This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File: fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier: xPnNuhu8x6VRvUs63eXew8BLP+zbg3EuSqeKPzOItBY=
Subject key identifier: 18:84:F6:2E:A2:BD:3A:FD:C6:B3:03:84:6B:30:82:4B:28:D4:89:D7
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer: /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial: 019BF951918F235F5E73077A125BC6FA3B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number: 04D1
Signing time: Mon 26 Jan 2026 08:00:30 +0000
Manifest this update: Mon 26 Jan 2026 08:00:30 +0000
Manifest next update: Tue 27 Jan 2026 08:00:30 +0000
Files and hashes: 1: btFTz2r_BesZJN2u_oCmJMOAwZk.roa (hash: 0LBuX7o2jR543EQsgYTaLGtgZY2hOEDSxDyt/nU6qa0=)
2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: NQyFnd+sBtAJnMnem680S6CaCD5DtxrUoKzS5hrjZv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:51:91:8f:23:5f:5e:73:07:7a:12:5b:c6:fa:3b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Validity
Not Before: Jan 26 08:00:30 2026 GMT
Not After : Jan 27 08:00:30 2026 GMT
Subject: CN=1884f62ea2bd3afdc6b303846b30824b28d489d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:06:9f:dc:fa:12:b5:3c:6a:e4:61:21:94:
57:41:9e:31:3f:0d:e5:fd:24:71:d9:0e:8c:47:b4:
ff:64:9d:2a:55:86:ae:f7:95:85:53:5f:ed:7f:52:
50:2a:f2:d9:8a:d7:8d:91:76:bc:5c:34:fe:0b:51:
4e:59:f5:87:66:33:10:6b:03:66:50:da:d1:5b:f0:
14:c7:87:7c:c1:99:66:52:a9:2d:0b:a3:99:8a:a1:
81:02:05:77:48:d7:be:60:6d:26:81:9d:6e:64:18:
93:fb:35:64:9b:16:e2:8b:cb:a0:53:12:7d:b8:9b:
85:a3:90:b6:d1:9c:48:4a:eb:ea:46:ec:1c:fb:90:
eb:00:36:98:ea:f4:eb:ab:b3:e7:c3:bf:c3:4d:a7:
c3:de:3d:66:6e:e9:3f:8c:4f:9c:67:03:dd:d9:ff:
29:d1:06:20:64:c7:9b:a1:77:66:52:95:6f:59:03:
f9:d1:38:6b:f9:6f:da:e7:d8:a5:ff:a3:2b:55:6e:
66:ff:60:7f:28:8e:3c:c6:bf:5e:d7:06:28:42:dd:
c9:1a:74:bb:ef:99:e5:b0:de:89:3f:67:9d:12:82:
4a:3b:9a:28:46:71:f6:02:04:e8:64:de:f6:08:0a:
66:09:b7:3c:f5:2d:8f:67:69:cb:67:d5:8a:02:3a:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:84:F6:2E:A2:BD:3A:FD:C6:B3:03:84:6B:30:82:4B:28:D4:89:D7
X509v3 Authority Key Identifier:
keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:33:99:1e:1a:b3:b3:c7:9a:51:d3:25:f7:db:8d:b1:6b:cf:
ab:1d:70:bd:70:1f:87:2c:e1:a5:36:1e:99:26:ef:c5:3e:db:
cb:29:79:35:74:b5:a0:6e:cc:71:e8:89:30:2f:49:82:d4:93:
dd:8f:dc:f4:7d:27:3f:d5:47:8c:d1:bc:f8:73:61:4e:60:11:
b3:8e:a5:df:99:9a:95:38:7d:28:66:9c:73:4d:4d:41:28:b4:
44:c3:48:94:6f:29:1a:29:a4:80:7b:45:f2:eb:f7:a5:a3:f4:
1f:42:9c:0b:ed:3b:0a:01:b3:5c:08:de:e8:fd:63:7c:6d:49:
a1:68:0b:41:c6:db:f8:d9:36:0a:27:d6:63:04:1d:43:86:db:
51:1e:eb:42:51:84:eb:96:8d:d3:1e:1c:da:13:f6:3c:45:19:
fd:87:48:da:01:bb:e4:97:53:0a:1d:ac:89:ea:29:59:cf:58:
26:94:d4:6b:24:97:93:dd:92:e4:99:0e:c6:b9:96:c9:c1:cc:
93:bb:33:1d:75:88:14:24:0a:d5:d0:f8:eb:7e:82:7d:83:38:
e9:39:33:a7:d0:7d:6e:27:a7:8b:e7:83:76:67:18:04:31:90:
46:c8:30:95:10:8a:5f:2b:8d:09:d2:70:ef:73:62:5f:4f:2e:
15:f9:1b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:05:26 2026 by rpki-client