This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
File: sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json)
Hash identifier: Tig/8Owb9CeH9PUVOrQnoubBVHm6g49oaskGkTn0p78=
Subject key identifier: B2:9E:19:F7:1C:FD:FA:9A:25:E1:CA:EE:64:B8:5B:45:06:55:3D:F7
Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Certificate issuer: /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Certificate serial: 019BFB0976B6CCDBDBD292EE8ECC5BAE1335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
Manifest number: 1395
Signing time: Mon 26 Jan 2026 16:00:59 +0000
Manifest this update: Mon 26 Jan 2026 16:00:59 +0000
Manifest next update: Tue 27 Jan 2026 16:00:59 +0000
Files and hashes: 1: Ccbi6HrRjYv5g2_oCb7PGuZTGkQ.roa (hash: juQkDFo0AIVz1+RSIS9ayHrDC2gpBK7MmNeN9tyG2go=)
2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: g7cu+ia67IvPfTha1/fHioCxhZnF/iSqvz+DWmdKVOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:09:76:b6:cc:db:db:d2:92:ee:8e:cc:5b:ae:13:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Validity
Not Before: Jan 26 16:00:59 2026 GMT
Not After : Jan 27 16:00:59 2026 GMT
Subject: CN=b29e19f71cfdfa9a25e1caee64b85b4506553df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:31:3a:48:4e:aa:4b:66:5e:45:6d:ce:6b:
90:4f:80:87:17:23:a2:4c:fc:db:16:22:66:8a:c7:
8d:89:0a:14:5f:6c:ac:70:6d:b0:52:63:8d:80:9a:
f5:e9:f2:7d:7d:0e:7e:9f:c5:58:c9:9c:bb:44:e1:
6a:80:0f:61:ee:08:0f:ba:97:70:10:cd:72:24:b1:
d7:b8:e1:a6:c5:e1:f4:da:9d:2b:7b:95:cc:92:15:
71:24:1b:a1:cd:9c:28:07:39:75:27:d5:72:d2:11:
1d:53:dd:ff:e9:00:b6:98:5b:ba:16:88:2b:3d:da:
d1:ac:5c:ed:3a:2d:8e:f8:7c:a3:f6:eb:51:6d:fc:
05:83:1f:22:25:9a:20:1c:d1:46:8d:09:bf:bd:fa:
d5:72:be:64:88:ae:46:4a:07:6d:c5:de:74:fc:42:
ca:55:39:bc:28:e6:b1:b7:ae:60:1d:f4:7e:d8:a5:
02:0f:67:65:e5:95:d3:b9:bd:3c:9f:73:b4:92:c4:
a5:ed:27:b9:c0:61:6d:a2:81:eb:2e:1e:66:fa:ca:
35:44:6f:49:89:fb:62:c7:5b:a5:b7:79:43:07:43:
40:d4:43:c5:e6:d3:9a:20:ca:ef:22:43:9f:e0:63:
5e:85:ce:b2:70:25:db:f4:77:cc:ba:eb:2f:f8:64:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9E:19:F7:1C:FD:FA:9A:25:E1:CA:EE:64:B8:5B:45:06:55:3D:F7
X509v3 Authority Key Identifier:
keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:10:b2:67:c0:8a:1b:01:41:a0:d4:dc:ea:43:68:b3:a9:66:
ef:b4:7e:f5:05:0e:5b:98:a6:71:b6:f1:96:f2:d1:c2:2a:3c:
b2:4c:ab:c5:23:ce:0a:f7:6e:90:d9:64:cd:c1:ec:8c:9f:fd:
72:46:ba:77:5f:0d:c1:a0:52:21:ac:37:8f:34:2b:8d:63:53:
ed:8a:11:04:0b:bd:39:b4:55:06:20:d3:24:7e:b8:88:0c:cb:
f7:22:07:f1:8a:f8:ea:11:f2:55:2a:81:67:3f:b9:f7:26:7d:
f8:b4:38:33:3d:0b:00:10:ad:6e:2b:40:b6:07:cc:31:a5:3a:
c4:a0:55:ea:25:17:42:5e:45:f4:8f:97:41:7a:a9:64:a4:d1:
16:93:34:45:3a:05:d9:9d:c3:c4:65:f0:fd:cf:e2:1f:2a:e9:
1c:13:ca:fa:1c:49:69:45:4a:f6:0f:a0:64:21:af:bf:d7:e2:
88:41:df:8c:6a:2c:21:f7:d1:bf:ff:78:41:1c:df:15:5b:e2:
66:03:4d:8c:e1:5e:ca:17:79:b4:72:5b:92:c5:05:f4:f4:d6:
f1:ea:83:8e:be:5b:3b:90:da:8d:d4:d8:84:0e:59:ff:fa:93:
ad:38:d9:5a:95:88:37:ff:73:85:ad:10:36:b2:da:d1:82:24:
d8:6f:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:53:04 2026 by rpki-client