This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
File: iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json)
Hash identifier: mAQXxP0y3IsPTnpKslVEvq5QysRQxtyRXWRyyJPOM+Q=
Subject key identifier: 18:EC:0B:55:C1:80:B0:B0:2F:98:6D:B0:3F:C4:88:DD:74:42:23:29
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 019BFC8A548E7433997E1FA17C0FFEF5CA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
Manifest number: 0DDD
Signing time: Mon 26 Jan 2026 23:01:22 +0000
Manifest this update: Mon 26 Jan 2026 23:01:22 +0000
Manifest next update: Tue 27 Jan 2026 23:01:22 +0000
Files and hashes: 1: MPdIoBhSamsoceGH97ZrbeY-7Y4.roa (hash: xk+VO+lT2ZL0Nzt8GYWzkONFJ8wXFr2d45kNV/RsFNQ=)
2: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: Soq3t2UVfSq0dA3FrcKKyjfeHbRyf4ojzVxJ+p0SQKs=)
3: lYJDRXWPAACOBIGtN5SoMpmELk8.roa (hash: +/i7PrD75ms6DLzi7NKAcmr/vu2swer4LejKpfAFxnA=)
4: uUrDuBilHzuoCgA80rJqPJxqSNQ.roa (hash: 77BWKMeC9pAnIWkDSdffjc6huYPIszzufpj7ouuEVAY=)
5: vl57Hdk_U8b9_Y2PxCQcURRvrQw.roa (hash: LDklYITUv8QycRGMLTw4zqVIBgqTAfoD6STDQphVOWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:8a:54:8e:74:33:99:7e:1f:a1:7c:0f:fe:f5:ca:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Jan 26 23:01:22 2026 GMT
Not After : Jan 27 23:01:22 2026 GMT
Subject: CN=18ec0b55c180b0b02f986db03fc488dd74422329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:4e:47:74:02:40:94:91:c3:f8:a6:ed:c3:
a4:c2:8f:10:4d:f2:b6:99:51:b5:06:04:81:e8:28:
63:cc:f6:2f:de:38:11:d0:f5:63:51:e8:8a:d0:0c:
dd:6f:61:11:d7:98:8f:5f:23:17:53:a0:95:28:a6:
a4:f8:6d:6f:de:ad:cf:8b:ff:4e:e0:cd:ae:4f:ec:
36:38:58:00:56:8f:d7:03:90:b4:3d:ed:2f:4e:07:
80:7c:37:44:6d:4d:d3:a3:17:3d:85:7f:89:23:ad:
b7:6f:c8:09:74:08:cd:6c:d6:3a:27:01:50:57:3a:
23:b5:17:85:22:36:03:c8:29:5a:be:68:56:ed:fa:
a4:d0:9d:75:87:01:6f:99:77:9f:29:ee:bd:57:60:
19:b1:bd:f6:30:af:16:46:d5:dd:3f:40:3d:09:f3:
c0:80:da:7a:a8:f2:fd:a7:e9:fd:6f:20:79:dc:ea:
cc:f4:10:13:99:ef:e2:d5:66:2d:f8:d7:89:ed:50:
78:79:3f:fe:b0:2e:88:a5:66:03:13:30:e8:e4:08:
1c:37:cc:61:a2:15:18:db:82:d3:3a:2d:ca:28:34:
fc:64:a1:8d:99:e9:f6:a9:03:3e:07:61:87:66:86:
61:c4:30:a4:78:56:4b:6d:c7:04:d2:fd:32:be:90:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EC:0B:55:C1:80:B0:B0:2F:98:6D:B0:3F:C4:88:DD:74:42:23:29
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4c:53:83:75:fd:37:55:c8:63:96:3d:07:3d:fe:65:b3:1e:
54:9c:e0:14:aa:42:e1:4a:a6:7b:d4:48:66:28:f6:f6:8c:98:
7c:65:40:e8:3c:39:f5:84:06:cb:77:ca:92:ec:98:4f:18:6f:
e9:35:2b:28:12:cb:db:14:81:aa:0f:2a:42:61:77:cc:54:d9:
87:20:ed:eb:99:35:b2:dc:91:40:83:e9:17:19:b7:7d:5a:88:
3f:54:49:f3:b8:6f:d0:8b:48:9c:30:3c:40:eb:49:4e:3b:f7:
19:8b:76:22:8b:3f:81:62:88:53:36:8b:c4:33:ff:58:3e:56:
af:3a:fe:ca:37:2c:ed:1a:a5:fb:a9:88:1d:7c:0f:7c:7b:3f:
02:f5:fe:23:08:7a:45:fe:45:55:94:96:91:6f:1f:b5:db:ab:
bb:8f:56:a6:84:f1:fc:e8:83:f3:5f:61:4a:56:0a:89:f6:88:
dc:5d:5f:25:10:c7:e7:48:34:35:b7:d1:ef:76:90:2e:45:6f:
db:c6:c0:3e:e1:64:e7:2c:9d:48:69:91:1a:3c:52:37:44:07:
9d:e9:ec:16:59:a3:b9:b0:2f:1c:5c:d7:1d:fc:74:9c:e2:42:
31:de:fb:98:d5:60:35:d8:ea:39:09:79:30:3f:48:4a:9e:21:
8c:30:2d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:07:22 2026 by rpki-client