This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File: r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier: ZmNeq9wa/x85lO/K/Qz4ppHMuAzlIAlHg9LbbFfjmpA=
Subject key identifier: 61:64:DF:E2:5C:31:6B:D4:C9:00:EF:49:C2:52:12:61:66:CE:2E:B2
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 019BF8ADE4CE8062A95924C85C7149FDB9AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number: 17F4
Signing time: Mon 26 Jan 2026 05:01:44 +0000
Manifest this update: Mon 26 Jan 2026 05:01:44 +0000
Manifest next update: Tue 27 Jan 2026 05:01:44 +0000
Files and hashes: 1: 7A2lBMy1HRZHgPKDk_bkGj5ETvY.roa (hash: rL2+XjzMdSu0K1H05+EkUEOgBJlzmxMsT4JTGcTaBGg=)
2: 8yIZTK-CShWBBUUDfghL2_0Azo8.roa (hash: zZSu+xq5lR1eG3HkuY9UlS4mVnZgZc2/qAyNAZnjB0Y=)
3: KDXG6Q4UesZZrscbvutRtXUjZ04.roa (hash: glnL5SMYp1iujQsRgxaeozZQtOiC0uKkyBB33wcXcDg=)
4: MIMB6hj-pbhZmAS4NaP7XqTgm34.roa (hash: o3IJJeBy3jpC50UkL8Zt+4vWy+FDSWr1Y6a3t5k0o+s=)
5: fVw_ICDNU6Bi8MAJYhmrvlrXmRs.roa (hash: c+yT9ByZZB/rH9Ty28IEJWoy1m6iGPvLwsGkGU/4scM=)
6: k0BFiQAl7Q4-lOH-wpVIf6F16RE.roa (hash: LWb7rK2buJgbYTwsimy6ORw0odV4aXlPrizohyk5THc=)
7: keDaDU-vCcS6klKiWWvwuQqa3NE.roa (hash: FwrW61c/rLAqQnYEyfpdGoA2bVf4TFLR0gcdIXQaNqA=)
8: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: 8VrTfTe3ShrCAvqCbJv7LKKmTVV1FfbXA/sQ6aPKzkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:ad:e4:ce:80:62:a9:59:24:c8:5c:71:49:fd:b9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Jan 26 05:01:44 2026 GMT
Not After : Jan 27 05:01:44 2026 GMT
Subject: CN=6164dfe25c316bd4c900ef49c252126166ce2eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:25:63:2e:b7:40:15:ee:d9:ac:5a:dc:d8:
f4:7d:e6:f4:15:63:ff:dd:8a:fe:74:80:9e:5c:14:
f5:46:be:b3:5e:35:73:3f:bb:9b:e2:62:d3:50:a2:
c6:a4:61:7b:e2:a0:e5:3c:dd:0d:5b:73:dd:1b:4a:
61:c1:0d:d7:40:a7:8f:93:81:65:88:ab:ab:a7:a8:
d0:88:32:db:ae:1a:8b:ac:da:31:95:26:18:8b:b3:
f3:97:8b:c1:d8:ca:96:25:d3:0a:81:0f:02:ee:8b:
52:9f:23:d2:53:db:db:dd:ae:09:7d:6a:e3:3d:f4:
2c:62:8a:48:76:4b:30:38:52:27:1a:81:27:7f:2a:
8d:9b:11:1d:4d:bc:92:dd:ea:c6:a2:4d:ad:46:95:
60:6e:9b:b8:c9:6e:86:bd:58:d4:94:53:dc:eb:f6:
0d:90:da:27:96:9c:80:c3:e5:ef:76:d4:7c:95:32:
e2:24:80:cc:af:7e:18:97:f2:35:19:77:84:c6:e9:
0f:49:d2:4c:3d:ee:89:8a:77:5c:c6:bf:f3:cd:3f:
6f:0d:44:88:a7:b1:c0:35:b2:5d:b0:40:f6:9d:d9:
7e:54:a1:6f:9e:14:13:52:be:da:16:f7:bc:3b:23:
69:b7:df:18:dd:85:0c:a9:e6:2c:85:75:d0:0c:ab:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:64:DF:E2:5C:31:6B:D4:C9:00:EF:49:C2:52:12:61:66:CE:2E:B2
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4c:da:91:f3:db:32:e4:2d:f0:3b:e0:73:00:5b:a3:5c:33:
c2:25:e6:fe:60:34:5a:39:11:a4:2b:0e:8c:da:67:e3:c1:e9:
1d:63:b7:fc:d9:09:d5:1f:7c:6a:4b:d2:41:d8:e7:94:1c:83:
71:e5:b2:e0:4a:29:65:cb:35:d2:5f:41:2c:1b:da:08:a1:cc:
cb:2a:0f:b6:9a:8b:94:e0:fb:5f:9b:a0:1e:b5:89:3c:ca:3b:
55:91:db:67:08:ca:93:a8:91:56:5d:93:8a:b8:fa:4b:8b:f3:
58:22:61:af:14:b5:1e:50:72:6f:ba:50:a5:d1:4a:8c:ed:9a:
cf:5f:41:1a:f1:62:04:7b:2a:33:45:5e:9e:85:55:90:3a:70:
2a:de:fc:cd:9d:3c:7c:6c:aa:9a:8c:04:04:f5:ff:d9:ca:ff:
4a:70:d5:ea:a1:7a:db:fa:fd:86:f2:94:0f:a0:de:e6:cf:8f:
ff:18:e1:62:d4:68:96:78:80:ad:eb:4a:21:a6:bd:c5:51:52:
a3:e4:65:e6:18:3d:7c:67:6e:ca:c2:46:46:99:f9:2c:03:26:
42:56:ad:02:ac:71:87:f4:a7:71:90:2d:64:0b:ec:bc:ce:6b:
0d:6c:a1:03:d9:7e:0e:c8:c9:dc:c1:4e:55:21:4a:db:e7:89:
fc:7c:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:21:16 2026 by rpki-client