMGw3LVZFdGpWOGY3d29HeTVCc2NzdWRENkp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2isynk4
A94IeJRzIviiQkWNYRX23z7OkR8K0yL/14/z3ZHKdUrbW2wiKVL2pw5P1cJRdkjm
aFFDB0YDyzvR4C2WjXlZII0kg6ddTzMRBMKd4Swc4ynLj5bmu3miOmIkijsroKh5
JDWCNYmXb+Mn8B6hxts5xeq47KRMwLm/FaA4lzmo9SYA0bRK9sdUISAtvJKTq8F7
j8kZ2z3TpRxiQDUn4jfPGF28q0MzEoNWUB16KNNIVQbk6F/aGx+Xi8JMxlD7OxEF
XJrcvKuvlsnfeeUQjvRjvVYFl7DEtfQe0p+XzzQTLr+kgNQMP2jSFq6hWZH3qvvl
BoyVlp/XSGTapQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:40:36 2026 by rpki-client