This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: Lc9gI3xH3xCw/b1GmOGaLqOlnNrxDJNA8aEBe2+TWF8=
Subject key identifier: 7D:E5:32:50:E0:50:E4:80:E4:20:52:3C:6E:A2:5A:84:E1:AC:02:68
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019BA1215DADEBE41FA4C1017C3F7E046697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 176A
Signing time: Fri 09 Jan 2026 05:01:16 +0000
Manifest this update: Fri 09 Jan 2026 05:01:16 +0000
Manifest next update: Sat 10 Jan 2026 05:01:16 +0000
Files and hashes: 1: M9txyYUbtIY2bU_7w-QiEZhq8VU.roa (hash: l+NeQPZSmMfrXax1REFn/9J5sM7uq4E8gECJINtI4w8=)
2: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: vVw7u4q4Z33+D9Ohzpe5FXT/EDMI+kNZh5jraqWqH58=)
3: vrjp4UC1_-klQk8a0d2Jw7eUkDk.roa (hash: 7yocnWrpE0HRuW2D4A9hX7dSDx4fCoT0LRXrI0miZIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a1:21:5d:ad:eb:e4:1f:a4:c1:01:7c:3f:7e:04:66:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Jan 9 05:01:16 2026 GMT
Not After : Jan 10 05:01:16 2026 GMT
Subject: CN=7de53250e050e480e420523c6ea25a84e1ac0268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:f4:1d:b4:25:c5:ae:00:4e:2e:5b:da:0b:
b3:db:a8:b1:11:d2:0a:1a:28:1b:02:11:5b:02:12:
7e:3e:a3:f6:65:a1:23:6b:81:63:17:0c:c4:c6:76:
69:36:a9:6c:91:e6:7c:25:48:0c:c0:66:1c:ba:ba:
d6:15:9f:7f:5e:56:a0:2c:19:ff:23:d5:04:c0:16:
4b:0a:46:e5:df:e4:6d:92:ec:8b:6b:4d:35:96:ea:
8b:ed:61:81:0e:95:db:d8:42:07:3f:67:fd:39:ad:
6a:f0:52:37:17:ae:0e:3c:0e:31:a1:79:35:dd:2c:
3a:a7:f6:ab:19:8b:f4:c2:fc:54:77:30:81:77:ae:
b7:24:c0:6c:2c:4f:78:8c:87:f2:b8:3e:2b:9d:9d:
96:1b:9e:f6:66:0c:f3:76:5c:6f:22:fb:0a:eb:c4:
5c:9e:0c:e1:60:c6:43:91:24:56:95:b8:0c:bc:93:
64:a1:04:1e:4f:9b:bd:c2:f0:cf:51:46:c3:a8:33:
8f:e9:f3:12:01:a5:4c:c2:24:29:5e:86:3b:2c:c2:
98:da:97:04:6b:8e:72:87:60:24:fc:0c:e6:e2:1b:
eb:92:85:57:a4:db:50:fe:d8:cd:b2:1b:9a:69:3e:
9f:f9:c7:c2:bd:bd:63:96:71:75:3c:45:f7:65:80:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E5:32:50:E0:50:E4:80:E4:20:52:3C:6E:A2:5A:84:E1:AC:02:68
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8a:54:94:f9:17:5e:60:c1:94:b2:2d:8c:c6:ab:bd:d8:1d:
28:73:2a:b8:3c:ce:4d:c9:04:d3:ce:18:ab:04:54:9b:ad:40:
78:1f:37:b8:d3:e9:46:9c:01:7b:f3:58:c2:3a:a5:20:ae:9b:
da:38:ea:14:18:29:93:3b:75:17:2e:f3:7e:b5:0a:f2:c1:fa:
8d:ce:b5:38:b9:d0:20:55:e7:89:1b:eb:4c:d3:d9:7d:2d:7c:
07:27:c8:4f:3b:62:4b:ee:b1:1c:01:f4:82:ba:23:53:f8:ba:
86:df:56:d1:dd:8e:51:ee:ab:6f:71:b3:a0:e2:7c:d9:16:ef:
2f:f8:ef:d8:8b:df:7e:0d:18:04:a1:46:d1:b3:21:df:c4:14:
72:e9:cb:20:72:d5:6b:5f:42:03:00:40:73:a7:89:dc:21:78:
d4:35:34:21:93:e6:02:17:21:ae:fe:e3:f5:34:ad:0b:49:22:
0c:5f:69:1b:55:9f:a0:13:e8:56:e4:73:bb:d2:a2:e0:eb:ea:
2c:39:dd:ff:97:9c:29:35:77:ff:a5:f2:03:cf:03:55:a6:be:
d1:a3:5e:82:65:d6:34:6b:e3:b1:d0:17:03:3e:c8:30:58:fb:
a8:1e:ce:43:4f:af:63:88:81:48:f5:8c:55:37:b8:5e:74:86:
dd:12:36:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuhIV2t6+QfpMEBfD9+BGaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjBjMDU3MzFlZmE0YmJlNWMyYTMwYWU1MTg5Zjc3ODVk
MmQ0OTkwHhcNMjYwMTA5MDUwMTE2WhcNMjYwMTEwMDUwMTE2WjAzMTEwLwYDVQQD
Eyg3ZGU1MzI1MGUwNTBlNDgwZTQyMDUyM2M2ZWEyNWE4NGUxYWMwMjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9D0HbQlxa4ATi5b2guz26ixEdIK
GigbAhFbAhJ+PqP2ZaEja4FjFwzExnZpNqlskeZ8JUgMwGYcurrWFZ9/XlagLBn/
I9UEwBZLCkbl3+RtkuyLa001luqL7WGBDpXb2EIHP2f9Oa1q8FI3F64OPA4xoXk1
3Sw6p/arGYv0wvxUdzCBd663JMBsLE94jIfyuD4rnZ2WG572ZgzzdlxvIvsK68Rc
ngzhYMZDkSRWlbgMvJNkoQQeT5u9wvDPUUbDqDOP6fMSAaVMwiQpXoY7LMKY2pcE
a45yh2Ak/Azm4hvrkoVXpNtQ/tjNshuaaT6f+cfCvb1jlnF1PEX3ZYCuMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3lMlDgUOSA5CBSPG6iWoThrAJoMB8GA1UdIwQY
MBaAFKWwwFcx76S75cKjCuUYn3eF0tSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgt
ZDE1ZmViZGY1ZWNmLzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yNTE0OWMtMDkzMi00NjgzLThhYjgtZDE1ZmViZGY1ZWNm
LzEvcGJEQVZ6SHZwTHZsd3FNSzVSaWZkNFhTMUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4pUlPkX
XmDBlLItjMarvdgdKHMquDzOTckE084YqwRUm61AeB83uNPpRpwBe/NYwjqlIK6b
2jjqFBgpkzt1Fy7zfrUK8sH6jc61OLnQIFXniRvrTNPZfS18ByfITztiS+6xHAH0
grojU/i6ht9W0d2OUe6rb3GzoOJ82RbvL/jv2Ivffg0YBKFG0bMh38QUcunLIHLV
a19CAwBAc6eJ3CF41DU0IZPmAhchrv7j9TStC0kiDF9pG1WfoBPoVuRzu9Ki4Ovq
LDnd/5ecKTV3/6XyA88DVaa+0aNegmXWNGvjsdAXAz7IMFj7qB7OQ0+vY4iBSPWM
VTe4XnSG3RI2EA==
-----END CERTIFICATE-----
Generated at Fri Jan 9 09:16:16 2026 by rpki-client