This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File: v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier: hdIzr0ExpxjdDbWRdhV/Ezjj6jT0wNE2MLiHrb86eOg=
Subject key identifier: 2E:A5:5B:AE:EF:DE:69:BC:45:59:74:5A:9B:85:22:52:2C:37:74:79
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial: 019BFA9C2C5E74792896B6FB45D6CF3BAAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number: 07C7
Signing time: Mon 26 Jan 2026 14:01:37 +0000
Manifest this update: Mon 26 Jan 2026 14:01:37 +0000
Manifest next update: Tue 27 Jan 2026 14:01:37 +0000
Files and hashes: 1: PjGZVG-uOaDVHbHbJIUYe0z8jmg.roa (hash: 6MncPoLprurVYfiY9ZBImtV4SOtSMwf+QcTHZ6cdyhk=)
2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: NYqXyjnWWr2JCzV4rzi2XZN3nxgXFUArPpQ9Q2WShds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9c:2c:5e:74:79:28:96:b6:fb:45:d6:cf:3b:aa:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Validity
Not Before: Jan 26 14:01:37 2026 GMT
Not After : Jan 27 14:01:37 2026 GMT
Subject: CN=2ea55baeefde69bc4559745a9b8522522c377479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:35:51:d1:a6:90:18:02:1e:97:dd:5c:e0:
ed:54:8a:d9:dd:7c:4a:c5:31:3e:77:6a:f8:32:23:
fd:92:0e:6c:9e:6c:16:58:7c:9b:b7:24:94:c7:46:
0d:4c:48:9b:76:70:87:35:20:30:4b:c3:86:84:93:
69:9b:94:84:7d:4c:09:90:bf:b9:93:33:4b:32:da:
ee:50:8f:80:54:af:24:ff:9a:79:21:0b:a0:1f:a4:
e9:3e:ca:bc:c0:d5:f5:91:bf:55:0c:4d:4c:79:c5:
bf:55:da:95:3e:f6:95:07:66:cc:a9:80:48:7f:0d:
13:59:cd:82:b9:b6:70:45:ba:29:c5:71:c9:39:8b:
78:72:b3:f9:11:26:f1:29:ee:bd:f3:43:ed:ed:44:
3e:9d:f7:9f:10:8d:0d:50:e7:25:ef:12:a9:6d:fb:
f8:67:7b:f7:7f:12:08:78:b8:5f:95:fc:a4:4a:da:
ea:d6:b3:0a:c4:a2:b6:44:55:8a:b1:0a:b6:a9:85:
de:fc:9a:4e:ff:eb:19:ca:6d:f5:33:55:ae:c4:46:
0f:cb:0c:7c:34:21:4e:fc:b1:61:be:74:ac:6d:73:
ac:79:f5:a5:a2:2e:93:78:a5:9e:68:a2:b3:09:85:
c7:c4:3c:7f:77:8c:77:6a:35:4f:4c:cd:c1:d5:27:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A5:5B:AE:EF:DE:69:BC:45:59:74:5A:9B:85:22:52:2C:37:74:79
X509v3 Authority Key Identifier:
keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f6:12:71:cd:71:81:3b:0d:55:45:60:c1:95:c6:08:77:56:
95:93:a6:ad:ca:c5:51:8a:35:b6:62:42:eb:3e:a0:3c:2c:48:
30:c6:90:48:15:ba:fa:2c:92:ef:6d:f5:d8:f7:8b:01:c7:de:
5c:e9:26:ec:30:28:92:4d:8c:34:5c:1a:0a:33:ef:24:e9:ce:
d2:d0:f0:2e:76:27:43:e4:55:ff:a7:60:4f:29:7a:1f:91:5c:
1d:35:16:9d:c6:61:ce:94:75:4d:2b:ce:45:35:c7:8d:e9:d6:
bf:7e:a7:08:0c:ea:c2:38:d3:90:1a:6b:b6:4a:2c:a8:c7:18:
b1:78:1c:fe:c9:e3:86:68:b1:3b:ac:22:01:93:03:d3:4a:bb:
71:35:bd:a7:98:88:39:94:1d:02:68:b5:51:bb:b3:da:bf:bb:
9c:9b:23:ef:22:af:fc:f1:29:68:a4:d6:ef:d9:9b:00:4d:ce:
7a:2a:1f:e6:85:34:46:c2:96:e8:db:e2:4a:2c:74:f6:b7:c6:
4b:42:56:27:49:9a:0e:5c:1d:f3:e2:79:b7:14:c3:5a:62:ac:
ea:20:ac:f8:df:92:10:9f:ae:06:df:53:09:e0:43:de:0c:49:
43:ae:d3:3e:08:71:91:ec:7f:a1:77:79:e1:4a:e6:37:fe:52:
c2:75:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:22:06 2026 by rpki-client