This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: HSmEB4bTuEmFTLFEwgs7r+lO4TgWzpfQYRDeEL25aCY=
Subject key identifier: 82:22:9A:98:1F:D0:BA:C3:97:F7:C4:3D:7D:DE:0A:E2:59:DC:72:EF
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 019BA9ED7348B5A842CAD26129F6FDFA8CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 102A
Signing time: Sat 10 Jan 2026 22:01:09 +0000
Manifest this update: Sat 10 Jan 2026 22:01:09 +0000
Manifest next update: Sun 11 Jan 2026 22:01:09 +0000
Files and hashes: 1: MZaOI67AYigbpIsWpWqOKyUB95k.roa (hash: 28l2earsozG7gOJ16ktFFzzWVz+qyy71L+Rc+YVMUeI=)
2: VWwoGO2sGQjK21cMFf3XwlF6U0E.roa (hash: G+mIqYh3iGFVL9m6/VUywuW90iG64GkP4wAw6JgPgy4=)
3: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: 3bTArDCOyN7Z7QRPqDAi37SfVA70sDm12uBHtUlSmKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Jan 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a9:ed:73:48:b5:a8:42:ca:d2:61:29:f6:fd:fa:8c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Jan 10 22:01:09 2026 GMT
Not After : Jan 11 22:01:09 2026 GMT
Subject: CN=82229a981fd0bac397f7c43d7dde0ae259dc72ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:92:f8:a7:57:0d:cf:95:66:5b:3f:0a:64:ec:
3d:fd:59:90:5c:3c:48:0e:bb:c2:f2:28:b4:fc:4e:
61:a3:1b:15:77:e1:a5:08:28:56:3f:98:00:c5:e4:
dd:07:8a:7b:5f:db:52:07:33:e2:f2:44:dc:4e:90:
27:02:b5:7e:87:50:b0:74:fa:c5:2a:6f:82:73:04:
e1:96:be:2b:03:64:ae:c5:4d:c8:24:d6:91:1f:a3:
b4:71:6f:ed:c0:54:ed:f1:f3:7c:6c:a5:91:b3:8a:
58:e4:6f:33:21:03:98:00:cc:f6:ea:8d:c7:54:47:
7c:62:23:cb:83:22:12:c5:66:64:6a:5c:60:9f:55:
ff:18:aa:a1:4b:78:95:f3:3f:66:ba:32:1c:db:9a:
85:ef:a3:48:c8:95:bc:e6:35:57:e4:62:ef:78:fa:
c0:84:f9:64:ef:27:5d:7e:2e:27:d4:96:4e:f5:0c:
1b:8e:69:0e:b0:a3:20:99:f5:2c:68:a2:8c:72:ff:
7d:07:c9:6f:36:97:a4:3c:ae:ed:66:c7:8f:7c:1c:
a4:ba:06:0d:8a:c4:be:b0:da:9c:7b:84:cb:79:d6:
a2:6e:91:be:f7:11:5a:a3:49:71:0e:6b:e1:ca:1b:
d8:6f:d2:67:3b:f1:d7:6c:05:8f:e1:a2:86:b6:f8:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:22:9A:98:1F:D0:BA:C3:97:F7:C4:3D:7D:DE:0A:E2:59:DC:72:EF
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0c:8a:49:4a:70:84:84:3b:1c:51:f6:70:0d:51:76:7b:5a:
4d:6c:7f:5f:79:a7:17:b6:e5:e0:ab:5d:0b:9d:4a:1b:18:34:
17:c4:12:01:44:01:4f:a6:8a:be:52:45:fe:c1:cc:e9:21:dc:
10:6a:5e:ba:ab:db:b3:29:60:dd:74:76:35:d9:c1:df:c2:d3:
7a:fa:b6:3c:ee:a9:6a:60:8c:bc:98:57:fb:30:21:e6:40:54:
bd:b3:46:89:bb:fd:11:11:69:a4:ff:fb:d8:2d:4a:0c:58:4f:
f0:40:a1:fa:d6:8e:15:28:d1:25:b1:30:2a:dc:ee:35:10:f9:
13:8c:ce:d3:1b:d2:f5:2d:44:10:27:63:48:23:46:fb:c9:a1:
c1:eb:b0:d9:c4:71:84:04:b8:35:9b:48:97:6b:8c:8d:c2:fd:
7f:83:ef:75:82:55:10:91:e1:cc:13:d1:d3:ee:57:01:70:08:
f3:73:a3:2c:73:5c:6a:43:5d:5b:b7:59:9c:91:8d:58:f9:93:
87:b6:d8:ce:02:cf:50:bc:4c:13:2d:21:3b:5f:57:42:2a:c7:
95:e5:ed:57:90:65:3b:3c:f4:13:d3:26:5d:ab:97:87:61:8d:
87:1b:83:67:2c:db:a5:44:20:a8:ea:2e:70:ae:92:40:6a:e5:
4e:04:d8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:38:06 2026 by rpki-client