This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json)
Hash identifier: Wwbg8ONr3S2bDtX6LbDQiCRnNWkf5/w9b4lqQWxZvVA=
Subject key identifier: 60:75:C3:A2:01:09:54:E3:19:77:EC:2D:87:AD:C9:1A:53:80:1C:F4
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 019C2DE3F7AD46C90438074544CA07EC1863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
Manifest number: 1826
Signing time: Thu 05 Feb 2026 13:00:40 +0000
Manifest this update: Thu 05 Feb 2026 13:00:40 +0000
Manifest next update: Fri 06 Feb 2026 13:00:40 +0000
Files and hashes: 1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=)
2: 6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa (hash: ICqX4miPSw4hNqiwS359s8cPNVPBnabE937wRzB8wpk=)
3: 8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa (hash: MKoSKmbzjgnjnmUvLVkK39DRQCucObPkWJahT1nu3A4=)
4: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: Po+5HTF0LL+80aMHtjsClbBjgz9874GgbY6LnnUy+Z8=)
5: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=)
6: NtCQkS0nRMyYmPXVVv3j4fbZU0o.roa (hash: HVZ4FPE3bmYJqr8Im2V21nkeAhROy8j6hqO0e4TzZJo=)
7: ZbEVlOlPibB1JH7syaSKIrTo-j4.roa (hash: 4uDEaVZMxo1TXHVXgG3ztPEE1OCkRAmIJn2VyL/FjAA=)
8: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=)
9: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=)
10: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=)
11: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=)
12: ceHX5930Yw-uMYDr-pQpJhg5-v8.roa (hash: Ca28wHc4zXYTAAEZqjDqcQtD0iK+HxJ4xEb2WB6NA28=)
13: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=)
14: kcNm9MftwygIL_w6w52JPJKUaI0.roa (hash: D4k4eoAWUtr1xeFULxBVV9pmUCuC2g1g0ZI86lEhCkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:e3:f7:ad:46:c9:04:38:07:45:44:ca:07:ec:18:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Feb 5 13:00:40 2026 GMT
Not After : Feb 6 13:00:40 2026 GMT
Subject: CN=6075c3a2010954e31977ec2d87adc91a53801cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:0d:d6:73:c1:96:1e:bb:05:ae:b2:fa:7e:
03:64:c9:70:0c:a8:8f:33:d6:79:38:6b:28:4a:72:
62:97:61:c4:ef:4f:1d:43:8d:da:6f:61:7b:a6:4f:
55:f5:7b:76:01:7c:e7:5b:cf:1f:ad:75:1c:3e:d3:
93:dd:68:a8:aa:6c:20:97:3f:5c:58:b4:d8:ba:32:
9f:20:c9:76:73:ea:a1:63:e6:7d:50:40:0c:57:70:
cb:f0:88:7f:b8:98:1f:5f:ce:46:9b:8f:82:ad:14:
d5:00:11:17:dd:d0:7d:cb:3b:ce:ba:67:23:67:ec:
f6:76:57:a0:4d:24:b5:e5:09:aa:4f:da:85:6b:3b:
11:8e:58:0a:7e:59:f9:9f:eb:ac:b0:21:ed:c1:f8:
a3:6c:61:30:6b:78:ae:b3:02:c5:d5:5e:1a:48:86:
eb:89:53:23:92:19:43:20:3f:f3:14:61:98:c0:6e:
0f:81:67:55:6f:7e:6f:59:47:ec:10:51:50:b5:f8:
42:b4:b9:12:4d:2c:09:2a:64:ae:5d:9d:70:b5:b9:
49:3c:82:5b:a7:85:a6:1d:b7:d1:94:dc:49:ea:31:
b1:e5:00:86:db:eb:af:48:5c:42:6c:8b:24:95:01:
38:c5:99:81:2c:85:88:40:9c:56:93:42:3d:fa:3d:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:75:C3:A2:01:09:54:E3:19:77:EC:2D:87:AD:C9:1A:53:80:1C:F4
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:33:3c:5a:ae:48:60:a7:d4:f9:c5:de:09:85:54:d0:35:
7f:0b:c9:a0:5a:61:df:84:e7:6a:41:67:b5:fd:9b:fe:74:75:
41:07:81:65:be:88:c7:b5:e3:96:1a:9a:e6:09:92:71:59:1c:
e2:da:f0:9d:c3:a8:f7:ac:bc:d7:fd:5a:c1:60:0c:56:63:c7:
e4:99:e2:e3:fe:62:6d:57:67:e4:06:a1:41:dd:3a:e2:3a:ff:
77:fa:24:14:8f:ec:17:5d:5f:30:b7:70:09:a6:22:95:6d:30:
4d:b5:a6:db:6c:aa:ee:f4:69:8a:b6:8b:79:e6:84:73:c4:3e:
2a:a6:e5:52:a6:08:da:9a:d5:63:57:bd:bb:0d:14:4e:c4:41:
6b:d1:1f:02:4f:a0:ae:47:3e:dd:ec:02:97:fc:73:4e:30:bd:
8a:d8:b3:57:d6:0a:77:8e:99:ea:c7:0d:ce:f7:b5:5a:cb:40:
c9:ee:3c:90:4a:1d:7d:99:3a:b2:af:99:1a:62:d2:ac:c0:07:
48:92:89:37:4e:b0:0a:e2:8f:69:41:d2:13:4c:61:d0:1c:c8:
49:50:27:23:68:f4:24:fd:87:14:01:2a:b9:25:e7:ec:a0:c6:
48:8d:18:dc:11:c7:b0:7c:c7:27:66:2c:a2:40:80:56:a2:68:
2d:ad:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 20:29:12 2026 by rpki-client