This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier: xDB2eTg4GSb5SOtc7ZAr3dIIGTxicB4SXSRHaQeKUB8=
Subject key identifier: F2:C6:5D:A6:7F:27:D5:1C:B2:44:E5:7B:7E:EC:27:15:B2:57:90:DC
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 019BF7D1DA20A25E9883292BD96E33F60BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number: 02E3
Signing time: Mon 26 Jan 2026 01:01:23 +0000
Manifest this update: Mon 26 Jan 2026 01:01:23 +0000
Manifest next update: Tue 27 Jan 2026 01:01:23 +0000
Files and hashes: 1: Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa (hash: 0zTqrzFvszKEBTsjbfLGhc0G5gFEU942DbGfKhHwTtQ=)
2: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: d+fY3CgJuUBNjLWB7gYRZEHF7HVdWHx5shsg7jhueqI=)
3: MIEvnImfWTyOKpa2aWLkQhgEZmY.roa (hash: txV76t93bWRJ/yIQmWuamg16DjJLT7MgtJIe7paHB7E=)
4: PsdMSgJpRCSnxs0WFJwJ49XVU1U.roa (hash: iQu1OA2imBxucOaZb2YkGe/IH/xMnrU8wpfz8jp4qU8=)
5: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (hash: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A=)
6: jQ2Nd_F_fm5WB6zVYLgJygrj3Gk.roa (hash: imgBuP5yDwSxgvaj2Hc0zIY/YoHhn9WPYKumza/pBos=)
7: o3e9S3T6jeJSI1jiUrWmkImHmRU.roa (hash: +d9ztGRXNM07c8j8iufqKla9V5/CBV9Ud9oEK+f9ZJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:d1:da:20:a2:5e:98:83:29:2b:d9:6e:33:f6:0b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Jan 26 01:01:23 2026 GMT
Not After : Jan 27 01:01:23 2026 GMT
Subject: CN=f2c65da67f27d51cb244e57b7eec2715b25790dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:df:c9:ca:0c:1b:ae:9b:e7:32:ee:54:eb:
ec:6a:f8:ec:15:55:cb:20:9c:22:ac:03:56:44:35:
55:ba:8f:78:de:61:3c:2c:0f:93:3c:97:a1:35:ea:
63:7f:d9:cc:a7:24:c1:3c:8e:5d:3f:fa:9b:60:b3:
f2:24:51:45:97:8a:be:1d:ca:9f:3b:ec:7e:3d:a1:
f2:d5:c1:3d:a8:eb:16:9d:82:b4:ae:85:0b:b2:b3:
65:81:00:ee:8e:99:08:58:d8:d4:58:f3:bc:ae:85:
4a:1e:31:2f:f9:4a:8a:e2:ee:de:84:c9:39:9f:46:
6a:4e:dc:bc:57:da:cd:fd:02:6b:61:fa:e7:b6:76:
b1:30:7e:ab:9f:13:93:b4:73:01:0c:01:53:e7:2d:
52:19:10:28:50:92:e9:8e:42:b9:13:10:1a:c7:d8:
b5:54:c8:a0:00:75:93:d8:85:99:f3:c0:d4:b9:f1:
df:60:84:43:eb:e4:47:5f:66:ca:9e:b9:f8:10:b7:
f6:c6:f3:1c:ff:68:94:71:4a:c6:8f:cc:a8:43:87:
c5:f0:fc:25:01:9f:80:ff:40:8f:60:9e:17:c5:ad:
6d:eb:17:3f:bd:5d:2a:5c:ba:91:df:97:fe:09:3d:
26:87:be:3e:30:51:a1:f1:5b:0d:b1:3c:5a:2e:75:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C6:5D:A6:7F:27:D5:1C:B2:44:E5:7B:7E:EC:27:15:B2:57:90:DC
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:02:c3:36:ea:c9:eb:11:79:c4:04:a0:1c:13:3d:c2:ba:ca:
f4:43:47:a9:d0:9e:dc:08:4e:73:53:3a:a8:9c:cb:0b:f0:7f:
6f:4e:6c:ec:b6:3c:e6:74:18:f8:2c:a3:6d:db:fb:cf:14:83:
82:02:b8:3a:54:9e:a7:bb:62:05:09:6c:31:34:62:77:60:3f:
72:aa:78:41:db:1a:00:bd:bb:cd:9b:ca:92:d8:7d:8a:23:94:
45:9d:fd:0b:50:a5:25:dc:16:2e:0f:42:0f:27:1e:9e:df:4c:
b2:f3:e5:63:b4:3f:d5:c7:a9:9c:2f:e5:2b:7f:b0:4e:e0:d4:
f6:f6:af:a5:4c:f1:c0:01:08:68:71:9c:81:f0:5d:76:34:58:
4e:6e:f0:99:cd:08:0b:db:0d:1d:dd:13:9e:57:2d:96:2e:0a:
0f:49:e5:32:77:0e:47:4d:d4:03:9e:bd:e9:1e:e1:2a:e3:09:
7a:cc:ce:59:bb:17:e6:b5:0e:18:20:46:0c:f1:bc:09:07:92:
33:aa:e8:e4:82:af:29:81:03:05:0c:77:e2:c9:1b:a0:74:68:
d2:e5:2b:e0:fd:8a:7a:24:5b:1d:35:62:39:21:eb:6b:92:69:
58:87:77:c2:1e:2e:f3:5e:d6:ac:b7:53:20:cc:08:1d:39:02:
8e:80:ec:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:26 2026 by rpki-client