This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier: ChuyKFHdSqWZXDAEQbZpCWq3GYssOsv+7kmFquQq+vQ=
Subject key identifier: 57:90:66:0B:18:AB:70:56:0B:6C:13:98:00:2C:32:03:69:EB:43:02
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial: 019BF87656A39A61B42EE652C3221C5A4D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number: 17EB
Signing time: Mon 26 Jan 2026 04:01:03 +0000
Manifest this update: Mon 26 Jan 2026 04:01:03 +0000
Manifest next update: Tue 27 Jan 2026 04:01:03 +0000
Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: apKT4qjcpzQiSKzi1mlO1tE8LEca5CWle0pmfSQfIzg=)
2: Vi82WamhNS_7BkMeH_Obwd9eH6o.roa (hash: /zAtnxefQ5sdQ3fDobW8m7Zl2IYqkGJl44bGBXQLVlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:76:56:a3:9a:61:b4:2e:e6:52:c3:22:1c:5a:4d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Validity
Not Before: Jan 26 04:01:03 2026 GMT
Not After : Jan 27 04:01:03 2026 GMT
Subject: CN=5790660b18ab70560b6c1398002c320369eb4302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:9b:f6:54:16:b9:42:ee:cb:84:db:e2:ef:
53:92:2b:a4:fe:45:33:b3:09:70:fa:36:41:6c:92:
90:a5:55:f6:7e:68:7c:70:3e:51:fc:2a:c7:15:af:
5f:c0:8f:d9:0b:71:c8:d0:6c:97:e0:47:c8:7a:cb:
00:24:a9:ce:9e:e1:07:79:6b:a5:7c:35:0d:ca:3c:
23:4f:5e:0a:53:b5:ec:b7:6c:7e:32:b8:3d:44:6e:
ae:c0:4e:91:6d:66:b2:80:32:48:31:db:ed:a5:42:
77:8c:ce:ed:18:ae:5a:8b:5c:c0:c1:68:93:18:5a:
3a:9e:06:8a:7e:7c:ac:d5:8f:be:c4:00:02:55:fd:
44:34:9c:22:36:be:cd:69:75:93:25:6e:c8:96:d5:
00:81:56:f5:63:c6:26:e4:08:30:80:05:b3:bf:19:
98:38:19:43:a0:70:8d:7e:9c:4e:ef:19:ac:67:01:
2f:ed:77:fd:ae:d7:6b:e4:29:ff:13:5b:8a:06:18:
70:3c:dc:6d:94:bc:cf:c5:60:21:64:94:96:5d:fd:
a1:91:32:aa:96:36:56:74:09:1f:b8:9c:19:6e:ed:
50:c7:9a:9c:9e:fb:93:2c:99:ea:90:f1:fc:39:69:
5c:37:e6:bf:3c:dc:4d:8f:31:cc:c4:6b:c9:18:7b:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:90:66:0B:18:AB:70:56:0B:6C:13:98:00:2C:32:03:69:EB:43:02
X509v3 Authority Key Identifier:
keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c1:66:05:25:cc:7e:b7:a9:09:01:86:2c:8e:04:59:34:68:
66:00:8d:61:22:61:4f:29:33:6f:a4:0b:76:5f:60:52:f7:05:
69:58:d0:e9:45:86:ee:2f:4f:3b:51:d4:9f:36:12:38:98:e4:
44:ec:eb:95:78:2f:e8:7e:30:0c:92:a5:da:72:17:e5:fb:ce:
da:0e:07:47:cf:b4:30:ef:42:d2:68:e7:44:55:86:3a:15:f9:
c7:dc:c6:64:bd:4a:77:c6:e1:b6:6a:64:4a:fc:a2:7d:d6:fa:
c9:42:ca:be:96:7c:b9:18:e5:20:ef:d8:d5:81:37:72:52:0d:
bf:0c:30:cc:99:03:be:40:30:46:ec:69:db:14:46:48:c3:dc:
9e:2d:82:c6:ec:61:2e:d9:b8:e3:db:c5:29:65:b6:ad:24:b9:
d2:6a:c1:47:e1:c2:e8:31:42:4f:7e:6e:ac:40:db:6b:4a:64:
56:7e:c5:26:7a:f2:68:2a:0d:c2:65:02:25:5d:9f:5a:7e:c4:
07:4b:32:2e:d6:77:9f:07:c8:d7:ce:63:08:8c:8d:33:6d:75:
6e:16:14:61:b6:b3:7c:e0:a2:d8:32:2c:26:f1:00:63:ca:0b:
f5:a4:0c:f5:15:cf:51:51:fa:c8:75:98:27:38:8c:c4:99:83:
c2:14:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:57:38 2026 by rpki-client