This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: ZA3wzQW3+W499CIu2JqD3QW/9viTJ0ItTgEVNIL8+LY=
Subject key identifier: 81:B3:99:EF:BA:3F:BD:C0:E9:8F:25:70:FB:C5:0B:1B:DD:A1:A9:BD
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 019BFA64FAA90D1E31CF74E4834AC0657ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 177C
Signing time: Mon 26 Jan 2026 13:01:20 +0000
Manifest this update: Mon 26 Jan 2026 13:01:20 +0000
Manifest next update: Tue 27 Jan 2026 13:01:20 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: Uxw7K4yIIynCEF0KtlsBJoHstUud8GCEhWLnGybiGSU=)
2: sZxrSzhn7wD6WFSw7UC6NwZuEFk.roa (hash: kEkaa7N2aenPpjJ1vqccMcmAKJMsk4dI56LBorB67HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:64:fa:a9:0d:1e:31:cf:74:e4:83:4a:c0:65:7a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Jan 26 13:01:20 2026 GMT
Not After : Jan 27 13:01:20 2026 GMT
Subject: CN=81b399efba3fbdc0e98f2570fbc50b1bdda1a9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:a7:3a:56:77:c7:25:23:ec:48:a4:49:b9:
d4:ef:3d:f2:03:de:59:e8:ef:c3:f4:8f:db:a4:05:
06:26:25:e0:bb:e0:5f:e8:d8:b9:36:d7:57:d5:3d:
c6:e7:95:bc:ca:6e:37:ca:4d:df:01:3d:4c:2e:40:
4a:7e:43:a7:e3:ca:7c:18:ae:e8:78:ab:7d:0b:0c:
b8:35:dd:33:d7:0a:69:9d:fd:6c:86:96:95:13:61:
22:d0:00:b5:5b:3e:db:c9:a5:1d:7e:84:6c:6e:fc:
26:45:0f:95:42:ef:1e:45:9a:59:ee:38:31:40:4f:
27:0a:74:77:d2:eb:d0:cb:0a:25:93:80:26:49:ef:
8b:93:10:d4:3a:e8:28:d7:ac:93:7c:05:ec:c7:66:
89:13:06:1a:c5:7c:cd:18:6a:4c:98:5d:b0:e6:a1:
5f:fd:32:ea:17:7a:15:28:0a:33:f7:ae:d4:91:31:
8e:01:7a:65:9c:1f:f5:d0:c5:19:b9:fe:ee:f9:3c:
35:0d:42:e1:53:2a:bb:e9:50:a3:0a:cf:b8:91:c3:
53:3b:7e:4e:54:1b:16:23:b2:b4:02:e9:dc:09:67:
44:17:1b:d8:71:fe:ae:f5:6c:81:95:ec:8f:0b:1f:
eb:5b:d4:1c:7d:85:8c:c2:48:82:4d:e0:b4:ba:9d:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B3:99:EF:BA:3F:BD:C0:E9:8F:25:70:FB:C5:0B:1B:DD:A1:A9:BD
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:44:50:2c:87:21:70:4f:6b:fd:33:39:52:26:2d:10:5a:27:
54:7c:f8:9f:14:37:ae:ab:2f:ba:06:7e:64:76:5d:6c:01:e6:
30:c0:a9:bb:4a:ac:58:9e:a7:67:5c:89:2f:35:c5:c4:4b:6f:
8c:35:07:52:1b:9d:8d:c5:6d:47:e6:30:98:80:27:ad:4b:77:
f9:11:65:d8:3d:90:74:3c:78:e9:4b:5f:d7:1e:5b:2b:62:68:
b9:61:ab:10:74:e0:9c:58:45:26:6c:89:3b:72:21:7b:b1:e5:
ea:d7:71:7c:e7:15:c1:fc:e4:18:f8:7e:73:d1:5d:89:9f:16:
1a:06:0e:d8:03:a3:d2:e0:48:d0:65:a8:40:2e:f5:69:5e:fb:
4d:15:11:5a:f1:44:b2:76:dc:d6:bb:03:bd:10:6c:77:f8:66:
03:6f:6b:9b:a1:96:87:93:93:5e:48:23:b7:1c:2e:d6:2f:0b:
89:94:77:07:86:48:32:48:34:8e:8d:be:1c:02:a8:46:70:41:
60:57:71:cd:aa:04:94:b2:de:c9:f8:90:0b:6e:3d:e1:1c:9e:
40:5f:00:05:e6:33:6c:be:04:e3:61:42:42:1a:f0:f1:4c:f2:
21:61:62:47:60:33:d6:cd:a3:1f:10:c4:b7:af:e3:91:95:5c:
87:47:52:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:08:39 2026 by rpki-client