This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: YO8Is8nhncAeVwCBbkF0Ol4rUHT8jtn6G48JgSX5IDc=
Subject key identifier: DA:5C:61:28:1A:67:B6:41:C2:07:3A:0A:0D:AF:7A:FB:FD:44:20:83
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019BFE0A9F3ECB83A3E6CDD096552BEC1CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0DF4
Signing time: Tue 27 Jan 2026 06:01:07 +0000
Manifest this update: Tue 27 Jan 2026 06:01:07 +0000
Manifest next update: Wed 28 Jan 2026 06:01:07 +0000
Files and hashes: 1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: yhePU9yyrXhyideNAk0KN93RoMLqg78qr/lyhmgVNrM=)
4: SO3BlzN82wuSE26PkAHoL9gdWK0.roa (hash: 2lTdc7W5+lUgsLYun9vUAbt/KzErih08Dxdrvh4+kG8=)
5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
6: xzU_R1urm6OQwv7-i4Miu0Lg7FI.roa (hash: 83vwjevGkm7TeLLNTTDiOn/v2zo45wBKwUV/hw2Ppgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:0a:9f:3e:cb:83:a3:e6:cd:d0:96:55:2b:ec:1c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Jan 27 06:01:07 2026 GMT
Not After : Jan 28 06:01:07 2026 GMT
Subject: CN=da5c61281a67b641c2073a0a0daf7afbfd442083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:88:41:a2:fa:cc:c1:8a:35:06:27:86:62:
24:b6:93:79:c6:e8:48:2e:c8:0a:9d:e4:43:47:d4:
ec:c2:76:90:b0:12:a5:fd:58:54:60:20:15:48:09:
fc:24:98:d3:97:f2:45:4d:c6:1a:a7:4d:1f:0b:27:
71:77:78:b1:aa:37:ac:94:a4:7e:ba:98:e3:9d:e8:
f1:95:40:28:58:05:94:9c:57:48:c5:46:d5:11:20:
ef:19:18:60:9e:0c:7b:9a:ad:67:1c:de:a7:86:1e:
e3:50:ad:1a:01:72:7e:fc:12:a1:42:af:78:f3:da:
5b:01:9a:cd:13:fa:55:f8:41:fa:48:e7:dd:cf:c4:
b0:9d:16:35:5a:5d:f2:a9:60:b9:25:23:64:ae:01:
9b:f5:fc:50:e6:41:9e:21:86:d8:50:ba:07:10:56:
19:e9:c3:a4:1b:9a:cd:47:4d:a1:35:72:a3:a2:88:
30:7b:68:17:bc:ef:f2:f7:7d:0d:7f:a4:c3:81:a4:
05:91:25:fb:29:46:ad:cb:75:77:ef:40:05:b9:64:
37:e9:b3:c9:26:e9:22:18:ab:27:4c:3c:58:7f:b6:
6b:4e:85:72:cf:82:5f:fe:89:b7:99:4b:a2:77:5e:
b7:c8:8c:fa:8f:36:74:0b:ad:17:71:a9:19:99:e2:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5C:61:28:1A:67:B6:41:C2:07:3A:0A:0D:AF:7A:FB:FD:44:20:83
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:75:bb:13:c7:ea:48:23:ce:5e:49:22:0d:3c:f7:0b:26:85:
eb:5a:80:08:a9:0e:03:ef:48:a5:e9:3f:47:43:74:55:03:cf:
37:81:a4:24:6c:b8:6b:86:27:e9:e3:16:a2:b1:12:18:c0:73:
20:43:c2:41:e3:38:aa:c5:7c:34:84:27:b7:50:5e:1b:cd:15:
2d:ac:27:fc:d4:f1:13:e0:97:b5:4e:11:44:b1:b9:c6:b7:3a:
5c:4a:82:ee:64:69:15:04:8a:4a:77:dc:f6:44:2c:c5:98:fc:
ca:33:54:73:55:02:67:bb:59:70:5f:fd:1c:79:26:4d:c5:38:
03:ca:92:ea:30:ae:58:71:de:59:ef:e3:e7:23:0b:c8:3d:43:
b1:5e:aa:ab:09:f5:e4:f6:83:43:3f:1f:83:2b:ea:48:7f:86:
85:a8:32:b4:32:2b:78:19:b6:2f:99:dd:c9:b0:44:b1:78:cf:
cd:b6:53:54:3d:0d:0b:76:07:bc:17:2e:03:97:bc:25:4a:1e:
78:5e:df:50:1a:63:ec:67:d9:2b:de:7d:21:f6:fe:2d:45:76:
00:f3:4a:da:8a:03:00:ee:04:e4:e6:da:df:fc:02:b6:5a:37:
8f:3a:e4:e8:b4:1b:5d:14:a3:ac:48:ee:83:07:75:6e:9b:bb:
23:4b:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 10:00:38 2026 by rpki-client