This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier: ufD7y8psoHanXN1Uhfn2fcqP+iyfse7j2m6nDXkMbLM=
Subject key identifier: 75:89:FF:84:01:2F:DC:E9:9F:D5:70:74:3B:FF:F5:5A:C0:D5:AC:B1
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial: 019BFA9C4C3C024517E54232306FE9B2EB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number: 07EC
Signing time: Mon 26 Jan 2026 14:01:45 +0000
Manifest this update: Mon 26 Jan 2026 14:01:45 +0000
Manifest next update: Tue 27 Jan 2026 14:01:45 +0000
Files and hashes: 1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: Kh7yACuXhaW0mAaaEZlMaPtnb4J8IMQpbmB+aC/3zbg=)
2: om31b6FWDBGxEuwor71QHsugvxY.roa (hash: nmUcpfkGCJ2B9JhtJKk02OVz3WisKOfii97PhUxXZVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 14:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:9c:4c:3c:02:45:17:e5:42:32:30:6f:e9:b2:eb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Validity
Not Before: Jan 26 14:01:45 2026 GMT
Not After : Jan 27 14:01:45 2026 GMT
Subject: CN=7589ff84012fdce99fd570743bfff55ac0d5acb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0e:65:d0:e9:99:86:ca:8e:22:c9:29:9e:54:
bb:b0:28:75:04:5e:f3:bc:55:4f:aa:54:a4:25:00:
4b:1a:57:5f:6d:ce:40:38:81:22:2e:b9:bc:ae:c0:
6b:69:8c:f4:b7:7b:23:f5:de:13:8c:50:d1:53:f7:
3f:0a:6c:d0:c5:8b:79:eb:80:89:f8:b8:20:f9:03:
32:b2:ae:a8:31:a7:42:9b:42:74:1a:cb:35:66:54:
7e:fe:87:97:97:4e:ca:8e:03:31:2d:5b:ed:bd:ad:
f1:95:b3:74:d0:56:61:83:8d:fe:fb:c7:06:9c:57:
e5:0e:33:9a:d8:ec:39:ed:36:a3:da:7c:12:cd:4e:
b5:5c:a3:d1:f5:42:34:d7:0d:14:a7:f1:bd:d8:05:
96:d5:20:ae:a7:6d:b1:2b:99:d6:58:55:8c:21:20:
25:1d:2a:9d:4b:59:59:cb:61:49:04:2f:bf:e0:01:
2d:ff:b1:d2:de:b7:60:33:31:e2:91:3c:fc:d6:78:
01:76:83:87:92:d6:a5:38:5c:5f:c8:b9:18:af:70:
1d:22:7c:4e:a9:ac:47:06:98:13:6f:28:22:e0:3b:
1e:22:ba:5b:1a:c9:a3:e7:47:cd:65:04:e2:02:54:
6d:ce:93:40:27:03:20:ab:dc:4f:82:24:b5:6b:c4:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:89:FF:84:01:2F:DC:E9:9F:D5:70:74:3B:FF:F5:5A:C0:D5:AC:B1
X509v3 Authority Key Identifier:
keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:60:2e:b5:6c:47:ce:b9:e6:e9:71:66:42:37:d4:be:2b:cb:
e0:21:e6:cd:3e:b9:16:0e:a4:ce:15:85:26:75:0d:79:83:36:
db:c0:5d:31:a3:89:22:7e:a3:3b:9b:6e:d6:bb:c4:1f:ef:1a:
63:94:c9:28:a3:99:de:15:3d:92:e5:36:27:e6:93:f8:11:4a:
6d:90:89:bb:99:4e:c2:e4:6b:e1:dd:93:68:b5:55:bb:35:95:
62:71:bf:c2:08:80:3f:6b:1f:4d:3d:72:9d:00:49:36:fb:55:
f0:21:23:74:fe:08:c3:66:89:7e:21:d3:64:c5:ff:a7:00:89:
0f:cd:82:64:40:24:37:95:9e:d7:b6:70:80:3a:e7:df:ca:f1:
3b:ce:4a:fa:67:dd:38:44:ae:cc:a9:5a:c0:85:ca:21:d9:84:
c1:a2:03:90:e3:24:57:f1:65:4b:c6:45:76:31:e0:d9:d1:0d:
37:cc:e3:26:71:a5:b9:57:2d:e8:3a:6a:24:d5:22:c5:a6:00:
a1:ee:f2:42:8c:ca:0d:fd:a9:6b:be:a1:b1:4b:f8:60:d7:42:
99:7f:93:a6:5c:fe:94:60:4a:02:27:b6:12:e0:8e:6d:0a:12:
dc:3b:01:10:3c:8c:46:79:e0:4a:ee:eb:35:bd:c4:f5:c0:a7:
7c:f0:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:29:52 2026 by rpki-client