This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier: DBjadWGHaVvmdbiNMHB7UDXhyRqlwvCbD2TO8YILcLM=
Subject key identifier: 69:7F:68:04:51:1B:F5:F5:E5:4F:A9:AE:C5:7E:67:25:40:39:EE:AB
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 019BAF4B6368FAEE01EA645900B5C7784B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number: 17DE
Signing time: Sun 11 Jan 2026 23:01:51 +0000
Manifest this update: Sun 11 Jan 2026 23:01:51 +0000
Manifest next update: Mon 12 Jan 2026 23:01:51 +0000
Files and hashes: 1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=)
2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=)
3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: WfehlalhQZ/oj7T52aQnouUietacyWgtDG32FDfR7Co=)
4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:af:4b:63:68:fa:ee:01:ea:64:59:00:b5:c7:78:4b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 11 23:01:51 2026 GMT
Not After : Jan 12 23:01:51 2026 GMT
Subject: CN=697f6804511bf5f5e54fa9aec57e67254039eeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:b7:e9:6d:95:a3:47:6f:9e:5b:df:42:75:
ed:fe:a7:4c:cb:2b:af:ca:eb:f9:99:02:d5:af:19:
ac:0a:6f:42:f4:8c:98:67:48:5f:bd:56:c5:a7:5f:
52:1d:c6:e4:a5:38:ea:43:ca:7a:b7:c8:91:1a:e8:
8e:46:72:54:04:eb:97:b5:d8:78:3c:b8:d9:4f:de:
a9:3d:40:1a:4f:4a:ca:05:b6:b7:e5:6a:90:46:e2:
65:8e:10:b2:66:4a:43:db:ab:26:e8:4a:ca:e7:44:
8f:eb:6f:e4:14:5d:3d:1d:56:96:f0:c3:d5:8c:c9:
49:8b:84:a8:7f:38:43:f8:07:3a:59:b1:e0:bb:97:
2d:77:f7:fc:c8:ab:29:30:40:7c:4a:c3:77:90:27:
24:54:09:8f:28:8f:cc:61:32:d5:76:a0:db:64:93:
1e:b5:44:74:22:cc:65:37:cb:c9:0f:13:46:d6:10:
01:8b:02:42:0c:f7:92:38:d5:a8:60:90:06:c4:73:
55:99:41:e1:78:c1:69:2c:e9:64:92:46:bd:b4:5d:
06:2a:ea:49:72:87:99:a8:bf:32:f6:aa:29:8e:8f:
af:1e:fa:66:ae:a8:ca:b2:db:86:a1:37:62:f4:cd:
20:13:83:9b:bd:84:05:ab:cb:79:58:43:10:44:ed:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7F:68:04:51:1B:F5:F5:E5:4F:A9:AE:C5:7E:67:25:40:39:EE:AB
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e8:ed:53:ad:4d:ff:5e:aa:a4:6c:10:f1:55:2d:a1:57:16:
0f:8d:87:cc:bd:c0:ad:29:57:60:57:07:5f:fb:81:89:16:b3:
33:ee:75:13:b0:fa:34:08:4a:38:5e:93:46:d2:a1:d9:ac:6f:
4c:e6:2e:40:72:69:ce:42:7b:30:be:3c:1d:ee:e6:43:52:aa:
92:1a:06:9c:c9:60:93:25:fa:61:89:ea:80:3e:55:93:7a:53:
ec:d4:15:3b:a7:60:63:30:8e:90:69:ea:99:d4:1d:e1:90:0d:
16:cb:53:30:b1:e4:f5:e5:60:a1:ef:e8:a5:bc:ec:e2:d3:e2:
be:cf:1a:a6:a9:b7:2e:8f:2d:38:cb:b0:95:57:2a:0c:2b:06:
37:f7:d7:81:91:af:f1:c6:5e:38:33:e6:73:2e:d0:bc:d1:80:
78:e2:fa:9a:c0:e0:91:c3:ff:7c:84:80:93:82:55:0c:fe:01:
3a:39:55:0d:f8:47:ae:29:e7:1f:96:de:73:58:1e:6c:3c:31:
e0:2b:06:b9:13:12:93:93:5b:ae:32:f1:f5:5a:a7:f7:9e:02:
d8:52:0b:30:23:96:c1:9e:5e:df:2b:8c:64:64:1e:a5:54:e0:
85:90:6c:ed:de:9e:28:67:47:a0:40:71:0b:9f:24:f0:1a:d3:
8c:6e:bb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:13:07 2026 by rpki-client