This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: LyWmtbUY380UTW1LwrJZQvop9Gqfx1y4w+3LGvBUZsg=
Subject key identifier: 02:EC:15:26:BE:3B:B6:4A:4A:CE:22:B6:4D:16:84:F6:21:9E:F2:03
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019BF4D11753C0D6DE84D8B0C9876F2F86F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 118E
Signing time: Sun 25 Jan 2026 11:01:42 +0000
Manifest this update: Sun 25 Jan 2026 11:01:42 +0000
Manifest next update: Mon 26 Jan 2026 11:01:42 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: 7Bkxe02Eyo887dqdx3NbV7maJDVH6uIvNdOB3/mN2zo=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:d1:17:53:c0:d6:de:84:d8:b0:c9:87:6f:2f:86:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Jan 25 11:01:42 2026 GMT
Not After : Jan 26 11:01:42 2026 GMT
Subject: CN=02ec1526be3bb64a4ace22b64d1684f6219ef203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:22:7f:dd:d9:78:c6:28:c9:1b:64:ef:d7:
c5:29:a2:ca:dc:10:50:b0:53:87:a7:5d:00:05:4d:
ce:a2:71:81:1d:ef:cd:bd:32:5c:be:c5:32:ee:67:
5f:1a:c3:bc:3b:7e:4d:d7:4c:6a:d0:c0:25:53:ba:
ab:7a:1f:58:77:1f:8c:39:23:f3:33:6f:6f:6b:40:
ee:a0:e1:e6:5a:01:c8:d4:e9:ca:5c:88:22:70:04:
09:88:3d:a8:56:8c:d1:bb:b5:87:7b:c2:09:18:b5:
11:96:97:24:64:64:4e:fc:7b:f7:58:01:40:cb:b4:
d5:03:b9:d7:d4:48:f3:45:66:43:4d:a5:a7:f6:09:
1b:b3:d7:64:b1:68:fd:32:8e:ae:32:55:83:aa:88:
12:59:c0:11:1c:fd:34:ba:73:99:9c:15:cb:87:00:
fd:b3:5e:f7:67:01:9f:41:7c:b1:f0:ea:2d:44:ea:
a1:7f:e2:78:75:ec:a9:7a:fc:8a:06:fc:12:03:ef:
37:1c:28:e5:79:2b:83:64:c6:89:37:73:78:cb:3b:
c2:0d:2b:c6:0a:5d:f0:71:a3:a2:6a:56:b6:80:d9:
cd:19:84:73:21:44:85:d5:d0:cc:7e:5a:c3:58:d1:
e0:86:2f:ad:36:ed:93:df:f2:75:bb:28:bd:6d:46:
71:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EC:15:26:BE:3B:B6:4A:4A:CE:22:B6:4D:16:84:F6:21:9E:F2:03
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e2:99:03:71:f7:29:f8:26:66:90:3a:03:b2:cb:09:4d:58:
6a:79:5d:d7:e0:8f:74:3a:4a:e2:ce:84:0d:13:b3:c4:8c:97:
f6:23:eb:70:e6:3e:c9:81:5e:74:6f:3b:3d:76:d0:27:e3:1c:
65:51:19:d6:1e:a7:42:92:e0:a2:97:c0:9f:97:9e:88:89:eb:
c4:bb:fd:21:ad:31:e4:1e:36:ba:ab:34:db:90:41:56:1f:0e:
a5:05:b1:fd:e9:bb:ee:80:f5:5e:7d:c1:39:d5:a1:75:be:c9:
ef:c5:62:c9:a0:35:8a:f1:08:31:12:47:45:9d:78:0c:08:23:
3b:8a:0a:1f:17:c1:33:35:fb:ff:bb:8c:2d:0a:88:aa:30:ca:
ce:33:e4:ed:39:f1:8e:34:a5:64:23:ea:93:38:5f:b3:8d:f3:
a3:fd:56:ab:e4:67:ad:8e:19:9d:14:b3:36:7c:15:2b:b4:92:
54:a3:4d:d7:f8:55:99:69:87:4c:b2:8a:9f:66:74:2c:40:f4:
0c:dd:e3:17:5e:85:30:d4:bd:8b:8c:07:37:2e:73:a7:8b:56:
78:fc:b1:8c:84:fe:41:1f:f6:b2:8a:19:c8:1f:26:9e:ef:fb:
a4:dd:e5:7b:f5:f9:13:23:84:5f:95:2f:4c:fa:09:d8:6b:73:
29:cd:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:09:45 2026 by rpki-client