This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: U1C2O03fkR6HmGU/TBOI/WJuh3HmutQxQETtf2LrP7I=
Subject key identifier: B9:B7:F7:3D:79:98:17:C9:D7:C8:EE:9E:B1:40:E0:04:C7:7F:6D:5F
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 019BF83F5CD6638FC9CD6E8416E575AEF9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 17EC
Signing time: Mon 26 Jan 2026 03:01:00 +0000
Manifest this update: Mon 26 Jan 2026 03:01:00 +0000
Manifest next update: Tue 27 Jan 2026 03:01:00 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: URwH9CEYhQkXMQSxXDnO9rVfFCgYpS+Ut7WmhsEaeqQ=)
2: 7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa (hash: +PFpSUBUn21QY3VMxev9eNCTJ4x+TBdranLn3xHpsiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3f:5c:d6:63:8f:c9:cd:6e:84:16:e5:75:ae:f9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Jan 26 03:01:00 2026 GMT
Not After : Jan 27 03:01:00 2026 GMT
Subject: CN=b9b7f73d799817c9d7c8ee9eb140e004c77f6d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:f6:1a:08:9a:bd:be:c1:de:8f:64:bf:84:
6e:84:21:4c:9d:e0:48:40:47:dd:c9:f4:43:98:60:
d5:62:9e:74:6c:71:34:87:7b:66:4a:cc:2f:71:ff:
5c:ab:03:f1:83:da:ad:74:1a:91:8c:4f:af:56:f6:
97:9a:56:80:70:6c:38:f4:72:51:70:c7:b3:01:1b:
3d:1b:2e:26:93:19:b7:62:4e:42:c2:4f:56:31:04:
ef:e2:6a:56:1b:0c:ad:7f:32:d5:a4:06:73:8d:dd:
d7:b7:03:41:44:88:5e:65:bb:aa:75:89:ab:c8:82:
33:b6:a5:93:ab:f1:72:38:37:de:55:52:38:f5:44:
55:a8:51:59:f0:1b:95:1d:c6:74:b3:c0:3a:4c:fa:
9e:3f:af:0a:d3:ae:e5:00:75:99:37:ec:a4:ac:04:
c6:df:cb:35:cb:3e:19:26:c9:0d:36:26:90:aa:fd:
e0:4a:53:e2:d1:82:0b:49:13:1b:53:75:9f:9a:5f:
cd:bd:3d:c5:67:71:da:33:e8:02:bd:d1:8f:2c:00:
68:81:af:60:6f:98:5c:c1:8d:25:84:54:81:c5:e5:
16:18:ff:86:4a:7a:7a:e7:43:1b:91:94:54:7e:df:
cb:02:88:c4:ff:c8:92:c1:18:4c:4a:8f:88:a4:11:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B7:F7:3D:79:98:17:C9:D7:C8:EE:9E:B1:40:E0:04:C7:7F:6D:5F
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c1:1c:94:1b:70:44:2c:cf:b8:da:36:15:be:78:e4:1e:31:
bb:8a:60:f5:17:79:12:9e:ce:60:25:11:f9:a6:6b:52:5f:72:
15:76:b3:e2:7b:1c:1f:1d:38:8a:40:0d:65:12:f5:51:84:8f:
25:96:fd:9e:18:95:c3:e7:ef:a0:33:e1:32:e1:ef:fe:21:7f:
ca:cd:7a:84:c4:9d:88:8b:70:ec:04:67:ff:6a:b8:65:72:98:
8b:0a:9d:1d:d2:8f:c9:69:ef:32:0d:4f:47:57:7b:70:6b:32:
c9:e9:ec:0f:14:71:62:62:f3:95:e1:44:dc:62:35:d1:f7:97:
34:a5:56:c5:4f:35:70:ee:26:a4:2f:14:f8:fa:b9:29:d2:87:
c8:8a:dc:c4:5a:64:58:d5:e0:5d:93:4c:34:01:ad:36:2b:17:
f8:34:3e:72:5d:89:01:53:e7:91:f5:a0:f4:29:99:e5:f3:e7:
a2:bb:64:83:0b:95:cc:e1:be:4b:e2:7d:a1:57:d7:52:21:c7:
d4:e0:77:d7:d9:e5:bd:02:19:69:1d:03:af:f5:fa:89:ba:73:
3b:f0:9c:35:9d:1e:7d:42:ea:d1:5e:51:ba:a0:dd:42:0b:39:
fd:9e:87:b1:01:90:5e:e3:b8:2e:b0:2f:5a:a1:b7:6c:68:fb:
37:db:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:24:45 2026 by rpki-client