This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: BdPcN71dDejh9N0lELvgJLS9iwFtiljRXDbTyGOKfnc=
Subject key identifier: D2:6D:81:E6:0F:6C:08:2E:6F:6D:04:54:76:F6:C0:30:42:92:D5:9F
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019BDDA3DEA5C597ED1ACE1008ADA6903221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 17EA
Signing time: Tue 20 Jan 2026 23:01:02 +0000
Manifest this update: Tue 20 Jan 2026 23:01:02 +0000
Manifest next update: Wed 21 Jan 2026 23:01:02 +0000
Files and hashes: 1: Hm9jDBLH-sqHFB-kWgpns9uuTu0.roa (hash: em9fSdCaWmu85DiyoLonhSdzPO36ZF77WoiFZ16jO0Y=)
2: MPvO2dZ_kOKibteAR_Ns5oUPsXU.roa (hash: yceqp9tOGnASlhlPEstVO0Slz4m1QkPIFdIyEBIsurA=)
3: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: ARWlIEYZWU1xYxdTWqYgirpQbv7hCSDEEqzokKxAUM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:dd:a3:de:a5:c5:97:ed:1a:ce:10:08:ad:a6:90:32:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Jan 20 23:01:02 2026 GMT
Not After : Jan 21 23:01:02 2026 GMT
Subject: CN=d26d81e60f6c082e6f6d045476f6c0304292d59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:d4:d5:0c:a6:d3:68:43:e8:2f:af:46:5a:
4f:2e:11:7d:ab:43:80:4a:95:88:29:e1:39:b8:03:
72:00:25:89:88:10:8e:88:78:d9:07:02:af:36:6b:
ce:4b:73:43:ef:c0:f7:4b:9e:4a:c7:ca:cf:b5:7e:
8a:cf:f4:1f:2b:b2:27:62:53:b9:e6:19:a1:6b:6e:
cb:54:6a:0e:8f:4c:5f:c0:92:40:c5:7d:f0:06:ef:
22:6d:60:aa:5e:56:d7:17:b2:44:d9:3c:82:f2:40:
46:64:58:51:04:52:75:5c:45:76:7b:d8:a4:96:1b:
b6:19:6f:14:53:4f:0e:39:c8:20:ce:e5:65:6a:31:
5f:6c:6b:e4:59:aa:25:d4:7a:c9:3f:66:26:52:cb:
2c:b7:8a:2a:d4:21:46:92:7f:eb:f8:a4:eb:ce:c4:
97:90:d9:52:db:b9:dc:44:f9:ce:2f:b7:84:14:2d:
96:5d:69:10:2e:45:51:2c:15:15:94:7b:1a:92:73:
6c:31:06:4e:8b:4e:17:2b:df:e2:84:e2:0c:b7:bb:
4f:c1:14:3c:37:31:9f:db:15:24:1d:f8:14:46:48:
3a:d1:f4:55:05:e3:81:e7:a1:6e:6d:0a:45:0f:ae:
63:43:c9:4a:e8:61:ad:a8:50:e4:32:76:d6:06:0d:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6D:81:E6:0F:6C:08:2E:6F:6D:04:54:76:F6:C0:30:42:92:D5:9F
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:10:eb:df:6a:d9:b5:4b:8d:3d:84:7b:f5:5c:07:7d:74:f4:
28:42:0e:64:25:fb:39:47:2b:1c:08:b8:1a:61:b5:f3:f7:01:
7c:35:fc:b7:75:0f:f6:22:fe:be:c7:4d:73:fd:8c:76:f9:90:
1b:16:c9:f3:7b:f1:53:df:59:cf:c6:8f:af:94:bc:f1:50:8b:
e1:bd:53:76:1b:32:d8:23:72:ba:f2:e3:65:00:47:f6:eb:77:
2a:84:42:3b:d8:96:65:8a:08:bb:48:62:47:65:f1:2e:e7:f8:
ee:86:52:3b:c7:30:68:fe:b3:68:1f:5c:74:f1:83:e5:d4:94:
31:83:04:57:04:e9:7e:3b:e1:e4:24:6f:34:cf:1f:cc:c3:28:
f0:77:e1:3c:d2:f0:ba:96:12:6b:8d:10:6d:66:4d:84:a9:bc:
8d:4d:79:ae:c4:4a:18:d1:4a:b4:90:93:25:fe:8f:48:9c:e6:
cb:74:8d:98:c0:16:a0:36:d9:1c:13:c6:07:f9:89:0e:1a:49:
32:57:54:58:00:66:5b:1d:6b:7d:e0:b1:ae:a8:e6:e4:d2:37:
2c:40:63:8d:9d:7c:86:43:43:fe:f1:08:bb:80:5e:43:26:93:
2f:df:11:11:62:47:2f:9b:ad:3e:f3:92:28:fd:53:6c:c4:d0:
a0:cc:6c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:42:48 2026 by rpki-client