This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier: 0nuCymxHn6iHVxSaDxQ+90h8B/4TiHKkOs4PbBqlN4g=
Subject key identifier: 5B:DA:2E:31:79:56:28:37:3A:00:2D:ED:64:9D:9C:53:AF:41:F6:9B
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019BD8B4573C9DBD9AF1B5269A490D39826D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number: 0E4D
Signing time: Tue 20 Jan 2026 00:00:55 +0000
Manifest this update: Tue 20 Jan 2026 00:00:55 +0000
Manifest next update: Wed 21 Jan 2026 00:00:55 +0000
Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=)
2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=)
3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=)
4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=)
5: 6N1zSrxGxEDRaS6C7FAY0zi6aj8.roa (hash: wABNoFQpTIXR9Gtm4VZ92qxhMckx3/pSEwXZyk3S22E=)
6: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=)
7: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=)
8: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=)
9: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: D8DloY8/mv0DBIlvyi/Ict2YwmovzhR4TvcHcFI4ATw=)
10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=)
11: On4dn5XbiBS1Qg2b3q7FuPrKKPU.roa (hash: aFxUmAbMZfGMNEqIxTU//GiK2u8cv1a8L3zZwck32pU=)
12: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=)
13: PD0gL5wD6TzlMONcTVSL_nUPkTs.roa (hash: 8xeOKjdaOuRIzGTIRqsIoy0cuHcgqdyob05N8uzkaNU=)
14: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=)
15: ZJ5l37G_w-cxDfPyZbl3zgQo3cQ.roa (hash: C20FU6s1s6KfoQi2fZft6KPIUH4rHPObiarw/5VKljg=)
16: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=)
17: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=)
18: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=)
19: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=)
20: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=)
21: j7LtCmBQkrQBJnb_ZCt76IEDtVw.roa (hash: xzoT1lmtc0/rZsZSXDJS+I2wkN8O0eHPbcY9YaDshes=)
22: j7x8fbkRwMKStj5ClhgwLaeQkVs.roa (hash: 6lRnNTk9GDpCpdru3WxCTgGzGwqKwzzDgbtgNglJr4E=)
23: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=)
24: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=)
25: zR0iVYnP5N5Uny10sklHuoRT73Q.roa (hash: xsNsTM2wWzgme/iKg5rHQAWH9S6RXpdv7UkbK6mK4Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d8:b4:57:3c:9d:bd:9a:f1:b5:26:9a:49:0d:39:82:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 20 00:00:55 2026 GMT
Not After : Jan 21 00:00:55 2026 GMT
Subject: CN=5bda2e31795628373a002ded649d9c53af41f69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:e7:a7:76:4a:6e:cb:6b:6b:0c:59:28:f0:
dd:c5:b8:06:60:8f:9b:e8:a9:ea:d6:56:80:a1:51:
54:05:20:ba:ce:01:76:a6:58:f0:07:c0:9d:4a:1a:
71:a9:c8:42:6c:3f:bd:30:5d:26:29:bc:f6:8a:55:
bc:a9:fb:1c:a9:0b:25:2b:e2:09:e4:3c:3c:8f:14:
08:55:d3:fb:f9:cb:d5:16:51:29:79:f5:4c:e4:df:
ba:0d:49:80:c0:79:ee:49:0e:78:87:89:83:4f:be:
e2:64:6e:3d:3e:b1:05:a2:7b:fc:d4:98:c4:97:4e:
2f:78:ef:71:81:1b:cd:e4:87:3c:e3:da:f1:12:84:
40:7a:9a:47:b8:73:8c:ed:11:0c:01:fc:5e:6f:ea:
26:09:e1:0b:5f:7a:75:f0:02:59:6c:69:18:6e:35:
f2:72:6d:bc:1b:84:6b:63:0e:e7:37:e5:ef:2c:91:
ab:af:f3:ab:c5:84:28:74:2e:77:51:1a:ce:ec:5a:
ab:b3:09:4e:4a:15:ba:03:cd:6a:cf:92:41:aa:26:
1a:c1:1a:5f:c8:b8:4f:b7:0f:20:13:e4:fb:4e:34:
24:8c:84:35:1a:fb:14:da:ac:58:31:bb:41:75:ab:
f5:85:c5:7e:7e:aa:a0:09:71:92:e2:40:00:3c:d7:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:2E:31:79:56:28:37:3A:00:2D:ED:64:9D:9C:53:AF:41:F6:9B
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3d:db:dd:d9:c0:4c:63:2e:f3:9b:66:55:b0:bb:c2:5b:88:
a3:d3:01:e2:dc:dc:0c:7e:5c:1b:ce:19:57:33:3a:3f:ce:df:
e5:30:b5:5e:7d:54:37:75:81:3c:9a:65:f8:ae:67:4a:bf:e7:
98:99:43:10:ad:6a:f3:03:72:d4:13:3c:c1:4f:16:71:94:0c:
3a:49:f5:24:00:2f:a5:a8:93:17:79:3d:81:ef:62:07:d3:8d:
01:cb:60:c6:95:0a:f2:1c:c7:9f:f0:b3:14:7a:a3:b6:eb:dd:
76:52:5b:64:12:b0:fa:5d:a4:6d:aa:ec:2b:ec:2d:80:75:fe:
fc:3a:35:5e:0b:a1:72:a3:fe:33:90:c5:f1:cb:51:e5:3f:28:
35:a4:af:44:a9:21:29:69:6a:f0:9e:46:91:31:75:ea:77:6d:
f3:3e:67:65:3f:4c:74:c4:f8:f4:a7:1e:31:16:e4:0c:8a:64:
1b:c7:c2:fe:80:0c:5e:c1:84:2c:1f:02:3d:2f:5d:d6:3b:de:
76:79:d0:db:06:27:e1:c4:d3:2d:e9:73:94:17:86:4d:0e:e5:
c0:7c:fe:ac:2d:e1:c4:bf:6c:67:e8:fb:11:5f:b4:17:e1:16:
49:06:93:08:66:ed:74:c7:08:13:85:b9:3f:b7:b7:ce:c7:97:
a7:bf:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 08:07:39 2026 by rpki-client