This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: Hg2zWR8slVDdWKfiLv1BG4p6Vl/Awy+nLHfWnASqA10=
Subject key identifier: 0A:D9:C5:E7:7A:A7:37:B8:9E:BD:32:9B:E6:52:91:6F:22:02:1B:A2
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019BF6BF2490EEB8A45D7B42DAD082BF89D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 1812
Signing time: Sun 25 Jan 2026 20:01:20 +0000
Manifest this update: Sun 25 Jan 2026 20:01:20 +0000
Manifest next update: Mon 26 Jan 2026 20:01:20 +0000
Files and hashes: 1: 1Yk3wLsSFqIceQz9okyZeYwSmUU.roa (hash: XuNQlAxXibSKzFFM3alxNEJs9SFC+R0bjfD85sz3lps=)
2: 2rNvx3N9jKo76idv1HsGHAcnnwk.roa (hash: eczcKAWkF5L/9LrtvswF4lmskTN97duPXq74deE4ZjY=)
3: 89TNYzq_U7xA7Y9BxvWtQuf55Qw.roa (hash: gJOB7b6DwbK+XopIODXerFY7Dl/1i2NMhMaK+LjT9Lk=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: JpM6D1eNv9jz/FYyxoXcr4f5C6K7yWBhhSMag5n9T1U=)
5: XGgIS2kdMhFLyP-i-D0W3B8JW7A.roa (hash: eJBUNPOd5UiGzU5DENLhYsoGYS/OErO6pyZfCeZ9+DI=)
6: Z-AEi0EtQTiXIQZyMMd-Bg1cjpI.roa (hash: yIwR/WFk+tPJZkyXjHRduYJCHgmO7w46d3yBhaQ1ujQ=)
7: _AlvkImBx9fT_58A-ot68g3ZAWg.roa (hash: msAI/PDOB8nUEhgzHGsqD3SG29keFYFQtvJbuYgfbh4=)
8: e6E78PhXHpGFjckaurV7HRo45Qc.roa (hash: /P55Uaooj8U1yQTcKMlV6RxlENtuteMc4CS0XE887QU=)
9: pc9jqeFvGm_Ya7ftOHGOywYXqHk.roa (hash: hvmbpnMOx6aLgariBv7H4no6hWJ9AktUdxssOvOvSNs=)
10: wEsor2MQvIFzGGLmwfUZgbYVkto.roa (hash: asdhK4hFtXHqOa5kFwrF3vv+JxQieRNKL69DY1/povE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:bf:24:90:ee:b8:a4:5d:7b:42:da:d0:82:bf:89:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 25 20:01:20 2026 GMT
Not After : Jan 26 20:01:20 2026 GMT
Subject: CN=0ad9c5e77aa737b89ebd329be652916f22021ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:fb:84:47:ce:16:91:77:f3:a1:43:f8:47:
6b:d7:9a:eb:66:0e:19:33:ef:16:6b:dd:d5:8f:74:
3f:03:e3:1b:ce:d4:20:ac:8e:08:e3:38:f7:d3:29:
4c:b7:3b:53:42:7a:6a:ca:77:cc:5d:b7:d8:99:68:
0d:45:e8:65:e9:3b:59:86:24:05:04:c9:8e:e1:da:
12:e3:ae:26:b1:0b:98:f0:31:aa:aa:20:5c:54:f4:
91:d8:0b:ba:8b:e5:b3:39:b3:b3:bc:9d:7e:66:a8:
9e:a2:ce:d5:e2:d1:87:b1:66:cc:a8:66:21:b8:28:
4b:97:19:bc:17:4d:74:c1:0b:84:3c:13:16:da:08:
d0:90:33:6b:36:2b:fd:54:04:63:97:c7:b9:14:37:
ac:ab:d2:72:b8:2f:0b:09:9f:83:2d:95:62:5e:5d:
6e:29:d5:e9:fc:53:1b:85:a5:08:40:0d:d4:f3:bc:
91:06:73:55:84:17:08:db:f6:10:2e:75:7c:21:80:
e2:79:23:d4:27:11:5d:1e:41:49:a6:8d:3a:f6:7f:
ba:08:3d:7d:c3:8f:05:ce:9a:78:db:77:5e:28:84:
