This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
File: scPsU58j7gMao5asXO1CVjiEt7M.mft (raw, json)
Hash identifier: KupH4zA09BJU6s9MRSRaC7wONdStn5XIgHnFUZUOL8Q=
Subject key identifier: 87:C6:11:B6:36:B0:F7:BA:BC:B7:E8:13:CB:4D:E6:42:15:06:3A:4A
Authority key identifier: B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
Certificate issuer: /CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Certificate serial: 019BFD6616DC44FD0EA414FB2752B28FCE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
Manifest number: 0AA8
Signing time: Tue 27 Jan 2026 03:01:24 +0000
Manifest this update: Tue 27 Jan 2026 03:01:24 +0000
Manifest next update: Wed 28 Jan 2026 03:01:24 +0000
Files and hashes: 1: L3zQrDly_cgu2DtWRJFHDzULtOQ.roa (hash: i7m+qZMXIsGxhkbEdh7EZAa733fER6ODAhYCosRl/wk=)
2: Xf4ZTszORkzpOtgjWs0sQXLkCfM.roa (hash: f/UijPcLGJI8l2y80NoFTGhFWkou3AIufub5lbOoRas=)
3: scPsU58j7gMao5asXO1CVjiEt7M.crl (hash: 3/yJX2RDVZK60NarDzbRtIqTvQPzwPG00CGfBc6kQS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:66:16:dc:44:fd:0e:a4:14:fb:27:52:b2:8f:ce:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1c3ec539f23ee031aa396ac5ced42563884b7b3
Validity
Not Before: Jan 27 03:01:24 2026 GMT
Not After : Jan 28 03:01:24 2026 GMT
Subject: CN=87c611b636b0f7babcb7e813cb4de64215063a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:ff:9e:01:2f:4c:e2:76:2e:31:5a:50:a4:
95:e8:62:1f:7c:62:bb:4b:d1:04:5b:54:56:a2:b6:
41:3a:92:ba:ae:f5:85:3c:b9:b2:fa:ea:80:47:62:
e6:39:66:ae:be:c6:bb:bc:96:9f:1f:75:bd:1d:46:
5b:a1:5e:5d:10:bb:6b:91:02:22:e4:1e:68:09:59:
e9:02:0b:a1:c0:e0:07:5f:93:6e:e0:a5:d7:1d:49:
7b:c0:2a:07:b9:89:7c:0c:bb:ea:46:9d:2b:ec:c2:
3a:09:c7:70:d6:7a:45:35:b7:94:bd:b7:47:97:64:
1b:55:0a:6e:b3:97:de:a6:be:d5:96:35:e6:fa:ce:
8b:ed:4c:36:7a:cc:8d:10:8c:f2:a9:79:33:39:e2:
65:78:6d:8f:04:bd:f7:64:0f:de:6d:d8:6e:ec:0e:
7f:e8:c7:f9:35:e3:9b:f8:ed:a1:65:8e:c6:d2:e5:
d4:97:11:8b:f6:40:b4:c1:33:0c:c9:03:a0:96:aa:
6d:95:9c:7b:4f:33:34:8a:82:6a:a7:3f:6a:a5:05:
63:89:d9:c9:59:af:9c:c3:41:c9:0a:5a:1f:f1:9f:
69:a2:ab:5e:74:d5:33:81:2f:de:20:a2:29:f5:fb:
71:e0:50:6e:f7:51:ef:59:30:d4:b3:0c:d6:3a:a9:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C6:11:B6:36:B0:F7:BA:BC:B7:E8:13:CB:4D:E6:42:15:06:3A:4A
X509v3 Authority Key Identifier:
keyid:B1:C3:EC:53:9F:23:EE:03:1A:A3:96:AC:5C:ED:42:56:38:84:B7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scPsU58j7gMao5asXO1CVjiEt7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/00dcdf-ec9d-4446-905e-556347a5f056/1/scPsU58j7gMao5asXO1CVjiEt7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7c:c7:73:3a:2d:5e:f5:ee:1a:9c:76:1e:d7:11:8b:89:66:
56:d1:93:fd:b9:f5:28:56:c5:fc:1d:63:e5:6a:62:06:f6:5c:
9a:b8:2b:6b:01:db:e7:c3:3a:9f:88:0d:61:10:c8:a7:e8:03:
7e:e4:35:55:b3:dd:58:e8:ba:83:35:7b:3a:98:ec:02:ad:66:
66:62:a1:fc:9a:de:c4:7d:0f:a6:25:49:73:45:21:38:d6:f8:
42:b0:0f:dd:35:12:67:f5:a3:6a:eb:dd:c0:66:0f:b6:1f:9a:
42:f3:24:16:a3:84:dd:93:5b:2e:27:b6:ae:91:a7:67:18:75:
e5:14:f0:2f:78:0b:d7:9f:4f:f1:d0:bf:5e:6b:20:51:d6:1a:
8d:46:34:7f:23:7a:d4:8f:22:77:f1:39:c8:ee:31:b6:5c:30:
9a:b8:55:9a:ec:38:37:12:6f:e4:c5:3a:76:9b:4a:5c:30:fe:
17:2c:2f:ec:85:4d:af:8b:32:35:03:5c:bc:bc:f7:2d:20:35:
75:b4:af:ca:ad:6c:5b:d8:f7:3a:34:f0:8a:30:7d:6c:cf:42:
22:79:a1:b4:5d:85:17:67:18:4b:c2:39:5a:7a:6f:81:b4:7d:
5a:c6:98:58:f4:09:31:34:8d:6a:57:b0:74:88:4e:70:38:9e:
8d:95:65:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 05:37:29 2026 by rpki-client