This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File: 78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier: Y4lROew8dKI6Cjb0vgX8rc+eqZSW4UQYnE2arkW0X1Y=
Subject key identifier: 55:9E:8A:DA:E0:15:57:75:DD:E5:E8:33:65:15:2F:84:DE:16:E0:7C
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial: 019BFD2E7FC667F96F2CEDE2CF2653021844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number: 0B5E
Signing time: Tue 27 Jan 2026 02:00:41 +0000
Manifest this update: Tue 27 Jan 2026 02:00:41 +0000
Manifest next update: Wed 28 Jan 2026 02:00:41 +0000
Files and hashes: 1: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: qCFeenf/osQL+vUce41ZJ85QYCsYtIlrvICa5VEdsl8=)
2: U6lz5micbQvsEzEwVp3dL7mR1Os.roa (hash: NW13lN/avpR4aBD/HcMl0sRLodoqqzCepoA5qJR1XKA=)
3: WH8m0TMkVXBPbucXPDw6oUIRye4.roa (hash: IB0keQjNG9LRUVYhpn54n8Irz+pRxwCtrbopId4wJAg=)
4: t4MpcNa2tIl4W9G2LCTJWkEphB8.roa (hash: xbauCMbU4PS3RK6IhRtrAnQJjuwdmggI6BkwUnHhNwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:2e:7f:c6:67:f9:6f:2c:ed:e2:cf:26:53:02:18:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Validity
Not Before: Jan 27 02:00:41 2026 GMT
Not After : Jan 28 02:00:41 2026 GMT
Subject: CN=559e8adae0155775dde5e83365152f84de16e07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:3d:4c:f2:9e:18:16:e8:41:e9:8b:ca:21:
9c:ce:a2:91:56:53:28:da:e2:ac:e3:e6:f1:3a:01:
c5:83:5f:74:16:55:04:e1:52:85:52:cf:fc:5c:e9:
27:27:e2:c1:29:e7:52:e7:75:4b:bd:30:8d:97:91:
3f:4b:39:91:52:7a:73:5b:d5:02:60:fd:45:a5:a8:
4c:31:2b:28:83:80:4e:8e:98:aa:45:fe:8a:95:45:
7e:d6:d0:d0:27:73:c9:98:5b:68:df:c2:67:d6:2e:
7a:60:eb:8b:f4:3b:b1:d4:da:19:42:87:1e:7a:8a:
ca:9a:1a:56:eb:c2:2b:cc:d6:98:d2:43:0f:40:b2:
0b:3b:52:7a:9e:6f:66:5b:25:1a:5f:69:65:43:bf:
4f:59:7c:3c:e0:75:cb:a2:5c:d3:cc:1c:2b:c1:37:
61:50:b4:82:6e:45:10:7f:6f:89:d1:51:39:14:d4:
a8:61:20:bf:24:25:70:a5:d5:66:17:fc:b4:ee:d2:
a5:b0:f9:9d:48:df:60:14:f4:5c:78:d4:75:a7:fc:
14:60:9c:05:d2:87:e4:97:9c:cf:00:29:da:de:54:
3e:93:97:e6:bc:ef:b2:5e:c6:fb:d1:4c:f1:cf:ef:
d9:5b:ab:ce:f8:6d:e6:51:b2:ff:7b:a8:3e:fd:4f:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9E:8A:DA:E0:15:57:75:DD:E5:E8:33:65:15:2F:84:DE:16:E0:7C
X509v3 Authority Key Identifier:
keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:09:86:90:80:d2:e5:b1:b4:f5:b5:1d:82:9d:67:a0:20:8a:
c3:8d:8c:27:6c:aa:a1:d0:1a:bc:d8:21:7d:3b:bc:82:fa:33:
2b:a9:de:3a:d1:26:ec:7c:1e:c3:41:5e:a7:65:28:b7:73:ee:
62:a8:1f:d5:12:60:18:1e:a5:8a:8a:86:6d:ec:d6:69:36:cc:
30:aa:8e:00:6d:3b:d7:39:9d:68:14:83:23:3f:00:a1:21:aa:
3b:81:25:9b:41:b7:e7:69:44:53:62:63:d0:47:45:1e:71:98:
8a:75:6f:be:c7:69:8f:45:0a:95:94:0e:5a:52:9c:2f:1c:08:
17:a4:ad:99:e7:66:1c:88:9f:7b:0c:4f:7b:4c:14:b3:e4:26:
94:76:64:f7:88:97:35:c9:02:66:13:51:75:96:dd:fd:e3:c7:
b7:56:6a:5e:f6:77:87:8d:d9:03:a0:d8:9a:e6:21:0c:d6:45:
9b:4f:a6:56:c8:2c:8a:1e:63:ef:9d:a1:47:2f:5b:37:f9:ca:
6f:ae:8d:c4:58:7e:19:75:99:79:34:34:f2:fe:04:76:9f:99:
2e:bd:0a:0b:e8:ea:47:24:ba:cf:63:67:eb:27:8e:29:99:26:
e5:7c:06:77:a5:19:64:87:88:ba:8a:78:c2:94:6c:78:34:5c:
9e:54:43:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:16:12 2026 by rpki-client