This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: B5YkEYrmHokEqgGNnPfS4+KbmdutCiNAb2sIuZblRXA=
Subject key identifier: A6:F3:67:F0:CF:8E:D3:27:A1:0D:D5:07:51:F5:C6:CB:CC:8F:AB:88
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 019BD733A396C1683C2AA26261BE38C7EBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 14B8
Signing time: Mon 19 Jan 2026 17:00:43 +0000
Manifest this update: Mon 19 Jan 2026 17:00:43 +0000
Manifest next update: Tue 20 Jan 2026 17:00:43 +0000
Files and hashes: 1: 1-1OC6LmWlkhKJ9j7O2V8uHCIeLQ.roa (hash: pObdATG8V/x1kQuTr2uqeIMaWJhyU9KZK2VfEs01ILg=)
2: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: Ms2CQpVo/sIVJHjEHIcXpkHzE8YO6HTVh0yJ2KpJoi4=)
3: 8Q0plViYhTMAKVQAAXl5nNj-BBI.roa (hash: Fg0eMhaPWp57qj9BoW/Q3H9dkIdZE5CHVzhDBBdEeZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d7:33:a3:96:c1:68:3c:2a:a2:62:61:be:38:c7:eb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Jan 19 17:00:43 2026 GMT
Not After : Jan 20 17:00:43 2026 GMT
Subject: CN=a6f367f0cf8ed327a10dd50751f5c6cbcc8fab88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:3e:6f:ef:57:21:e0:49:05:e3:9e:c3:32:
b6:45:3d:13:4c:50:28:9c:e3:d7:07:7c:21:22:f8:
47:51:8c:ee:cd:42:49:04:3e:f1:c3:f3:c2:84:12:
c4:8b:c1:2b:9f:a2:2f:7a:ed:ac:d5:00:78:cc:45:
53:ab:3d:7a:4e:f3:30:2e:bb:7c:31:8a:3e:17:64:
71:86:f6:ac:ad:12:00:44:64:24:38:d9:92:7e:f2:
00:2d:1f:b6:ae:b0:a0:41:51:a1:62:fb:85:35:bc:
02:33:73:8a:76:02:d3:cd:02:2a:2e:58:29:79:20:
55:87:cb:8b:e4:92:3d:07:dc:0d:ee:56:ac:3a:de:
b7:81:eb:9b:b2:26:49:3a:17:0e:89:91:32:7a:6b:
f1:2f:15:77:3b:59:0c:71:28:ed:53:ae:36:91:43:
46:9e:e0:21:57:d7:19:36:5c:12:9a:14:70:59:fe:
35:0b:52:d7:a3:0e:19:b2:27:ab:54:ed:19:a2:b5:
e0:2e:a2:d2:aa:71:27:ff:11:93:a5:e0:4f:e8:6f:
c1:97:1c:c8:c7:16:7b:f1:15:d0:d5:6f:79:5c:9a:
d3:21:99:6e:2c:a8:cd:7b:bf:96:fe:9d:5a:a2:20:
90:2b:91:d7:a8:bb:86:39:0b:7a:ea:39:48:76:14:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F3:67:F0:CF:8E:D3:27:A1:0D:D5:07:51:F5:C6:CB:CC:8F:AB:88
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:83:44:45:53:62:b9:3b:8b:1b:e2:94:74:4f:32:b7:56:55:
8d:33:1d:76:bd:87:6a:cb:7f:e4:ce:c4:52:f8:1c:a0:17:7c:
95:f0:a6:94:64:91:ab:68:97:96:c2:be:a0:89:0d:3d:1a:c0:
43:8e:0e:0a:1d:c8:b0:11:b2:a3:37:6b:c4:75:fc:5a:3b:e7:
ad:6a:f9:d9:83:83:ed:d3:5a:bf:58:bb:17:b9:68:76:08:0a:
07:8b:88:e7:11:1c:ef:32:dd:69:29:2d:06:a1:3f:f0:b1:0a:
9b:29:b0:b9:6b:1e:82:98:cb:69:63:72:71:19:f2:19:ea:b8:
1c:c7:83:3c:41:4a:9f:66:e1:40:1b:e4:e4:31:e2:79:6f:d5:
17:53:de:a6:41:66:4b:e7:ce:4e:9f:b9:c9:e0:bc:bb:7d:66:
67:07:0d:35:dc:5d:02:54:4b:97:c5:1f:f4:e2:dc:3f:35:a4:
64:e1:71:d7:45:01:00:ec:7b:24:3b:89:0a:1a:4e:01:0a:70:
a7:d0:ce:df:4f:d8:32:75:93:2e:23:3d:42:ed:5c:4f:7e:37:
69:e0:98:35:d2:3f:bf:d2:12:47:b9:fa:35:08:09:57:78:e3:
8f:da:34:07:2d:8e:af:d3:c2:a6:42:30:31:a7:82:a8:15:cc:
f5:0e:52:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:00:54 2026 by rpki-client