This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: Y/34noh/hHkfBDxnvsiZa69THoVS8/h6ornoIp4/5D4=
Subject key identifier: 24:41:7F:43:61:98:74:48:DF:5F:1F:CD:1D:21:D3:76:C5:5F:50:AD
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 019BF53E20AE722F687EE5E2D688BF9A9E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 13:00:47 +0000
Manifest this update: Sun 25 Jan 2026 13:00:47 +0000
Manifest next update: Mon 26 Jan 2026 13:00:47 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: dTwLbN/HiDG3lKmXQZUbit2DuODUGJQ3CogPHPBEMYY=)
2: NtOmLk3Ecthj6nPCs4zxh7SF6Mg.roa (hash: KP/kZ3LXZb2b6XuZM5JQejaPc2eczkoswDhOOh49koo=)
3: PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa (hash: yNka9qwEcezZYyApHWafWMkS2uCoJYAg/hb1N/oKUG4=)
4: cpzictopgP_W9ifWySv9e6ehOOc.roa (hash: 5rHP/vfqqkxl9562AQVwm1f2nGTx9rXW1y4VWn7ksEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:20:ae:72:2f:68:7e:e5:e2:d6:88:bf:9a:9e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Jan 25 13:00:47 2026 GMT
Not After : Jan 26 13:00:47 2026 GMT
Subject: CN=24417f4361987448df5f1fcd1d21d376c55f50ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:24:49:eb:e3:16:d7:95:b3:71:35:cd:59:
28:75:7d:59:e2:be:c3:67:2b:03:2e:53:9d:72:df:
2d:cd:49:1a:94:39:4b:60:1b:c8:1f:39:4e:25:ad:
d1:85:d1:a8:2c:01:0e:b9:11:29:a4:19:ee:1c:e6:
34:11:2f:ec:35:c2:a8:a4:9a:da:a1:72:67:07:89:
05:b0:c4:28:e3:d1:14:60:3c:53:e7:12:b5:fe:ee:
85:9f:41:e6:0a:2e:12:50:d8:51:6b:a5:22:38:0a:
68:0a:1a:c5:0e:97:de:b5:42:bf:b1:37:02:6c:b5:
3f:05:3c:83:b6:8f:71:8e:53:27:ec:b8:27:35:d3:
8e:07:ed:84:e3:ac:f7:1e:8b:9b:54:d3:84:4f:32:
73:0c:f8:60:2a:c6:39:30:da:d2:64:5f:99:75:92:
ac:de:5f:54:17:f2:ec:64:24:81:17:a9:bd:c5:aa:
a7:35:3f:05:9c:88:b3:00:80:f3:e7:f0:91:aa:45:
00:7b:5b:f6:b7:91:2d:a0:6e:00:e7:a1:b7:16:fc:
3a:17:ec:9c:59:28:4c:10:81:90:93:64:8b:0b:83:
aa:58:74:55:30:b9:ab:f6:c1:5c:b2:f6:55:0c:86:
50:0d:f5:1f:13:1f:fc:17:7b:1f:97:29:d3:60:9a:
14:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:41:7F:43:61:98:74:48:DF:5F:1F:CD:1D:21:D3:76:C5:5F:50:AD
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:67:00:08:14:0e:fa:f0:a4:64:86:71:ed:bf:a1:16:be:c4:
b2:56:18:dc:dd:9a:3a:78:2b:f9:35:bb:b6:99:4d:38:9e:1b:
e7:7e:86:97:2f:89:fb:b7:31:31:8d:1e:72:ee:33:43:d7:29:
d1:89:d3:a4:80:bf:9b:39:26:ef:a4:72:82:98:dc:dc:28:70:
bb:a7:12:21:0f:3b:1e:69:1b:8f:dd:e8:4f:4b:41:be:fc:b8:
48:32:77:62:c3:72:cf:cf:0f:64:7d:2e:3a:d6:5f:e2:11:7c:
80:9b:98:a0:3a:fa:93:74:eb:ee:3e:78:73:3d:27:54:24:30:
2c:1a:95:47:10:8f:43:d5:e4:62:80:47:bf:2c:ca:91:c5:74:
12:39:b2:ba:07:d7:0c:f2:bb:f4:49:83:eb:76:8e:b7:ee:23:
3f:1d:d7:17:5d:e1:d3:98:4d:91:34:05:ce:81:f5:3e:00:45:
2f:85:df:e2:5d:0f:0b:0f:9d:57:36:e6:d2:ef:45:da:91:16:
8e:21:24:b0:9c:f5:e8:de:ed:2a:e9:fb:1a:c2:60:cb:f4:6b:
c2:ef:4f:4e:96:23:bb:2f:25:eb:72:78:7f:da:4e:53:82:d3:
81:52:15:b7:92:bf:59:a5:56:b7:20:3c:de:e6:0e:60:be:1f:
f3:fb:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:24 2026 by rpki-client