This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier: xcixlFB1FihLVqGFzrFHUFKegfiMeAgCv/tjLzwWvts=
Subject key identifier: 6A:52:BA:2C:A6:37:C0:05:7E:16:9F:DF:61:35:28:F2:CB:8B:F9:33
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial: 019BF91BF2248803BAAD1E9CB6D6E1BB6437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number: 177E
Signing time: Mon 26 Jan 2026 07:01:56 +0000
Manifest this update: Mon 26 Jan 2026 07:01:56 +0000
Manifest next update: Tue 27 Jan 2026 07:01:56 +0000
Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: IDyRfrHXcdQCmdRmfGdocp3re5utmxlhpqprlkLpmdM=)
2: GB_a4b1kVxMMUZoZCCtwC17cEDo.roa (hash: 33UFtMiUsHKZAxOVuIqQu69SANl3j9uJJ2Mz9LnCmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:1b:f2:24:88:03:ba:ad:1e:9c:b6:d6:e1:bb:64:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
Validity
Not Before: Jan 26 07:01:56 2026 GMT
Not After : Jan 27 07:01:56 2026 GMT
Subject: CN=6a52ba2ca637c0057e169fdf613528f2cb8bf933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:32:41:2b:74:f0:63:b8:b5:f5:ef:6b:77:4e:
00:a3:ab:05:83:6a:74:84:fc:03:7f:14:52:a7:41:
a6:b5:1b:e5:69:8c:04:32:8a:cd:67:61:93:bd:df:
93:8b:74:54:fe:4c:61:6a:5a:67:0d:a2:61:e7:72:
bc:9e:34:75:ef:6d:cd:06:33:fd:f8:c7:a7:a8:94:
1c:ae:0d:ec:19:e8:6c:e0:18:51:18:8b:7d:fe:11:
10:05:69:59:99:b0:a3:a9:22:dc:36:27:7b:ee:30:
4f:03:6d:ba:01:c3:f4:d6:53:4e:6c:88:d9:8a:22:
4d:ed:76:85:27:ac:af:61:fb:f1:05:84:ef:0c:63:
53:89:03:ff:7c:c5:92:62:e6:6d:73:e0:ef:11:08:
73:8c:0d:cb:6b:52:6b:be:99:80:a8:7c:64:1e:b8:
c5:23:4c:b4:50:88:44:33:95:8a:c6:0b:d5:fd:cb:
8c:db:8c:75:21:07:16:91:e6:83:97:bc:f8:f7:2d:
04:15:e6:1f:16:31:01:09:ef:44:ea:dd:f4:4b:6a:
75:40:c6:97:78:fa:1e:5a:2a:03:0a:6f:4b:fe:da:
7e:9c:da:cc:82:11:39:08:a9:d4:78:68:e8:16:0a:
77:75:3a:87:d3:97:51:d0:85:23:55:08:ab:64:bc:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:52:BA:2C:A6:37:C0:05:7E:16:9F:DF:61:35:28:F2:CB:8B:F9:33
X509v3 Authority Key Identifier:
keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b6:25:65:e0:92:d3:34:55:52:ce:c7:49:54:44:80:88:59:
30:5d:39:7c:40:f3:c0:74:cb:6a:55:05:b2:f2:c3:5e:49:b0:
e5:27:12:91:c3:b4:07:0f:f1:fa:b0:3e:f0:81:67:dc:1e:2b:
32:f3:76:74:23:d0:b1:54:9a:a8:0f:3d:73:b7:e0:5e:24:d4:
1c:41:58:e7:9d:ac:27:3a:d4:ce:f8:b3:eb:73:2c:7c:18:7a:
ad:4f:07:5a:f2:97:27:09:0e:3d:8e:09:6f:d9:7b:e4:da:81:
72:db:18:1f:8e:33:4c:8e:cc:12:a1:ba:a8:ba:92:c5:96:86:
e7:38:77:19:c3:47:6e:e4:24:ae:fb:72:21:6d:7c:8c:35:e9:
1d:27:6f:a4:41:63:ef:95:ea:67:0f:6d:02:55:a8:f5:fe:11:
5d:ed:10:fb:e1:5f:1f:5a:d3:a7:33:ca:43:bc:e9:ed:93:24:
97:78:88:2b:22:08:ed:de:0d:24:6d:22:c7:1d:2e:99:80:2d:
9f:af:c6:19:10:3a:c8:da:d5:67:d2:e5:a7:78:45:ab:4c:bd:
a0:ab:3c:1a:d5:93:03:05:ed:a4:dd:ce:16:83:9b:cc:5e:dc:
90:bd:b9:fd:b6:8f:d6:69:e3:39:3c:67:52:0b:1e:83:95:13:
e6:25:3d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:12 2026 by rpki-client