4a:9c:64:c1:5c:dc:93:82:8a:0b:a9:d0:b3:26:23:
b4:c4:cf:f6:b2:71:34:ce:d1:fa:8b:e8:0b:8d:a1:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D9:C5:E7:7A:A7:37:B8:9E:BD:32:9B:E6:52:91:6F:22:02:1B:A2
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0a:9e:a7:df:f1:01:b9:ab:93:87:81:2a:2d:23:2b:c7:e3:
ac:0e:4f:f8:72:90:95:f5:69:d5:9c:d3:ec:c3:f1:54:e2:d6:
dd:a4:fa:89:cb:fc:e5:41:2a:d9:bc:f7:8e:10:7a:14:3c:ae:
b5:df:24:0c:1e:cf:0d:1e:c1:01:8c:ca:26:2c:4d:77:0a:ac:
40:62:2e:3a:ae:c0:12:29:fa:ef:f6:49:b3:9c:01:84:63:eb:
25:3c:63:26:f2:a9:bf:b1:62:2f:4a:bc:4d:0d:20:07:30:59:
4c:1c:89:76:2f:b5:ca:70:f2:e4:b0:4c:14:74:92:5e:af:a9:
22:24:92:fc:92:eb:a5:37:dc:95:ff:d8:e6:8c:ef:b9:12:79:
e2:b8:e0:6c:56:05:79:d2:90:c6:95:32:bb:86:9e:9d:00:28:
68:78:3b:a6:34:59:b0:66:02:22:18:a1:d6:d4:1b:e9:29:4b:
28:8b:fa:fc:47:b7:e5:43:0e:4f:a4:23:dd:e6:be:78:8c:d1:
4a:72:87:8f:7a:a7:02:f1:84:35:ca:5d:d3:b2:de:6c:eb:27:
57:8d:6f:96:48:cc:82:e1:5c:bc:6f:21:5d:64:e2:26:8b:7e:
86:27:84:5b:21:d1:ff:8a:6d:88:b3:49:28:f0:a2:e0:b0:46:
85:97:1a:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2vySQ7rikXXtC2tCCv4nRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0
N2ZkY2UwHhcNMjYwMTI1MjAwMTIwWhcNMjYwMTI2MjAwMTIwWjAzMTEwLwYDVQQD
EygwYWQ5YzVlNzdhYTczN2I4OWViZDMyOWJlNjUyOTE2ZjIyMDIxYmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkar7hEfOFpF386FD+Edr15rrZg4Z
M+8Wa93Vj3Q/A+MbztQgrI4I4zj30ylMtztTQnpqynfMXbfYmWgNRehl6TtZhiQF
BMmO4doS464msQuY8DGqqiBcVPSR2Au6i+WzObOzvJ1+Zqieos7V4tGHsWbMqGYh
uChLlxm8F010wQuEPBMW2gjQkDNrNiv9VARjl8e5FDesq9JyuC8LCZ+DLZViXl1u
KdXp/FMbhaUIQA3U87yRBnNVhBcI2/YQLnV8IYDieSPUJxFdHkFJpo069n+6CD19
w48Fzpp423deKIRKnGTBXNyTgooLqdCzJiO0xM/2snE0ztH6i+gLjaHUjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArZxed6pze4nr0ym+ZSkW8iAhuiMB8GA1UdIwQY
MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt
YjczYTM2ZDkzOWIyLzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy
LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwqep9/x
Abmrk4eBKi0jK8fjrA5P+HKQlfVp1ZzT7MPxVOLW3aT6icv85UEq2bz3jhB6FDyu
td8kDB7PDR7BAYzKJixNdwqsQGIuOq7AEin67/ZJs5wBhGPrJTxjJvKpv7FiL0q8
TQ0gBzBZTByJdi+1ynDy5LBMFHSSXq+pIiSS/JLrpTfclf/Y5ozvuRJ54rjgbFYF
edKQxpUyu4aenQAoaHg7pjRZsGYCIhih1tQb6SlLKIv6/Ee35UMOT6Qj3ea+eIzR
SnKHj3qnAvGENcpd07LebOsnV41vlkjMguFcvG8hXWTiJot+hieEWyHR/4ptiLNJ
KPCi4LBGhZcaew==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:52:52 2026 by rpki-client