This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: BGC+3lHomvRwLvsLqcQSLkEjUCzPGnFUYHeZKC1fX1k=
Subject key identifier: E5:D2:72:0A:E2:B5:C3:DF:BA:37:14:77:1F:18:DF:C3:A9:DA:92:57
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 019BF9C052DEC178EAFA6C77FFC3F4F657BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 17EB
Signing time: Mon 26 Jan 2026 10:01:29 +0000
Manifest this update: Mon 26 Jan 2026 10:01:29 +0000
Manifest next update: Tue 27 Jan 2026 10:01:29 +0000
Files and hashes: 1: S_bLPS21FFHSFgzqZbLQgGjdapU.roa (hash: ntP7qUH7mD4+qqNvUodX6WEcYgeevuhwX8/sIbaDqz4=)
2: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: /nwSapaQpNcGML7WXbMzzjUFV6dZEJRE9uCaCjLDPBs=)
3: vuogQOiw-NsRjP2TO25Dr4VGU1g.roa (hash: /xeIMQbmMftTFD0OnGKJGQk5eie+bKtG5JesE4wKpZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:c0:52:de:c1:78:ea:fa:6c:77:ff:c3:f4:f6:57:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Jan 26 10:01:29 2026 GMT
Not After : Jan 27 10:01:29 2026 GMT
Subject: CN=e5d2720ae2b5c3dfba3714771f18dfc3a9da9257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:41:47:a3:35:0f:2e:67:58:aa:f0:43:b6:
f5:ec:4f:4e:13:44:81:b9:2f:37:c2:a5:4d:c2:af:
12:bb:95:eb:70:2e:96:c6:cf:fe:c6:8a:91:00:fc:
64:7c:e1:ba:4f:d4:7a:8c:1b:11:e9:97:fd:85:32:
7b:ba:38:8d:9c:f6:08:67:a5:46:d9:c3:e5:bc:ad:
97:71:9c:77:ac:71:28:a9:65:b7:e9:33:51:a5:f3:
7d:5e:e2:6d:e9:12:23:41:c8:80:06:1e:a3:f5:57:
86:b8:32:50:cb:ae:a0:1d:99:7d:2e:fa:50:0f:c5:
56:7a:39:6e:83:fb:a4:82:6d:f4:6c:8b:19:ee:f3:
74:59:c2:2f:62:b2:ed:b6:33:8b:47:46:5a:b9:3e:
06:a8:a3:2b:54:be:30:2b:40:30:80:3f:e8:54:dc:
38:5c:2b:d8:04:54:55:f7:cb:94:f5:fc:07:a1:38:
c5:ef:81:85:4e:17:63:39:6c:ed:4b:cd:80:d2:f6:
83:cb:0f:1f:ad:15:b6:aa:a8:87:3d:b2:66:d2:f9:
7d:3f:9b:e6:b2:ff:b5:8d:6f:7a:e2:6b:69:bb:d9:
4b:e0:ce:6b:4b:e9:47:01:1a:89:dd:6f:71:5e:68:
a4:11:25:d5:fc:ed:3d:13:99:66:60:ee:6e:b5:e7:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D2:72:0A:E2:B5:C3:DF:BA:37:14:77:1F:18:DF:C3:A9:DA:92:57
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c0:48:ca:2b:a6:3c:d9:2c:b7:63:55:f1:1a:10:3a:d1:4a:
cd:17:32:7e:0b:6d:7f:82:6d:e8:61:55:5f:b5:30:3c:bc:2e:
c3:dc:bf:a5:f1:dc:ee:6c:3d:77:b5:ac:c0:ff:3e:91:b0:e9:
94:ad:d1:66:89:6b:b2:0b:89:2b:77:f8:6c:fe:c6:15:71:29:
07:3c:d8:b0:a2:8b:69:da:fc:03:3b:c4:a5:c3:1a:44:b6:88:
46:a7:39:d5:c8:d9:59:76:d8:ed:1c:c5:a5:4c:cc:a3:4d:8d:
2f:eb:bc:96:1a:09:d5:08:28:0f:1c:c6:b4:39:b0:69:da:db:
e8:98:11:3c:7f:53:1e:29:22:1b:f6:ab:c0:5d:b4:b1:58:97:
2e:84:1a:00:6b:52:dc:aa:eb:9b:ea:98:0f:6d:31:97:b6:ff:
52:f4:d8:ef:4f:2e:ea:c7:48:ab:f3:f9:a1:bf:fd:f9:d5:f4:
b3:9f:32:29:a6:5f:b9:65:0d:8b:22:64:c2:51:c3:d6:85:6d:
0f:3a:2c:c8:84:96:77:8c:c7:a3:4c:13:1d:08:ca:6c:52:f9:
cd:2c:1e:eb:38:4c:b4:95:c4:e2:7e:7b:a3:0c:06:2e:1a:c3:
d2:f6:38:fe:f5:c4:4a:c0:a5:1a:df:56:f7:79:b4:29:7a:b2:
57:6d:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:45:45 2026 by rpki-client