This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
File: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json)
Hash identifier: sdbyXs5Ez4ZGsKJ/RLVd4LNyYstccMA1UdpIoSNYb9U=
Subject key identifier: BF:5B:04:0A:61:D4:AD:39:21:D7:8F:FD:77:8B:FC:CF:27:88:13:BB
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial: 019BF8E3BC6950D0DC3D34079E2360D7D97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
Manifest number: 152D
Signing time: Mon 26 Jan 2026 06:00:32 +0000
Manifest this update: Mon 26 Jan 2026 06:00:32 +0000
Manifest next update: Tue 27 Jan 2026 06:00:32 +0000
Files and hashes: 1: 5SVfxpykBtGisNJ_fWGkKKRqAXE.roa (hash: majDLjjox5+IIo91UtEcKltEO1Uytp4RkTkKzUgxr90=)
2: SEsp20Y0XXvSsNuzjgdPL2liaKA.roa (hash: 9EBYTUo7KyjxRP8OrlDLn9ulnQLVPYnZMVUIu94H7LM=)
3: jsoEFjjxqQANYzwZkbp4FKNWNvc.roa (hash: oqsei08QZLwI9OpLYx05MZOPBm5p1aTMIy+k0VyYQTc=)
4: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: uVRJMPK3TnuB8AE7ra0P2mYu6XmcxC3wOfVXA+R/skE=)
5: yJEHfcJRgkFuNVIuhioT_sp3dfg.roa (hash: bQzhx47BAwnINhp4yvgiQNvYfmYBagWvwXbBTrw311U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:e3:bc:69:50:d0:dc:3d:34:07:9e:23:60:d7:d9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Validity
Not Before: Jan 26 06:00:32 2026 GMT
Not After : Jan 27 06:00:32 2026 GMT
Subject: CN=bf5b040a61d4ad3921d78ffd778bfccf278813bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:3e:6a:f6:2c:87:54:2b:ee:28:ac:39:8b:
52:ba:d9:eb:c4:4a:84:e3:20:9c:98:b9:5c:81:1e:
bb:7a:46:38:10:ef:cf:9b:6d:ab:57:ce:ae:ae:6f:
60:81:bd:82:55:36:b5:46:50:8b:b8:6f:f2:90:b6:
96:00:35:c0:5b:e0:28:98:79:0d:fe:0b:38:d8:a7:
53:d4:c1:0b:28:27:cc:d7:b9:06:68:04:76:07:2a:
ff:16:e3:bd:68:d0:df:72:28:70:43:db:43:1c:a4:
7f:47:b9:4f:f2:f6:78:4f:54:12:50:69:8b:49:8e:
f6:78:7a:68:90:ca:ff:74:bf:22:b4:d8:e2:2d:88:
0a:7b:12:b9:fb:f1:78:11:0a:00:68:2b:d7:57:a1:
b3:f5:94:e4:02:78:8f:05:c1:52:4d:52:85:eb:23:
08:f2:10:af:6e:7e:2a:fc:76:08:c0:05:a4:d3:92:
90:6d:55:92:52:ad:3b:9c:cb:93:9d:72:54:75:05:
20:70:a2:21:c1:42:2b:b1:f4:da:0c:13:b2:44:9b:
da:dc:50:28:16:4d:52:7b:9d:df:4c:16:ce:97:5c:
af:6e:e8:4a:2a:5f:5c:35:79:65:8e:df:04:87:67:
12:c3:60:66:5e:d5:2f:e3:27:9e:bf:af:39:18:b4:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5B:04:0A:61:D4:AD:39:21:D7:8F:FD:77:8B:FC:CF:27:88:13:BB
X509v3 Authority Key Identifier:
keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5d:65:47:85:2e:d0:c9:cb:c2:0c:eb:86:38:2b:d0:49:ef:
10:61:e1:32:b9:d5:3e:4f:55:1d:15:03:84:ab:a6:24:af:9d:
32:09:51:3e:c9:53:50:0d:02:c3:7c:8c:0c:19:80:4c:fa:d8:
57:ef:ba:17:1c:2e:62:c4:f1:b5:32:5e:fc:06:28:88:da:b3:
5e:83:cc:49:c3:5e:91:09:a1:c6:95:09:18:88:57:e0:51:28:
7a:09:84:f4:12:fd:ed:24:fb:1a:6e:d8:0a:05:ff:c1:82:16:
73:75:87:08:3d:6d:81:f8:cf:b7:d5:d2:2d:d0:31:4c:7c:70:
9e:33:5c:ef:60:45:21:0a:95:46:52:d9:9d:2b:76:ee:20:fb:
b3:1b:a6:ed:f4:28:66:7b:57:f5:de:30:7a:6a:f8:8b:85:3a:
f4:ff:c6:bf:ec:84:ca:11:34:34:75:e2:40:aa:02:97:7b:a9:
cb:02:56:6b:06:1c:7c:fc:a0:7a:0f:5b:1e:b9:40:b1:a9:ac:
09:fe:b6:17:f2:11:3e:e6:c4:9b:eb:86:55:44:7e:be:23:7a:
10:ba:b1:37:30:99:3a:09:00:c5:7a:f7:86:b7:ad:48:74:6f:
37:8f:5a:d2:f0:6c:09:b2:3a:21:ad:87:74:be:5a:78:e4:38:
61:c5:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:23:42 2026 by rpki-client