This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
File: 7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json)
Hash identifier: 34xtjmnYllSYDM+RAtZUbqg7i7dzKbSRUPVyRJPmCHM=
Subject key identifier: A2:DE:56:7A:D0:A0:3B:2A:B1:A4:E8:2A:9B:5F:80:33:1E:7E:85:D6
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Certificate issuer: /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial: 019BD8471EDC5EBA19EDE692AB33514787FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
Manifest number: 1237
Signing time: Mon 19 Jan 2026 22:01:38 +0000
Manifest this update: Mon 19 Jan 2026 22:01:38 +0000
Manifest next update: Tue 20 Jan 2026 22:01:38 +0000
Files and hashes: 1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: vw64VbTeXoqk8NRg04m4bInv1lFyuVNQsINCmY63/28=)
2: Swf3FFLXHYfQ6NVyQRwDIxCz49k.roa (hash: WjJASBXtMbMx6UjFd1CviKnEyJIaLn92uMYlDMFmvww=)
3: bmiicfROGlo9yf7zWdyA9ISaaIk.roa (hash: 1eggDeotMzuLMDhclZE88i2+/VDlsW1ydjGiJvLTfSk=)
4: lx-y9PtQp55g9e257pFIFA6PrMk.roa (hash: 3zWuaGtosieGRl8uoqyXPsU0RM4EJfQrxujvT6qUxD8=)
5: vOmtSoi-0VnTRfrdo0vo947Kkjo.roa (hash: YDH3N/wQDGDdiYRYpU2cCSEAou9IYJQNs0umXr6ibys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d8:47:1e:dc:5e:ba:19:ed:e6:92:ab:33:51:47:87:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Validity
Not Before: Jan 19 22:01:38 2026 GMT
Not After : Jan 20 22:01:38 2026 GMT
Subject: CN=a2de567ad0a03b2ab1a4e82a9b5f80331e7e85d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:d3:eb:f2:ad:bb:cd:5b:ed:94:b2:90:b3:
83:b9:44:b9:04:bc:d1:6c:57:b7:7c:3e:69:07:64:
6f:ce:be:5f:c5:b3:94:07:16:40:b1:f5:83:d9:c5:
ca:11:ad:81:70:8c:9b:1b:ee:fc:ef:62:fc:3b:19:
f6:b3:56:1c:8c:97:20:d2:83:9e:8d:e5:e1:b7:20:
d5:94:6e:05:f9:24:d1:78:a2:96:1e:6b:a7:84:5a:
ea:8b:1c:11:62:71:ef:d4:8f:a3:eb:2d:a9:40:19:
5c:62:f3:4c:79:7b:c5:6d:51:37:59:3a:a9:0e:7f:
7e:92:eb:71:3c:11:cd:22:cb:a3:db:a3:c0:6e:18:
1c:59:2f:9e:57:2e:0d:05:45:09:6e:7c:ac:29:62:
fc:7c:d8:a8:98:66:1d:84:d2:05:64:a7:ea:37:36:
2f:2a:ab:aa:ac:fb:86:37:45:a3:55:9a:b5:dd:72:
fe:3c:c7:04:d6:a6:3a:54:af:32:a9:3e:0a:7a:a4:
87:54:4d:d6:9a:3b:5d:3d:ef:62:fd:9a:a7:de:64:
03:94:03:eb:39:0d:2f:21:f5:f6:b2:53:5d:86:fc:
34:cd:b7:e1:c8:42:25:21:79:6d:47:53:cf:ef:bd:
4c:e6:10:79:f9:a5:d4:43:93:44:81:6a:9c:82:61:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DE:56:7A:D0:A0:3B:2A:B1:A4:E8:2A:9B:5F:80:33:1E:7E:85:D6
X509v3 Authority Key Identifier:
keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:eb:f2:f8:09:8b:b1:8e:0a:75:b6:03:01:21:6b:77:33:
63:96:21:4f:25:04:de:b3:1c:4e:a8:b1:6e:8c:2d:c9:95:c6:
4d:09:de:16:cf:34:d0:44:b3:9e:ea:ce:6a:50:57:4c:f1:4e:
3a:c5:c0:5a:17:87:f0:f3:40:fe:00:9a:0b:37:86:1d:0b:81:
ae:db:f5:0e:5a:83:08:22:c7:c1:d7:a6:17:6e:38:76:98:00:
75:e9:fb:24:33:e8:cd:a2:71:45:38:bd:51:df:d1:0c:c9:a7:
6f:b1:20:a8:a2:39:3a:60:7b:9b:6c:7b:ca:75:f1:5a:1b:29:
2c:4a:9a:7b:41:ad:e5:0c:eb:68:96:3b:b9:19:b7:a2:5a:3b:
06:c8:ab:82:cd:ea:5c:c5:39:3f:ff:cf:53:c7:26:c8:67:67:
ba:b5:e3:26:ac:63:df:20:5a:52:52:8a:10:87:42:46:6c:3b:
0e:5d:16:8a:7b:ed:61:cd:9d:a5:b8:31:66:d1:24:44:6b:9a:
94:7b:67:6c:9b:f6:c5:04:e8:97:a2:86:de:b9:65:4b:6f:3e:
74:4c:99:4e:68:94:e2:49:fd:d0:fe:73:db:85:84:b3:14:56:
bf:a9:49:19:17:6c:35:93:8b:dc:6d:a0:19:89:2e:54:7a:62:
88:9a:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:01:54 2026 by rpki-client