This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier: BWmEwZjOxPc1QKGJ6sNZ6qj884bB3+JMlLPZtApL4Ek=
Subject key identifier: A0:97:51:62:BD:E7:F8:2C:57:8E:18:1E:78:AC:19:F9:38:C7:F8:4C
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial: 019BFDD3FC946F57AE40BEEAAC839458DA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number: 088E
Signing time: Tue 27 Jan 2026 05:01:26 +0000
Manifest this update: Tue 27 Jan 2026 05:01:26 +0000
Manifest next update: Wed 28 Jan 2026 05:01:26 +0000
Files and hashes: 1: V4OAXUwr_Yrv_txVxgyVSuzZX3w.roa (hash: XQIlYXeV6ifizyIfOjtUETRq073y4wC5uk9DBtAE+iM=)
2: dnN8Qbgzlqa5jVekVWfdeYwMnr0.roa (hash: 2SBvdtsFiLZ+3pTsa8tg6rA3awhSjVKAsmyNnLuEU6w=)
3: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: iJ3dAyioEkBoOLEK+c9/DLw4i+5L7nuNiyMmG65lNn0=)
4: qEOd0JSRITKmwn_MrAq43anHLe8.roa (hash: Mq7M3zfHqSv4p6zFUAXdeS8k6DJ4Psbdqulheqnt9F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:d3:fc:94:6f:57:ae:40:be:ea:ac:83:94:58:da:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Validity
Not Before: Jan 27 05:01:26 2026 GMT
Not After : Jan 28 05:01:26 2026 GMT
Subject: CN=a0975162bde7f82c578e181e78ac19f938c7f84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9b:88:9d:31:2d:02:87:74:fe:68:2f:85:72:
5b:ce:33:6f:83:6b:7d:6a:bc:41:f5:a7:f1:12:72:
4e:02:52:57:e5:0d:af:5b:7b:33:ee:0e:ea:07:a9:
bb:b1:4d:62:9a:58:3c:82:80:e9:c8:e2:4e:03:20:
2b:bf:88:4b:b5:88:17:5d:ac:a7:27:79:2a:7f:6f:
bc:33:21:72:9e:55:7a:7f:19:69:aa:99:39:0f:44:
df:5b:3a:30:d4:54:7a:1e:b6:1a:00:c1:c8:88:10:
92:49:bb:c7:de:d9:77:e2:04:fa:d2:ed:61:3c:cc:
c2:3d:61:36:7a:18:6c:15:99:2e:47:c3:60:f7:cb:
21:9c:21:df:cc:15:e2:4a:a8:00:14:78:fe:f8:5f:
b1:1e:ca:d2:4b:02:c5:96:20:da:f2:a4:41:ea:da:
d7:56:f4:fa:91:36:26:61:fa:d0:36:49:d1:65:48:
b5:be:5e:89:fb:4c:cc:e4:8a:1a:dc:fb:de:7d:fb:
01:ec:31:f9:9b:ad:6f:c9:d3:bf:ea:b0:be:22:c6:
99:18:28:4f:54:94:f1:98:3a:ea:73:da:54:d2:3c:
17:1c:9f:9a:f4:a5:29:17:a6:53:72:a6:e6:4a:4c:
97:c2:58:21:3e:51:34:5c:4c:9b:75:cf:84:8a:24:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:97:51:62:BD:E7:F8:2C:57:8E:18:1E:78:AC:19:F9:38:C7:F8:4C
X509v3 Authority Key Identifier:
keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:04:e3:f0:b8:7c:60:80:75:86:88:0f:85:3b:74:8e:d5:8f:
d9:22:44:83:db:fb:9a:42:10:a0:e5:70:43:d6:bc:8a:7a:db:
6c:a0:6f:09:27:83:0b:19:e2:eb:a4:90:c4:6e:30:3c:c4:94:
01:f2:15:d7:64:59:ab:22:12:80:66:bf:b3:66:8a:6d:e0:07:
26:2a:41:69:3a:4d:a4:86:21:ed:a9:ef:09:4c:84:cf:f3:c5:
7b:2f:9c:78:81:3e:29:07:00:e5:67:a6:c6:c1:23:e5:b4:59:
a9:27:c3:63:6b:c8:9e:2a:de:22:ec:19:62:ab:09:57:fc:e5:
dc:76:8a:70:8a:2b:46:08:b9:9e:bd:06:84:fa:36:08:83:18:
81:46:b1:91:e2:85:1a:30:df:9e:0c:9a:91:78:6a:11:b7:52:
44:d6:1f:7b:d2:a6:90:bd:c5:29:b1:8a:20:2d:49:34:8c:e0:
d3:b9:ed:2e:c3:aa:ac:fa:57:57:38:bf:4c:42:12:07:5c:b2:
73:cd:86:f0:e6:63:86:40:9e:b0:3e:73:54:87:17:b6:65:c2:
16:92:6a:dd:dd:63:39:91:b3:1f:db:e4:37:82:99:bf:c8:44:
41:e7:15:76:1e:20:7b:ee:d0:a8:9b:01:0b:94:7a:75:97:93:
f4:9a:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:29:41 2026 by rpki-client