This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
File: 79kZGXhjH8lVrA9RBi1c6YROrgM.mft (raw, json)
Hash identifier: bafyTo1lnK50p79NWdtmWSwM7JcBCnaJz9e6YIowY2M=
Subject key identifier: 80:CC:6E:78:5F:6A:E5:36:76:5B:CD:0F:72:06:BE:34:A6:A1:86:AF
Authority key identifier: EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
Certificate issuer: /CN=efd9191978631fc955ac0f51062d5ce9844eae03
Certificate serial: 019BF8E3C05C87C5CF2053D986039B0B3C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
Manifest number: 17E8
Signing time: Mon 26 Jan 2026 06:00:33 +0000
Manifest this update: Mon 26 Jan 2026 06:00:33 +0000
Manifest next update: Tue 27 Jan 2026 06:00:33 +0000
Files and hashes: 1: 79kZGXhjH8lVrA9RBi1c6YROrgM.crl (hash: DAI7UONY+pGkmy7dJZ/9hRyq9yyhp5XYUAdg8qAaLkw=)
2: AFAhK4RjN_tCaCuKPQ6S294APKY.roa (hash: Bh304+c1jskIegs4ufHvSWn2atzw/YKrzOn26bB1JF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:e3:c0:5c:87:c5:cf:20:53:d9:86:03:9b:0b:3c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd9191978631fc955ac0f51062d5ce9844eae03
Validity
Not Before: Jan 26 06:00:33 2026 GMT
Not After : Jan 27 06:00:33 2026 GMT
Subject: CN=80cc6e785f6ae536765bcd0f7206be34a6a186af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:72:e3:bc:66:61:c0:ff:54:36:17:b2:da:0d:
79:07:c7:06:2f:35:f1:c1:b8:0e:d0:62:cf:51:59:
d1:ce:77:3a:1a:e8:b5:20:e7:6d:e0:63:cd:2d:78:
5c:05:21:68:1e:01:3f:36:92:3a:23:98:3b:1e:fd:
d9:da:16:c4:54:0a:c9:84:2c:f6:60:76:b8:24:1e:
c8:d3:dd:38:2c:16:cc:78:23:fa:c2:1c:0a:4e:8d:
78:67:01:5a:a6:e6:30:61:20:47:df:a7:68:96:36:
d6:b1:c1:a9:07:13:b2:4f:79:4d:29:75:fe:63:6c:
fa:71:27:69:05:8b:68:8a:6b:84:d5:c0:9d:2f:e2:
aa:0d:26:de:30:35:45:a0:c6:a5:20:a4:58:c3:dc:
10:94:41:e9:f7:2b:1c:93:75:1b:ff:ad:bf:3f:67:
08:93:09:52:18:14:39:78:da:41:21:17:0d:a5:f7:
70:85:0c:f0:d6:d6:6d:7f:87:81:b2:bd:ec:e3:5e:
0d:92:a9:40:29:d4:d0:7b:0d:4d:33:91:0d:d4:5c:
98:f4:73:ec:14:9c:a1:de:02:b3:01:4c:99:92:02:
49:12:f2:a8:b2:6d:95:80:67:78:74:0b:2a:8a:2f:
40:f8:b1:c4:23:8f:fc:24:5f:49:40:ed:72:3b:47:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CC:6E:78:5F:6A:E5:36:76:5B:CD:0F:72:06:BE:34:A6:A1:86:AF
X509v3 Authority Key Identifier:
keyid:EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bc:15:dd:a8:c6:b3:ed:ca:f7:0f:4c:78:86:1e:80:c2:9a:
8a:ce:7e:38:4f:ed:c0:e5:37:ee:c2:dd:e9:6d:54:77:81:7d:
b1:e3:16:e1:be:ee:f4:62:c5:0b:ed:5b:30:ab:da:b8:4c:1d:
a4:7d:74:b4:d7:a1:ec:3b:fd:c5:8e:af:b2:8e:85:0d:69:9d:
5f:56:40:14:91:e7:47:5e:1f:fa:a0:e7:62:1c:96:1c:f0:64:
4f:9e:f8:35:0a:89:d9:8b:c8:a8:3b:93:e2:db:63:29:58:73:
fe:d5:ed:e6:f7:c8:27:19:03:58:3b:95:ee:7b:b8:7a:d7:7c:
53:ba:3d:ed:57:73:24:3e:03:b2:b2:64:c4:bc:73:54:7c:e3:
aa:57:0f:86:e5:6e:45:4f:5d:d2:d9:39:ed:48:2f:86:3d:44:
4f:06:b8:ed:90:c9:1a:61:56:ae:e3:89:3c:3e:9f:69:8e:11:
f0:25:1f:ca:01:cf:80:66:49:7d:68:5d:e4:a6:de:b8:12:74:
eb:8d:88:51:38:b9:bd:65:61:a2:10:04:c9:23:58:f9:ab:da:
aa:67:86:53:0d:69:20:5b:a0:d3:2d:1e:e9:27:af:5b:08:ce:
b8:9d:4b:6a:0c:6d:e8:8c:d0:f6:16:4e:9a:2f:d0:9b:f7:4e:
15:ec:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:04:11 2026 by rpki-client