This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: eG4wWd7oxyxz8q6OnXdCrHc+NBY8H928PUQCHPO8cMU=
Subject key identifier: A0:03:93:A0:E3:EB:B8:1E:34:3B:E8:64:52:57:3E:78:73:FD:16:BB
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019BA7FFD4D43389EA28134DFE5FD4AA7EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 17C2
Signing time: Sat 10 Jan 2026 13:01:59 +0000
Manifest this update: Sat 10 Jan 2026 13:01:59 +0000
Manifest next update: Sun 11 Jan 2026 13:01:59 +0000
Files and hashes: 1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: A9/i+v/8oY01McdxZhggQebBZF9s2iXhHvDXmc7kjmk=)
2: X206-RRIU-SViIIBDaDjImGa3dY.roa (hash: 4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=)
3: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (hash: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Jan 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a7:ff:d4:d4:33:89:ea:28:13:4d:fe:5f:d4:aa:7e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Jan 10 13:01:59 2026 GMT
Not After : Jan 11 13:01:59 2026 GMT
Subject: CN=a00393a0e3ebb81e343be86452573e7873fd16bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:d4:39:8d:40:b3:5d:7e:ad:03:61:7b:de:
57:b6:0a:15:a0:cd:5c:03:94:d0:be:8b:e5:48:6f:
ee:7a:6b:f0:cd:2a:43:bd:bd:63:a7:f7:f8:b1:e6:
8e:2c:f2:3a:13:fe:40:27:81:00:99:37:90:25:00:
7e:66:4d:97:24:8d:98:06:de:8e:d7:1e:60:d0:e1:
9f:64:e4:f0:53:61:1c:4e:b2:70:c6:f8:5d:78:4c:
62:f3:db:15:91:5f:ab:d7:71:95:0c:f2:5d:71:e7:
03:20:3f:9d:5c:4a:ac:b1:5f:b1:34:5f:b2:96:21:
e8:dc:52:45:1c:88:5b:55:ba:b3:27:da:ce:2e:38:
ab:af:e8:dc:11:e9:83:59:94:f1:e3:67:1e:23:d9:
3d:cd:1d:8f:2b:76:7a:f4:75:6e:67:33:09:0a:ed:
58:84:01:f0:5f:06:55:2a:7b:a4:45:a5:1c:0f:5e:
87:fd:97:de:f6:ee:8c:43:fb:d3:3f:9c:be:ed:3d:
ee:fa:05:21:8b:46:d4:0e:70:65:5e:ab:55:fe:f5:
08:2f:2f:5e:03:96:14:13:d7:3b:aa:22:45:63:75:
de:bf:9c:18:62:14:10:4a:81:21:d5:b0:ab:f2:f2:
f2:8f:2d:2c:15:cb:3f:b0:0a:48:9a:d5:ed:86:d3:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:03:93:A0:E3:EB:B8:1E:34:3B:E8:64:52:57:3E:78:73:FD:16:BB
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2a:64:4f:49:4d:59:a8:72:79:fb:18:de:2d:cb:d6:7f:33:
d8:8f:9a:a9:40:c9:16:6f:e0:2c:a2:e9:2f:59:d5:a7:1d:dd:
14:35:4f:1f:97:bc:29:7e:39:0c:ab:91:0e:65:59:51:91:9e:
2c:8f:89:4f:64:a2:07:38:5c:ab:e0:5c:2a:30:14:54:dd:f0:
03:3c:f0:4c:4e:0f:51:cb:d3:cf:11:60:c3:df:ef:3a:04:8e:
04:87:5b:b7:55:59:b2:6f:70:81:b7:35:12:14:91:dd:6a:64:
db:ab:34:f8:7d:2c:83:82:93:9b:1d:56:1a:89:e9:b5:5d:90:
84:fc:b4:07:69:fc:07:49:a9:b5:0e:e3:3a:4b:49:f5:e3:b7:
61:fe:c9:20:f6:69:a2:d3:f3:6d:06:17:ac:53:87:a9:cc:f6:
da:9c:18:21:4f:70:c7:fb:39:7c:b6:b1:ee:97:af:0c:10:e2:
aa:e4:b9:59:21:9a:05:69:74:39:73:bb:5b:a6:38:c4:d6:b8:
db:8e:30:6c:7c:71:1b:62:7b:8e:50:b9:02:0d:cf:2e:38:84:
3e:80:8a:fb:5c:25:50:dc:d5:ed:a8:35:59:7e:8c:1c:f5:e2:
f3:63:d0:ae:c9:36:b8:c9:35:02:c4:c7:84:0e:41:3c:eb:c7:
cf:05:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 16:27:31 2026 by rpki-client