This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File: t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier: 0tDXFQ42LHEgbkanF2ip0rWip9e1oYb8aM8ivOe4Oy4=
Subject key identifier: 57:7A:A4:C8:FF:3E:4A:77:E1:3A:A3:16:64:F3:FB:F2:C1:93:7A:EB
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 019BF8AD0EE304642AF5A7D5DD76EAB23663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number: 1824
Signing time: Mon 26 Jan 2026 05:00:49 +0000
Manifest this update: Mon 26 Jan 2026 05:00:49 +0000
Manifest next update: Tue 27 Jan 2026 05:00:49 +0000
Files and hashes: 1: IEHhAsm6Xmdej2oCP8axb9PFCII.roa (hash: HMNMX3CTbZjbh0WFm8CFNKQuDtEwRiZo1B5DzDBXjYE=)
2: K6dmrbU49_IjvCVVpoSCda0DtfY.roa (hash: UEb7+sC3OMpTg7SsyM1skPMy+THsMiYjl1kHjQRs2y8=)
3: QH92-KbfL63ctZl3QrX0nIExypM.roa (hash: aa3zpeOKy0KyaOR31LacRMZS9fLi4Tzjtg5JgfAnbwk=)
4: WGAML1YjI5zAxq5PEqT3x_V8_tY.roa (hash: 8+17DXSjFxcEUdFqGfGDD9sHzlrlToFKTDXRvABhK4A=)
5: iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa (hash: kcjtUwCY22q3aM/qdCSkN7N8FHGs5xCi5hpXiJukyWQ=)
6: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: IvZZ+Vpj8mwGBDgk63kp5noDxVD4XZnKcLSxP50bwmE=)
7: w_LV1njNA-V7dFXJC3guIvKUQWo.roa (hash: NrG0kBcxPmetf+3OQDVHDWFcnwtwPSHPXue1LQZ+Zbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:ad:0e:e3:04:64:2a:f5:a7:d5:dd:76:ea:b2:36:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Jan 26 05:00:49 2026 GMT
Not After : Jan 27 05:00:49 2026 GMT
Subject: CN=577aa4c8ff3e4a77e13aa31664f3fbf2c1937aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:10:61:1c:54:9e:8f:7d:74:b7:f6:71:b8:
26:74:6f:dc:80:56:6c:52:ff:d0:7d:a0:88:b5:d2:
15:e3:3a:6f:e4:41:5a:5f:d2:1c:dd:30:dc:6a:5c:
3b:c4:eb:00:ee:29:fc:81:2e:98:23:da:ee:40:3d:
11:d2:34:26:64:49:ac:c9:82:de:7a:61:78:c3:61:
f1:63:b7:6f:c6:6b:95:eb:07:54:a8:63:d9:d8:36:
f4:26:d8:60:f7:a2:9a:33:f1:22:f8:3b:62:ad:1b:
c2:d9:36:b5:7f:27:6c:0a:d6:39:53:88:be:c0:b3:
61:43:76:d7:b0:ae:e7:85:5e:2e:e4:db:25:91:c7:
3f:96:28:e1:f8:14:1b:b6:96:be:f3:24:67:f5:db:
5d:a9:aa:54:89:c1:7e:5c:51:0c:8d:9d:bb:df:9f:
64:9c:b2:46:a4:ca:03:e8:be:2d:14:8f:26:51:19:
d0:f4:37:50:d6:0d:cd:b3:83:23:9c:c4:04:8e:fd:
40:6c:6c:c1:0d:21:ba:28:53:29:99:1d:39:f4:b6:
36:55:11:7a:5d:db:c0:7d:ce:82:84:77:e9:cf:b8:
ee:65:20:6e:b5:f3:60:76:66:98:dc:99:25:80:e1:
b7:ff:02:98:29:8c:d1:09:47:c1:9e:c0:6f:e4:2f:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:A4:C8:FF:3E:4A:77:E1:3A:A3:16:64:F3:FB:F2:C1:93:7A:EB
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:00:29:15:1c:17:e1:01:41:ed:bf:48:4c:30:4b:84:65:c7:
15:dd:93:b8:df:4b:cc:fd:bb:07:2e:cd:53:db:7e:f5:da:72:
f7:41:88:b7:e0:e7:ce:92:cf:c2:1b:ba:5a:00:1c:43:18:e8:
13:19:c7:fd:b5:c0:e8:ab:b8:bb:9b:f5:43:82:6b:51:37:37:
e7:fe:b5:f0:4f:21:1c:c2:be:d1:dd:cd:73:d3:dc:27:63:5b:
ab:20:a8:8d:c6:86:24:85:3c:87:75:7d:1f:93:33:5d:a0:65:
cb:49:b2:58:58:ca:ff:b4:d1:0b:33:3a:39:78:dd:f4:36:d1:
71:67:26:2e:3f:ca:91:20:41:09:e4:fb:ac:54:72:17:62:55:
0b:a9:d5:cc:8f:5a:2f:dc:96:b2:5c:ac:1a:8b:f5:a6:25:0e:
f2:57:16:82:cd:23:6c:7f:01:24:1b:27:1c:8f:a1:69:55:16:
c4:69:0d:38:35:79:7a:50:5e:c7:24:35:57:c6:b0:df:a2:40:
6d:7e:c5:51:b0:ff:66:c0:ca:3a:27:99:96:cd:ac:79:7e:82:
9e:50:94:e2:cd:5f:19:ec:36:8a:ce:ab:7b:56:bc:6f:ac:b8:
22:da:75:35:d0:18:0e:35:0e:da:60:a7:b0:43:f6:db:d4:ae:
33:31:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:28 2026 by rpki-client