This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json)
Hash identifier: tQalmwW0fQg+3RsaSpI5DPkpsmARrM+dWsqse2KgBoA=
Subject key identifier: D6:D0:7F:DD:3F:B8:9C:1A:01:D1:72:3E:A7:F8:1E:E8:AB:4D:A3:73
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 019BFA2E52923C1D4F7D947782CF44E3D60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
Manifest number: 17FB
Signing time: Mon 26 Jan 2026 12:01:38 +0000
Manifest this update: Mon 26 Jan 2026 12:01:38 +0000
Manifest next update: Tue 27 Jan 2026 12:01:38 +0000
Files and hashes: 1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=)
2: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=)
3: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=)
4: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=)
5: FGXifY4YNXSWwZi4QtD01XX8A_4.roa (hash: r3Yn9lbI97BgnohED52RZmDaF/H4yGegwCsX0vScc1U=)
6: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=)
7: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=)
8: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=)
9: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=)
10: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=)
11: fgRbMqN9XRQOyHROi59mKV56wUg.roa (hash: Py8QfC6Me9kljX65ogBUdQo8JbMweZ02w9NGup3yJr4=)
12: iENkRlJoBL-J_o4ep2L2WQ9wqhQ.roa (hash: qHRlnH6xTrPGrh7Rcfy15Z1OzJA8rkrqC8qbXcCLhY0=)
13: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=)
14: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=)
15: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: rFpGrZKERHw/kvTwbn9NrWxNWQUb8w5NyN9mbuc1Y9I=)
16: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:2e:52:92:3c:1d:4f:7d:94:77:82:cf:44:e3:d6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jan 26 12:01:38 2026 GMT
Not After : Jan 27 12:01:38 2026 GMT
Subject: CN=d6d07fdd3fb89c1a01d1723ea7f81ee8ab4da373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:4c:63:ca:dd:11:4e:df:32:49:45:6b:ed:
81:5d:d9:c6:5b:21:30:2e:6e:2a:68:59:e8:0f:54:
ab:48:3e:89:cc:df:e0:61:f1:ac:bb:1f:d4:5a:e8:
f3:e5:74:00:ae:69:1e:64:f4:8a:9f:b2:47:67:e3:
d8:e2:7c:96:e5:fb:d7:a5:02:be:4c:09:56:25:b0:
f4:24:76:e8:6c:0f:a6:ad:72:6c:48:f3:15:aa:df:
6a:cd:1c:da:59:6d:ea:fd:d0:a7:17:5e:ab:d3:81:
1c:1e:91:6a:20:89:f0:59:4c:12:b0:c9:94:09:dd:
a5:18:10:03:4d:07:b3:37:09:5e:42:3b:79:75:94:
87:70:d2:2a:08:d1:fa:b1:6d:57:62:5d:bf:bf:44:
f8:60:78:61:1d:c8:f3:c0:e5:f0:da:ce:0c:4e:37:
f7:49:83:75:d9:5e:a2:d2:f8:30:e9:56:ce:7d:f9:
12:44:3e:59:fa:42:47:38:a2:d4:53:13:1b:ee:6e:
e5:da:97:be:c6:e4:0f:44:73:3b:e6:c6:fb:67:8f:
74:9f:bd:97:de:41:10:66:b2:8c:78:ed:43:a2:0b:
82:6b:aa:1e:5b:18:f8:d6:07:91:d4:79:1a:69:db:
ec:33:5a:90:97:2e:33:3b:a4:05:cf:65:30:8c:b2:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D0:7F:DD:3F:B8:9C:1A:01:D1:72:3E:A7:F8:1E:E8:AB:4D:A3:73
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:29:6c:74:c7:d9:6d:44:fb:f1:56:c0:b0:d1:ec:0d:61:80:
3c:8e:cd:67:17:e5:7c:29:85:45:d5:65:a4:69:16:2b:bc:41:
7b:5f:f1:70:07:5c:ff:e1:3c:ad:5a:cc:f9:4a:62:d2:09:18:
98:97:d4:2b:c3:1a:6f:f5:1d:7a:2d:32:97:ae:30:97:38:b7:
b6:ac:6d:29:54:ba:2b:b2:c7:00:7d:27:96:9f:4f:2b:ce:d5:
31:97:40:f1:bf:93:5e:c7:f7:34:03:f4:ef:91:a7:76:f9:95:
78:58:87:76:08:99:a2:1e:54:ed:a4:11:81:ed:bb:8c:33:1f:
73:d8:09:8e:6d:88:97:dd:5f:a7:70:4d:bc:3a:0f:70:be:81:
c6:4a:3b:9a:a2:43:05:de:15:7d:5a:9f:78:b7:1f:43:2e:1a:
ee:6d:40:70:48:db:15:cb:ac:e2:06:ef:7b:7f:e3:1b:a7:4e:
cb:60:5c:7a:6e:63:84:24:20:a1:01:52:bd:d7:94:ea:ac:4d:
14:27:e9:ac:03:85:9b:25:30:cd:74:cb:52:30:e2:0a:fd:58:
51:f8:ec:13:88:36:9d:22:1c:2c:c3:2e:b8:2a:cc:b4:92:8d:
83:13:4c:f8:02:dc:8c:f5:d6:83:53:80:7e:50:9f:79:dc:44:
4b:7a:f2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:27:08 2026 by rpki-client