This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: B/MHaHICS5tp2SkdQkydFVc5in4zEjeeabe3KYoETV0=
Subject key identifier: CD:CA:0D:ED:24:B1:49:AF:25:F4:C2:84:50:50:A6:F7:39:44:2B:FE
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 019BF6F5B507AF306B60B16AD19D32F14E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 17E9
Signing time: Sun 25 Jan 2026 21:00:56 +0000
Manifest this update: Sun 25 Jan 2026 21:00:56 +0000
Manifest next update: Mon 26 Jan 2026 21:00:56 +0000
Files and hashes: 1: 3BxhZ35N8Qx2oPV8uifmlMo5dOs.roa (hash: bD1bjEPm+DLe/WM+85t8bSN4Tr3PbaJNuazlrJ3Q/3o=)
2: SoyEFopk-R4dS6W4GId_dIzG6Fo.roa (hash: 8Qh9O/rztM/wDJzj5wDIv0KZPNCBmgUCZ7Xbj18mMsE=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: uCwNSTNpuAGbvwVv04mMa56LXN4PVeJkjRTBeIn5Ij8=)
4: zfvsegXog0j8iHhgS6fpZB-7wA0.roa (hash: bFu3gDNhMpBoThiANf0cCs15MmxVpxeF1StwYMxxHlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:f5:b5:07:af:30:6b:60:b1:6a:d1:9d:32:f1:4e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Jan 25 21:00:56 2026 GMT
Not After : Jan 26 21:00:56 2026 GMT
Subject: CN=cdca0ded24b149af25f4c2845050a6f739442bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:30:dd:84:33:4b:f0:d1:61:e5:6c:36:8c:
c6:46:7b:0a:38:8a:4e:cb:3d:4b:9f:fe:d1:02:5e:
03:2e:5d:3b:cd:90:47:ff:48:5b:bc:9a:9f:87:92:
77:72:fb:64:9d:0a:89:11:c0:15:f9:29:86:59:6b:
59:4d:f3:d4:b3:90:e0:51:da:3e:93:46:2d:56:3e:
ac:cf:f8:39:a4:b0:35:fd:c7:44:4b:21:bb:99:fb:
2c:b5:e5:1d:1b:b3:2d:2e:17:b0:b5:a0:a7:8d:e7:
d6:1b:10:31:fa:a6:1d:e6:13:fe:0e:22:fe:bf:67:
ae:84:bd:42:94:e5:1e:89:35:13:90:76:33:71:2e:
22:78:41:40:4a:e4:59:ba:af:ec:b8:a8:a4:34:04:
7f:df:ed:74:1a:46:bd:aa:6b:8b:f9:a0:42:2a:40:
09:99:f0:64:ba:6c:1f:99:d8:fb:d7:ca:73:6b:cb:
26:56:db:70:85:02:21:3a:5e:a4:ee:2d:68:af:1c:
1d:01:13:bd:d4:c6:b6:d8:f2:13:76:bd:80:21:52:
20:e1:50:2d:00:3a:a8:ff:06:92:d6:47:f4:ec:3e:
cd:00:55:5c:5f:45:26:9b:b7:42:b8:dd:99:85:8e:
e8:56:4d:e6:41:a3:73:cd:0c:87:62:e0:ce:6f:13:
d1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CA:0D:ED:24:B1:49:AF:25:F4:C2:84:50:50:A6:F7:39:44:2B:FE
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e7:86:a6:7f:24:db:66:6a:a8:d6:62:a0:ce:27:40:6d:04:
da:5a:35:b6:59:00:3c:23:37:ad:25:a5:4c:00:20:8a:4d:6d:
7f:7a:11:33:fd:40:7b:96:d1:24:33:43:56:c2:33:57:ec:f1:
33:81:26:8d:86:f7:ec:ad:a4:ce:56:c5:2b:5b:da:a3:55:89:
14:03:eb:06:18:3c:6a:58:e2:ef:e9:05:94:47:ac:4e:6a:c1:
66:b5:b4:0b:6c:24:ad:21:44:e3:83:4e:51:66:9a:a0:1b:b0:
56:78:88:bc:bd:99:cc:59:04:73:d7:9e:a4:29:3d:cf:04:42:
c2:21:61:57:c2:a2:0e:ea:ed:8d:20:ba:58:55:d5:3e:63:c5:
f5:8d:4c:33:dd:6d:13:66:e7:bc:a6:7c:66:c2:b1:6a:62:56:
29:fb:e6:6b:48:44:31:2e:d4:75:14:57:30:98:03:31:ff:e5:
46:01:4e:f4:a1:cd:55:e3:6e:88:02:f7:97:eb:c2:74:57:4f:
4f:f3:51:5a:5e:5c:e4:f3:87:8f:b5:20:cf:96:cd:0e:26:5c:
57:2b:ff:62:75:a0:3f:65:c2:06:0d:f3:4d:ab:5f:82:7c:73:
fb:9d:aa:f0:06:72:03:64:f6:27:0d:ab:b5:63:cf:ee:e3:dd:
f1:de:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:18:20 2026 by rpki-client