This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: 8js9ANWkwb7JqdqzKZ3SO4Ww0nGCgmeZyXcWRI/83gk=
Subject key identifier: F1:4B:0C:4A:90:4D:F1:69:B4:42:7A:1E:21:AA:03:DD:7B:22:7C:ED
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 019BDFC93533B41AEFF7BF9D87F1DFB42B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 17FB
Signing time: Wed 21 Jan 2026 09:01:04 +0000
Manifest this update: Wed 21 Jan 2026 09:01:04 +0000
Manifest next update: Thu 22 Jan 2026 09:01:04 +0000
Files and hashes: 1: EScHO_hZczomCnoprBz9oYDooAM.roa (hash: 4MTuC1uLMwXcp3WrNDw8r2lfD4JCPG95ZOo//y7/h8o=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: NqiUBV16ydtR5lPGk7x8PgYZwPeb5hMMnFXb22mm46Q=)
3: Yz6zMQTWF_oPlBis3JkHJwwBpxQ.roa (hash: fw38Poz9RGtWDLhkzBj9EkYC4z3B0EbYl1M6n6QZV4c=)
4: hzpr_u9unsG0Rewb6bfBUcdWDgs.roa (hash: WPtNLpfSEpgZKPMkhjXJCGT0MeFGLs8w0HKZG2+CsUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:df:c9:35:33:b4:1a:ef:f7:bf:9d:87:f1:df:b4:2b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Jan 21 09:01:04 2026 GMT
Not After : Jan 22 09:01:04 2026 GMT
Subject: CN=f14b0c4a904df169b4427a1e21aa03dd7b227ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:f4:42:33:e8:27:5b:81:4b:4d:17:80:e7:
6e:6f:34:0c:ff:78:1f:5c:ae:0e:f6:08:68:8a:68:
c7:60:ce:81:78:ca:30:2f:64:f9:28:e7:e9:13:56:
b6:58:07:07:bc:aa:39:4a:9a:ca:7f:e4:3c:3e:48:
0d:76:fc:3f:b1:2d:c3:0a:d9:be:9e:24:1e:d4:0f:
a3:64:93:29:ee:d7:80:7e:1b:52:72:1c:83:11:cb:
89:24:54:61:f8:1a:99:2b:50:81:b6:31:7c:27:8b:
97:f9:44:f1:2f:20:3b:8f:d3:9a:32:a9:1b:e1:64:
5f:1f:c5:5c:f7:a8:3e:79:88:1a:f9:43:6d:a9:47:
28:08:e6:78:69:f9:05:6a:a4:1a:9c:52:f2:e2:85:
a2:fe:25:f7:a6:33:37:bb:ca:90:c1:bc:7f:95:5b:
ec:50:7c:16:ad:7d:28:71:02:9c:01:5f:a0:9a:d5:
09:8f:23:a7:e5:78:4d:79:b6:fe:0c:ca:66:3b:3b:
80:e5:ba:a1:0d:77:59:cb:fa:26:f1:85:b9:ed:d1:
ed:83:8f:77:43:ed:23:97:3d:dc:8a:29:98:59:9c:
84:40:76:4d:ea:2e:7c:b2:cc:ff:d3:43:5c:45:92:
13:bf:8f:4e:fa:5b:3d:1a:76:ae:4d:3c:46:e1:85:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4B:0C:4A:90:4D:F1:69:B4:42:7A:1E:21:AA:03:DD:7B:22:7C:ED
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:95:b5:f7:2d:47:8c:f3:65:2f:b4:98:2d:8f:34:ea:8a:60:
95:b0:dd:35:16:e7:c5:3a:53:6d:12:e9:a1:f0:13:5a:79:f4:
d2:48:ae:ce:27:28:8c:68:2f:c5:cf:5f:e0:be:be:98:d5:ff:
26:c9:a8:06:e3:8d:e0:58:c7:7b:30:15:67:7a:1c:b9:9b:3c:
e9:62:e3:9f:cb:ae:1b:2a:cf:c4:e2:bb:50:53:23:c3:23:ac:
4f:4c:b7:0d:6f:39:bd:7e:a6:e7:ba:e8:f7:27:6d:b7:b5:e4:
6d:0a:ed:aa:8e:0c:68:94:63:c8:9a:17:7a:e5:c9:7d:25:ce:
9c:0c:e0:75:d1:1e:55:b9:1a:ae:dc:cd:a7:01:b4:33:c0:ab:
e2:42:e8:20:f3:f0:f4:09:29:e8:11:d6:a1:e9:d5:c8:3c:67:
38:d0:8e:16:da:98:99:a9:c2:14:12:7d:1e:d0:6e:eb:71:79:
f1:89:18:cc:aa:6d:26:b2:d5:6f:3d:8e:37:c1:fc:ea:13:fc:
8b:d8:69:4a:e9:54:b9:87:ed:60:66:81:d1:87:a7:f1:bb:20:
de:f1:bb:79:c8:b7:4a:d7:62:b7:da:d6:1e:62:ac:58:90:07:
45:d1:6a:f3:94:36:0a:cc:5c:7e:8e:82:a6:d7:d6:6c:58:75:
77:d9:b4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:55 2026 by rpki-client