This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: zTdLxUr8hmgWNJAve4Sfq6nlOj7IyxNTru5q13sQbyQ=
Subject key identifier: 20:00:1F:6C:D9:99:DF:87:64:BB:DE:F6:6C:E9:72:27:BA:A6:B0:59
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019BFCC0D61EB324E635C0EF2EBD4879612B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 054C
Signing time: Tue 27 Jan 2026 00:00:54 +0000
Manifest this update: Tue 27 Jan 2026 00:00:54 +0000
Manifest next update: Wed 28 Jan 2026 00:00:54 +0000
Files and hashes: 1: A8PNklH6_RdGA5SXBmz7CmQ2ejc.roa (hash: G32ue8AWHzovX9yZjIgUF6MN72sXNFz9nWr+gwmW9lo=)
2: UvFRLcdnN72RMKcY-6GkngwKWkg.roa (hash: 8Itln6PEQnR3OxkcnuhYuWLxcSYWOcJ+PQmytB21lHs=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: 7ZkWhUWs6rau3dhAFX3pvN08P5kVKzh89gLW7CHSAJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:c0:d6:1e:b3:24:e6:35:c0:ef:2e:bd:48:79:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Jan 27 00:00:54 2026 GMT
Not After : Jan 28 00:00:54 2026 GMT
Subject: CN=20001f6cd999df8764bbdef66ce97227baa6b059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:d9:9c:36:fe:30:b5:f4:57:7c:4c:9f:c9:
f0:5f:e5:36:d0:26:1d:7e:88:f2:c3:b4:b4:0d:ab:
2c:a5:b7:af:a2:e1:36:1d:38:32:17:40:d4:1c:c1:
03:ea:bb:a6:be:50:ca:b9:22:d8:b2:53:dd:68:c1:
81:df:18:7b:0a:82:8a:c5:02:d0:7e:ae:93:f5:0e:
e5:ed:68:32:ec:50:84:a0:d2:f0:2d:00:c2:1e:44:
b7:e1:92:d2:70:3a:a4:66:50:48:c9:25:12:09:d0:
58:9e:8b:ff:6c:4d:56:90:f0:92:72:12:70:18:b0:
f9:75:c8:b1:c9:14:00:80:fa:7b:78:77:ff:55:31:
75:f0:43:e3:d1:9d:f6:c0:af:0b:cf:cc:5d:20:a0:
45:eb:d4:c0:7c:a3:33:af:2c:ca:a7:38:ce:c1:06:
57:a0:b8:e9:45:4d:65:43:e1:43:cc:93:ce:f1:8a:
3d:db:5c:8f:78:f1:e8:25:7e:81:37:e4:8e:98:b4:
e4:aa:3f:72:26:9b:6f:bf:fc:c4:a9:66:9b:84:1b:
f5:18:44:02:51:74:87:e8:a5:57:be:9b:52:c5:9e:
78:d5:f0:2d:93:b2:8c:70:6c:73:e3:33:f6:5f:ea:
76:2d:4d:02:ae:86:1d:f8:64:e9:4c:89:dc:dd:e1:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:1F:6C:D9:99:DF:87:64:BB:DE:F6:6C:E9:72:27:BA:A6:B0:59
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:48:22:7a:7d:04:30:fc:33:b4:90:d4:73:1f:64:21:a7:81:
e3:dd:33:22:ca:5a:76:06:16:09:3c:a9:e2:8a:0f:06:35:86:
4e:b3:8f:5b:ff:9a:c9:87:69:9e:97:7f:4d:27:fc:e7:d5:9f:
f0:98:d2:86:04:2a:67:3f:16:73:03:1c:4d:30:61:6d:5b:f3:
2a:51:e4:fd:4e:c0:29:bc:fd:e2:0d:79:91:35:b8:0a:23:6a:
21:ab:90:8a:d3:41:d4:a0:69:df:56:75:95:d1:3f:15:d8:20:
21:a8:9b:8a:8b:c5:74:42:00:d4:b0:96:be:a0:a4:35:49:26:
34:31:a0:45:56:72:f6:4e:2b:68:23:47:59:aa:e9:93:20:c8:
bb:31:a1:0d:b1:07:45:21:6b:16:04:fb:bf:e2:92:35:04:1d:
ee:8e:b9:c2:56:da:9d:60:e3:43:27:38:dc:57:3d:20:fe:1c:
1d:b4:92:84:9b:d9:7f:a4:a5:29:1a:45:a0:99:a4:ea:35:cd:
16:58:62:cd:bb:30:ac:59:7a:af:3b:16:f4:5a:22:df:df:3c:
3b:38:1b:55:0c:9d:4f:74:1d:33:18:61:77:23:5a:7a:11:2a:
3d:6c:41:74:14:c7:98:d0:41:72:12:07:23:6f:09:6a:91:c7:
02:02:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:06:45 2026 by rpki-client