This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: 8eR2Sew/RemBut6eOyofjJJ3hWNIKf0g+DItoabJVgs=
Subject key identifier: 28:2C:D1:61:85:7C:FB:38:69:FF:62:89:A9:0B:91:A7:98:D9:65:3D
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 019BF8E4880082972249FCA0091FAA54D5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 11BB
Signing time: Mon 26 Jan 2026 06:01:24 +0000
Manifest this update: Mon 26 Jan 2026 06:01:24 +0000
Manifest next update: Tue 27 Jan 2026 06:01:24 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: amM4a+FscTVknpWJITl68MYiEFHLxEZ3Mb2FKIBwf1c=)
2: OIqVwV7eJRjge3Y7JoI6UT8DyHg.roa (hash: 1a+xm03EcG4NIWojKcu02C40HTOK/Zidn5fuQN++My8=)
3: RvjdrZHQvT2b90nWXdsgoaDdips.roa (hash: qK/UmJeSS3Eli2K0IV23Gv9PIRqLGK5MHBRUfrzwD3E=)
4: YfMmn3NTxzanjSoW2CgtmSyKoBw.roa (hash: R1/beSy+NbtBJBgUSOR66DtF7b/TO6ueQaOcS29ElbE=)
5: osG6SqIqqmIP3iBJplJkK58I_pQ.roa (hash: b1xSqqWBFOEz+K1E0t9Y9zbsAyRCIW7qvBJSCpg4lHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:e4:88:00:82:97:22:49:fc:a0:09:1f:aa:54:d5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Jan 26 06:01:24 2026 GMT
Not After : Jan 27 06:01:24 2026 GMT
Subject: CN=282cd161857cfb3869ff6289a90b91a798d9653d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:b3:43:ed:81:c5:56:66:b6:e3:b7:78:a2:
cd:32:e9:52:48:2f:71:43:81:7a:9b:5c:c7:17:ee:
c7:ad:6f:93:ec:de:da:9c:7b:e4:4e:5d:91:b0:d4:
f3:d7:d0:52:85:cb:4b:f1:3c:4c:63:ea:ca:22:b8:
41:64:a5:e6:5d:32:90:e5:80:bd:a2:f8:8c:69:59:
de:ac:4a:88:ed:22:b5:5b:38:dc:15:87:e7:4d:d4:
b3:e4:f6:1d:da:e7:56:92:35:39:67:f6:2b:15:27:
9f:a1:0e:d7:d5:bb:a6:36:27:98:4b:ba:20:a6:20:
96:ba:10:fc:9e:68:a6:a9:d2:cb:33:2d:d1:40:5e:
d0:2b:a4:2c:23:30:64:8c:40:60:84:07:9a:47:86:
fb:0e:30:5c:1d:bf:41:78:a1:5f:0f:4c:25:c0:97:
d8:d8:58:f5:56:66:52:d3:43:68:22:f6:1f:a4:2b:
87:57:9d:46:40:0b:27:e0:27:55:49:67:a7:3d:a2:
90:af:d8:33:51:ec:9e:d6:06:21:cc:2f:83:24:bd:
87:96:d2:49:84:b4:6a:d1:18:5f:47:f9:5e:17:22:
ca:6d:7d:94:d5:a8:4c:30:55:14:89:bb:cb:12:a5:
5a:58:b9:2c:49:c4:eb:08:02:78:ea:0c:d3:10:80:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2C:D1:61:85:7C:FB:38:69:FF:62:89:A9:0B:91:A7:98:D9:65:3D
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a6:b0:c1:60:4a:cf:dd:95:a7:ae:d3:5c:e8:db:20:71:32:
ef:33:8f:05:47:a1:ef:bc:57:c9:b4:09:4b:d7:c6:a8:a0:ce:
9c:30:aa:a8:3c:d7:20:9f:a5:6b:ea:ff:26:90:7d:de:4e:07:
46:65:25:00:5f:ba:ed:fe:b4:11:33:83:59:da:a4:d6:08:6e:
bd:5d:3c:22:d7:81:b7:59:22:41:91:de:b6:67:41:28:cc:2e:
35:59:f8:ac:e1:cf:84:95:2b:20:5f:83:fd:12:fc:03:43:da:
d4:96:ae:3d:33:bf:75:29:44:d8:c6:1f:74:d1:71:81:b1:b7:
30:c5:dd:d9:b1:fa:ff:d7:0c:0a:4a:3f:c5:92:13:03:e6:40:
54:a6:34:55:0e:c7:0f:b6:52:2c:80:6f:2e:d7:3d:59:26:f0:
44:dc:20:7d:83:ad:cd:34:03:65:d4:df:92:10:75:94:8b:46:
71:d8:31:4c:b8:6a:55:e1:95:4b:e4:b0:5d:90:d4:33:3d:a9:
4f:1f:58:8a:f4:62:4b:cf:ec:c2:c3:6e:66:9d:53:a1:09:da:
d6:60:e1:af:18:9f:f9:41:28:0a:dc:82:bf:13:72:b8:80:96:
42:eb:50:7b:d8:b8:21:d5:0f:38:f0:d2:be:07:30:9b:a6:45:
0c:e8:ea:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:25:44 2026 by rpki-client