This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier: drCHDh/3vZMvShhlVNJ8mo1t91924ZbivJgiOb8prgY=
Subject key identifier: 36:7C:96:EE:7D:C0:09:B5:33:9D:D7:FA:A5:12:86:3D:1A:4C:6E:CE
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 019BE06E0D86759AD24DD6F4BE0AFFCC5B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number: 17E5
Signing time: Wed 21 Jan 2026 12:01:07 +0000
Manifest this update: Wed 21 Jan 2026 12:01:07 +0000
Manifest next update: Thu 22 Jan 2026 12:01:07 +0000
Files and hashes: 1: Cy7Rx4953-jX_LAEsh6knsBwiwI.roa (hash: RbeQiV/5rjUIyCDMoB3diQP9Z25QG9q9RvXT9QU6AAY=)
2: ERektKYX8bQYLZ6hhAfOvva6TN0.roa (hash: BUZ494WA2RKIxudCXcjO8KHU4mHDrQO+xeY/KFK20Bk=)
3: NEU1c7VNN4q-TguvB94_KBChOu4.roa (hash: szP1WPQvFX40P7/Pi1/TmYlqHInk9WSkXPOdCLYLMNw=)
4: Rph0-ywhZvi016wnJgS4mZ5Aq4Q.roa (hash: gI+MWy+X8E8yCdq+Mv/fudVnXvOj/7Bs5b4jgd3W/FI=)
5: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: Gi/doiskWtJKQct4oZx2QuHHfC4+aEZpF9Wbc81fv9Y=)
6: gvMEp1TMCJyhHJ9Ml5_cvvewGSY.roa (hash: ONubWKJOgWsNndyiyHgp5asOkTdD3CWbVh2afwmX/iY=)
7: nCefriJl2VPKegNYyVwj2ynX1o4.roa (hash: DrdI9RW4C32/rl7W/jweDQ18afw7p4Ra4A85oKVHBRw=)
8: opQiFkBqkVj4L844lKnzaIRQSzs.roa (hash: pr16BH5jtBeIewsVLh8sVivtAzs4fVPRiPHTfoJlwLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e0:6e:0d:86:75:9a:d2:4d:d6:f4:be:0a:ff:cc:5b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jan 21 12:01:07 2026 GMT
Not After : Jan 22 12:01:07 2026 GMT
Subject: CN=367c96ee7dc009b5339dd7faa512863d1a4c6ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:c0:5b:c8:d5:af:d5:0b:e3:d0:86:4c:c0:
a0:b1:b1:74:2b:24:fd:08:da:00:d6:a2:35:11:3e:
c3:d9:44:04:e4:9f:36:82:7b:b5:42:33:4a:fd:f1:
45:fb:f9:34:27:65:86:bb:fd:b9:cf:de:9a:36:6e:
b5:a4:fc:cd:21:d0:6c:ab:91:18:a8:b6:39:47:d2:
63:a0:70:86:ad:43:73:60:97:7d:a7:8b:b6:06:76:
37:5c:93:7d:3b:d4:77:81:c3:f0:9d:4b:02:07:99:
0e:15:8d:0e:88:d3:72:a3:e5:6c:62:66:a0:0c:81:
2d:5a:47:98:46:39:b3:31:96:71:80:e0:a8:62:4f:
1f:31:de:ba:c8:ca:dd:6e:c9:0e:21:89:25:57:48:
87:da:fa:c7:f0:02:e2:56:07:cb:e6:f2:98:75:72:
19:97:2c:bc:1c:58:e9:59:4e:ee:02:93:f3:ce:d3:
8e:11:48:3c:54:3d:8e:c9:39:2d:fd:6e:19:71:f0:
87:c0:96:cf:24:50:66:79:bd:eb:e3:36:03:fe:1f:
f6:52:8d:48:69:32:37:51:67:04:ed:93:0d:20:46:
c3:12:25:c4:4a:66:cf:cb:67:d7:22:0f:84:60:e0:
f8:fd:08:5c:cf:cc:91:0c:73:87:87:40:2b:11:ef:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7C:96:EE:7D:C0:09:B5:33:9D:D7:FA:A5:12:86:3D:1A:4C:6E:CE
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:71:27:ca:0b:d8:93:ea:37:54:8e:6f:7c:41:8e:54:9a:6b:
6a:87:07:45:cb:f0:47:b3:f9:38:d4:24:ea:78:da:ce:43:e1:
05:6b:61:cc:28:d2:67:6d:41:78:2b:b7:54:59:44:f9:1a:7b:
f6:be:2e:3a:cd:c0:44:4f:4d:69:5a:64:3c:40:ba:41:52:8d:
4e:92:44:83:c4:20:0a:06:e6:0b:0f:4d:47:4c:68:3c:44:d5:
41:bf:77:1d:64:e4:ff:3f:1a:5c:82:8f:91:71:ac:9a:14:3a:
86:a6:10:55:33:80:12:34:bf:cf:2d:49:f9:60:09:b9:dc:74:
5d:01:68:2c:d8:dd:b0:a4:20:9d:9d:f9:f3:22:67:5b:c2:82:
e8:e3:22:e2:25:84:ee:ae:59:38:54:1b:cc:9a:07:03:78:95:
61:a7:b3:99:24:95:32:13:61:cb:83:06:ad:e7:27:43:3c:04:
1a:10:82:3b:55:b0:ba:a5:72:81:7d:91:a0:e6:e3:e3:09:c8:
77:c4:c5:fb:e9:90:ab:2d:af:67:4c:f1:68:4f:ba:a6:9f:d9:
40:50:38:3a:5a:c9:4d:c7:1c:80:5a:85:69:e5:f1:a9:13:d6:
99:c8:ad:b8:86:f6:39:bb:c9:8c:5b:6e:a8:1e:c1:9f:31:c1:
ed:e7:12:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:44:20 2026 by rpki-client