This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier: xEp6TVmBPuz3lXd376Az4vO6ksd7pqJ/YiSPm++1Y6k=
Subject key identifier: 2B:36:2B:D7:2E:B2:E0:EB:82:A7:08:B8:03:8E:CF:E0:9C:F0:E1:3B
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 019C24AA4CC31BAB8D2B7C22A8DBF66E94A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number: 1814
Signing time: Tue 03 Feb 2026 18:01:06 +0000
Manifest this update: Tue 03 Feb 2026 18:01:06 +0000
Manifest next update: Wed 04 Feb 2026 18:01:06 +0000
Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=)
2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=)
3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=)
4: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=)
5: QWGsJlARLoXD3dTifaZvCAad7X4.roa (hash: Qzx6/bGY/9F07uNBPAulRDJPcAim/44VXRU8uq17XTM=)
6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=)
7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=)
8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=)
9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: YMDVGrU3Ms3SfImAuUqXKIjTLRy39uVoqCLtoHrM2bw=)
10: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:24:aa:4c:c3:1b:ab:8d:2b:7c:22:a8:db:f6:6e:94:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Feb 3 18:01:06 2026 GMT
Not After : Feb 4 18:01:06 2026 GMT
Subject: CN=2b362bd72eb2e0eb82a708b8038ecfe09cf0e13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:be:22:ff:bc:b0:a0:32:9c:7d:1f:6c:32:b6:
39:d6:16:e7:1f:67:52:64:71:cd:37:75:e5:c7:7c:
56:ff:bb:e2:0a:7c:d8:62:a5:c6:63:f8:d0:83:3e:
1a:de:66:c0:0f:f5:77:74:1f:88:fa:a3:ba:68:6a:
66:33:fd:13:3f:25:1e:dc:41:f5:18:4c:89:56:07:
a6:4d:27:8c:8d:cb:49:a8:c5:e6:ef:01:da:1e:3d:
fb:e1:37:cd:fb:93:5b:e2:f7:c6:8b:2a:df:1a:7c:
2d:ed:e1:8c:5f:80:21:cd:c1:a6:c3:b5:a4:a2:af:
b8:5c:a9:3b:67:6e:bb:06:45:ab:3d:a8:8a:f1:1d:
fd:e3:1d:e5:10:af:b1:9d:80:b4:ec:99:4d:82:ff:
df:36:46:77:5a:25:ac:a6:65:d6:40:47:5b:2a:b6:
d7:80:4b:6c:37:c2:92:e5:02:66:14:ea:65:da:a6:
87:9d:e4:74:b5:01:6d:a6:65:4f:a6:b9:6a:3f:5a:
06:22:ba:34:98:3a:76:66:2d:4e:80:46:70:10:06:
2f:78:49:c3:b5:e9:70:2c:ee:c2:e8:52:1e:67:e2:
f8:7b:93:0b:39:1a:29:c7:c9:44:83:3a:6f:68:13:
e6:4c:ba:39:83:3d:3c:40:1c:d2:9a:45:9a:64:fe:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:36:2B:D7:2E:B2:E0:EB:82:A7:08:B8:03:8E:CF:E0:9C:F0:E1:3B
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c3:3a:61:5e:92:a5:69:1f:40:e0:29:ba:77:b3:55:df:dd:
07:30:3b:c5:95:27:92:40:a0:b8:8f:05:2e:16:e6:44:2f:ae:
60:49:c8:c4:8d:fc:81:a4:4a:de:0b:35:c9:74:e5:d3:b0:b8:
0a:86:f9:ac:b4:75:cb:d0:32:ca:94:9e:7b:08:cc:26:27:c1:
34:fc:4a:29:5f:33:b0:b8:9c:5e:c9:04:f6:03:71:df:aa:54:
4c:98:e3:cd:44:e9:e9:44:5c:76:e1:13:ca:c9:a5:29:58:4e:
47:d1:d2:1e:11:72:38:63:26:20:98:29:61:c8:1d:81:cf:a7:
75:8a:3f:42:42:c7:c8:fa:31:5c:25:ad:6c:d6:13:47:04:d0:
6f:a2:02:c7:0f:ca:40:e5:43:11:1f:ed:50:18:b6:59:b0:f2:
49:56:74:3b:13:36:17:37:c7:79:b8:cc:a8:bd:73:9a:04:40:
07:2d:56:b9:8d:17:90:69:07:c8:ef:d5:cd:ea:7e:7d:08:6b:
ed:93:67:0b:83:f6:2c:76:c6:25:03:65:d2:61:cf:d3:ba:4c:
de:4d:6d:f4:33:03:a8:27:8e:9b:ca:b5:c8:58:5c:40:ec:65:
f7:0e:35:a0:d1:df:9d:76:de:8f:5f:ec:62:9d:7d:29:92:71:
21:be:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:18:16 2026 by rpki-client