This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: 3B1LGTWFW8epyJfSkMpnZS1hwq8YmRgucDyQIrcOHFQ=
Subject key identifier: 10:1D:B6:CF:90:B7:38:38:E4:E0:3C:B6:B4:8F:FF:2F:97:82:99:A7
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019B9742D9F0F0CAAA2171FE1FBFA12A51A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0BD7
Signing time: Wed 07 Jan 2026 07:01:39 +0000
Manifest this update: Wed 07 Jan 2026 07:01:39 +0000
Manifest next update: Thu 08 Jan 2026 07:01:39 +0000
Files and hashes: 1: 76LeK86AqDsw2hffaY83VrGgD0k.roa (hash: Cn1T0+QUKezjiIEXV7hXPpBfITvOtpQGGUudGUMuCmQ=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: tJXIvO9CYVh+rmpXcNe7pQWVsZAo95xOJj5iGD8EBDY=)
3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
4: IcfiGiHhm-UnVbVbGBC_RtFqnfM.roa (hash: FGxn4dZpz1k+FXowXOdQoq7CmlfSlmu0geRbED6pnGQ=)
5: MWiV7graQLeuw4AYgJ4ZHIBAuZE.roa (hash: 5UScMx33ea6UI1n+yqJ+oTPgZkvCg216H08oUJCNoCY=)
6: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=)
7: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
8: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:97:42:d9:f0:f0:ca:aa:21:71:fe:1f:bf:a1:2a:51:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jan 7 07:01:39 2026 GMT
Not After : Jan 8 07:01:39 2026 GMT
Subject: CN=101db6cf90b73838e4e03cb6b48fff2f978299a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:63:da:04:b6:11:d4:0e:51:28:25:56:0c:
16:ba:e4:5d:d5:14:95:55:99:6c:31:bd:1d:b7:9e:
41:5f:64:d7:28:5d:68:e6:bb:53:53:31:67:9d:19:
6b:3e:6a:1f:86:9e:b2:53:a6:a2:e8:e1:96:f0:ec:
60:68:60:18:00:f2:a2:b5:f5:7b:cc:ca:42:e4:cf:
47:bd:cd:99:10:33:71:46:19:e4:28:d3:31:33:83:
8b:0f:31:b9:47:82:b8:ce:07:67:0b:2c:96:30:d3:
73:6c:0a:d7:e6:fa:b1:8f:f9:6d:29:7d:7e:b7:db:
12:78:7a:03:57:a7:71:a1:5b:40:aa:9f:1d:6c:00:
9f:66:90:26:32:3b:e8:ae:8e:d2:96:7c:17:09:76:
25:21:7c:a3:93:e5:c6:d0:70:ef:c2:c5:6f:19:7b:
42:89:56:63:20:1d:d7:43:10:31:38:a5:75:d6:a8:
d8:37:cb:49:a8:9c:7b:30:44:c7:7e:5a:c6:f4:ea:
9f:c8:c2:e1:71:57:89:ea:53:3e:97:52:6c:84:de:
b7:76:af:07:12:56:c9:f5:aa:81:db:50:ea:f3:5e:
e4:51:b4:d2:dd:d8:ae:8e:b1:19:be:ee:9f:22:23:
35:96:02:ab:51:a2:30:e0:ff:6a:d0:a8:63:f7:d8:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1D:B6:CF:90:B7:38:38:E4:E0:3C:B6:B4:8F:FF:2F:97:82:99:A7
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3d:c7:1a:10:92:5b:af:50:b4:3d:25:4c:ca:e1:38:cc:24:
89:da:87:aa:1e:d4:98:e2:f5:84:12:a4:89:35:d6:b8:07:82:
f7:d6:7f:44:9f:f2:3b:e4:bb:d2:33:ac:51:65:86:84:8a:1e:
83:36:ba:20:cc:c2:ed:a5:6b:27:e4:47:ff:5b:62:e8:d3:b1:
72:16:0f:d6:b3:35:79:f0:49:4d:f3:e1:eb:14:2b:7a:05:e7:
d4:3d:9f:5b:ed:a5:b4:fb:e4:21:5b:cd:7e:cc:9f:e5:f7:4e:
37:72:5f:d0:14:d6:25:57:19:ce:6d:1e:53:5d:d2:9c:e0:80:
19:82:04:b2:6a:1b:01:6f:fb:bd:4e:52:51:2f:50:68:2d:3f:
21:04:1a:de:8c:ce:cd:f2:ae:4d:8b:49:fe:9f:28:50:8f:98:
82:74:95:13:64:f1:ab:40:e6:9a:38:c5:da:5b:59:45:2e:87:
ef:e8:21:83:d6:b0:50:48:8e:19:77:6e:57:1f:76:1d:f2:8f:
b9:f2:85:4c:ec:85:85:64:ed:a2:a0:e1:ac:41:50:af:f2:e2:
f6:46:4f:55:cd:22:3c:44:a4:86:11:7b:0a:d6:6e:0f:a9:ef:
24:96:79:3e:61:ec:fb:ff:e6:6f:80:e1:46:d1:9a:a6:f2:80:
af:8b:e5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 11:18:46 2026 by rpki-client