This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json)
Hash identifier: dU6AFesP6aVU9VF4domyvf0Sk8MbGnfNz/na92gZc8g=
Subject key identifier: 5E:05:A5:43:E0:FE:24:12:2D:5E:99:A5:B9:73:C8:48:4C:61:6A:32
Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74
Certificate serial: 019C082001917E936E6C2487FC067ED20A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
Manifest number: 17F6
Signing time: Thu 29 Jan 2026 05:00:41 +0000
Manifest this update: Thu 29 Jan 2026 05:00:41 +0000
Manifest next update: Fri 30 Jan 2026 05:00:41 +0000
Files and hashes: 1: IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa (hash: cDrqltz5JUNSKHmEVA8KR/liv1EQj+DHA9UlbgBwDnc=)
2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: iidMVdRGZqMOOEvH6oZjOxyvi/sp0tPp/R1zY8LZ/To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Jan 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:08:20:01:91:7e:93:6e:6c:24:87:fc:06:7e:d2:0a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74
Validity
Not Before: Jan 29 05:00:41 2026 GMT
Not After : Jan 30 05:00:41 2026 GMT
Subject: CN=5e05a543e0fe24122d5e99a5b973c8484c616a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:c2:65:93:44:b8:4d:3c:20:22:59:5e:a6:
b6:f9:52:a0:e8:a8:8f:d8:ae:63:32:16:15:2a:7a:
65:d5:8e:5f:12:8b:18:1b:77:05:2f:2d:be:16:b1:
51:0f:60:4b:2a:bf:d7:a0:64:f8:a5:27:78:8a:b8:
cd:e6:ef:b0:5a:ff:76:de:4c:1a:99:31:79:a8:7a:
e3:0f:77:c5:28:24:bb:6e:c6:21:90:a9:9c:cc:91:
30:1e:97:82:5e:c4:01:fa:0e:53:22:aa:c6:e7:a4:
c3:c6:55:00:5b:33:6e:69:31:7e:74:b5:ac:37:b7:
51:b2:b0:cf:24:bd:6a:3e:c4:5c:c0:b2:8d:e0:58:
a7:6a:52:69:60:93:e3:01:a6:96:31:ba:27:a9:d4:
5c:76:5e:01:28:77:96:5e:a8:74:62:46:47:12:dd:
10:b2:0f:9e:5e:e0:1d:80:a9:3d:88:8d:7b:47:ef:
32:a2:a2:8a:59:72:20:aa:e1:34:83:63:fa:ce:8e:
04:dd:75:a0:57:13:42:22:1b:88:dd:92:02:84:76:
ab:03:05:c6:c4:97:ec:d4:a9:14:91:7b:95:14:4e:
96:8c:d6:55:c8:78:73:36:6c:54:1f:e5:3e:95:a1:
0c:96:b6:94:60:7e:7b:d5:26:a1:74:71:b9:2a:08:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:05:A5:43:E0:FE:24:12:2D:5E:99:A5:B9:73:C8:48:4C:61:6A:32
X509v3 Authority Key Identifier:
keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:84:22:3b:96:42:8a:dc:4c:59:5b:df:83:9b:bb:b9:9e:be:
7d:1b:78:3c:e7:7b:88:ed:0d:b3:4d:be:66:b7:ba:2a:d5:91:
04:65:a1:d0:95:9e:72:da:b0:20:1e:36:11:31:29:6a:ff:02:
92:01:b5:d2:e7:8e:e2:c7:8c:b8:60:dd:de:b4:bc:99:e5:a7:
73:a5:a5:93:d5:28:2c:c4:15:aa:d4:e3:28:8d:dc:28:8b:a5:
38:be:87:29:5f:9d:a3:7c:38:16:92:95:a4:cd:68:d3:d7:00:
d6:3d:65:9b:8f:0c:1a:c3:6d:3e:4a:af:e3:85:7e:17:99:24:
77:9e:e0:06:aa:48:db:1a:64:a8:28:08:d0:87:ee:d7:7e:63:
e0:57:be:cc:b9:d2:05:cb:8f:63:58:9f:25:f6:5d:1f:90:87:
f9:7e:de:33:4e:09:07:aa:06:69:10:03:ab:25:9b:ee:3c:75:
78:c1:73:e4:de:32:62:b3:a0:30:a0:f0:29:40:71:c3:eb:29:
04:8b:e7:26:66:ee:17:c0:10:c4:57:87:5b:a5:40:6f:84:d3:
ea:8a:0f:7e:29:a8:24:d0:2b:68:49:cd:d3:5d:a4:2d:4e:af:
68:8b:82:30:3c:64:04:dd:77:52:89:60:fd:1b:55:bc:c8:9e:
5f:44:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 14:41:57 2026 by rpki-client