This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: PUm8YDoLXaNGXfdDXbcPleHufOVnk5hMKLOfRqdiQX0=
Subject key identifier: C5:C7:47:F4:5C:8B:17:CB:BD:86:93:3A:CF:B5:FE:93:D6:37:21:C4
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019BFC8A930A43B1A70610630EA91B3F835A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 17ED
Signing time: Mon 26 Jan 2026 23:01:38 +0000
Manifest this update: Mon 26 Jan 2026 23:01:38 +0000
Manifest next update: Tue 27 Jan 2026 23:01:38 +0000
Files and hashes: 1: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: FtuJQ3u8xFtg4KIugOPHJudZvxz7XrXB2FGhiVuZIGw=)
2: JOJrGMU0qn8ngziJaeo4DZASmf4.roa (hash: axtxAxE6iWUw3UR4k0hi17IxEDv4E101kXVSQiPd/Mc=)
3: ptwMESCTQKh1eUKxKNaUBcvAXoc.roa (hash: NHN88OkqeyC7hTU3lW2dshn//WH3lw/b1C5FyuT4/rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:8a:93:0a:43:b1:a7:06:10:63:0e:a9:1b:3f:83:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Jan 26 23:01:38 2026 GMT
Not After : Jan 27 23:01:38 2026 GMT
Subject: CN=c5c747f45c8b17cbbd86933acfb5fe93d63721c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:1b:4d:8b:92:18:22:e5:2d:5b:de:e4:de:
74:03:5e:50:52:d4:5b:68:c9:f6:43:13:2b:ff:6b:
33:ea:72:2d:ef:36:75:42:e6:8f:e8:78:51:6d:c2:
86:87:61:71:c5:2a:43:5e:4d:d8:0e:db:0a:93:1a:
7f:81:8e:b1:dd:e7:b9:e5:e8:ec:0d:97:3c:3e:52:
91:60:40:63:76:5a:a2:5c:d2:25:00:ec:1b:cb:be:
8a:73:c6:88:14:54:bf:4d:21:2b:f4:de:07:d0:ca:
15:c8:d7:fc:94:4f:24:47:48:66:62:e4:cf:55:d0:
e0:f1:d7:6d:e8:69:7e:c0:fe:1a:17:37:a5:91:e8:
ca:5a:03:7d:d8:59:3a:f8:fa:a4:0d:7e:cf:bc:cf:
96:72:81:1b:c2:af:37:8a:46:58:90:2e:c1:c1:3c:
7d:4a:fb:d8:e9:e7:f5:90:be:4d:16:fa:d6:e2:e8:
d5:36:b6:c2:76:02:32:81:13:b4:84:60:ef:af:88:
02:6b:71:db:1c:51:d5:21:55:a2:47:67:ca:dc:75:
72:b6:fc:e0:c6:dc:80:b9:1b:53:d5:3c:23:75:18:
bf:9c:70:73:70:e6:68:4a:90:7b:ab:92:52:70:1a:
f8:11:91:bd:c4:c4:70:20:93:4e:78:27:e2:1a:8a:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C7:47:F4:5C:8B:17:CB:BD:86:93:3A:CF:B5:FE:93:D6:37:21:C4
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c8:ae:3a:02:cf:6d:66:dd:1c:de:87:1c:76:c3:e5:1e:5e:
22:f0:23:91:aa:22:4c:80:2f:4a:b0:2b:41:81:d5:54:3e:57:
94:d2:1f:64:aa:58:a9:fd:0d:33:e4:68:36:fc:2d:3d:16:10:
e7:d6:a0:47:18:db:bc:e4:28:35:ce:19:2d:61:32:5e:f5:63:
77:3e:c8:27:06:ef:05:31:e5:08:1c:73:00:fe:1c:1d:80:75:
13:d8:54:ac:fa:70:d7:d7:a5:25:38:42:47:23:f7:55:bf:85:
3e:66:61:13:f5:13:8e:59:6e:a0:d1:23:19:71:3d:47:45:84:
12:0d:80:cf:de:07:e4:ef:81:70:bd:43:dc:00:7f:ab:a5:32:
86:df:27:a3:7a:46:57:3a:8d:09:24:21:e2:cc:d3:e6:4e:f5:
47:61:e4:c7:e0:5d:3c:77:75:d1:e7:e3:3b:e5:c4:37:36:fb:
01:97:ed:07:b1:99:9e:da:da:b0:8b:07:82:08:00:75:c4:3a:
b6:e5:cd:98:10:0a:c7:53:2b:55:1e:2d:78:b7:3a:43:d7:0c:
b7:54:d0:36:1b:bf:3c:f5:ad:7e:4b:ad:ce:3a:ec:53:5e:eb:
42:bb:a6:6c:f7:31:3a:49:34:65:32:d6:e3:cc:40:90:44:97:
fb:7a:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:07:47 2026 by rpki-client