This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier: mEu1QcknEtJhklkljDfHREsCGIvcbpZnvEV1Ug1tWaA=
Subject key identifier: B3:BD:E0:41:E3:D3:34:C8:FC:F6:71:2A:06:7B:02:25:78:0A:A4:AB
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 019BF574D7AE44C30714D57C60581560A666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number: 17F0
Signing time: Sun 25 Jan 2026 14:00:33 +0000
Manifest this update: Sun 25 Jan 2026 14:00:33 +0000
Manifest next update: Mon 26 Jan 2026 14:00:33 +0000
Files and hashes: 1: 3XhI2AnxE9Iob8Z4cu24L14fqh0.roa (hash: FrYruNBfkjSi7B2g8ZPV7E7JbrqIhIIg8LFhYWGl7/4=)
2: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: LhGFNy8z7sQzbEldSudDxZJPTFnq5G6Zutk+86rtjnI=)
3: FftuvVwHax9rBycvM4DRr28X-6o.roa (hash: bwaRbSjhdz4y7KT7CJ7m6+1M8w/NqaRjSm1en4rz3ZU=)
4: JQnCfY6YafPRsaYc7zKPwbPOWDw.roa (hash: GmdykJDu2x9EESYje5rdUV18QI0AESFSpmuLu31e0OA=)
5: YInBR7bsYgDdM9URzfND8cE-528.roa (hash: QGeVQC9vpESzvL8GZfpI0KdzNZQJgFqjrA2fAYIfxE0=)
6: gQ7St51r5tRsr1STgJZSpb51fy0.roa (hash: 2Qh2IkkpDn5a2bQBxP6BJ08eMuKLDD2wyJNu9l57aaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:74:d7:ae:44:c3:07:14:d5:7c:60:58:15:60:a6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Jan 25 14:00:33 2026 GMT
Not After : Jan 26 14:00:33 2026 GMT
Subject: CN=b3bde041e3d334c8fcf6712a067b0225780aa4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:2f:9b:c1:8c:44:59:36:e6:36:e1:6f:40:
71:3c:95:77:b7:5e:9a:a1:10:90:3f:c5:10:02:f0:
41:dc:06:c6:e6:f0:66:53:a1:57:86:47:70:0e:0a:
30:dd:fd:95:9e:a6:d3:9b:71:ce:52:83:94:bf:68:
da:a7:52:d4:f5:b1:91:d9:b1:3f:a7:3a:44:e7:ce:
5e:4a:99:6f:29:dd:4d:e1:3c:7e:30:f4:3a:82:4c:
40:d7:e1:21:b4:46:7d:dd:f4:40:bd:7c:1c:01:cf:
9f:72:3c:ee:35:04:b5:e8:12:4b:2e:10:d8:11:e1:
0e:69:d6:61:f3:6f:b6:12:95:3f:1f:92:83:6f:fd:
cb:f1:58:30:93:47:ce:9c:22:f7:27:a7:fb:90:ae:
ee:c8:30:5b:af:f2:26:58:64:2b:f2:70:36:d3:01:
5b:d1:db:a3:a6:45:ee:f1:62:2f:21:12:78:52:0e:
98:ff:1e:f2:d1:e2:a9:c9:68:b9:f9:9a:5e:46:6d:
0c:21:7a:ee:7c:44:fc:d6:85:6a:d3:06:b6:76:e6:
dc:c5:18:a7:83:24:f9:02:cd:fd:1b:bf:c7:f9:51:
38:f3:5a:db:0a:d7:40:5d:fd:c5:ab:93:70:81:f6:
97:69:1f:5c:26:2f:8d:2c:f1:ff:d6:b3:5a:b9:cd:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BD:E0:41:E3:D3:34:C8:FC:F6:71:2A:06:7B:02:25:78:0A:A4:AB
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8e:cf:9c:60:9c:00:f3:9b:7e:65:e9:52:44:10:66:dd:51:
03:e5:88:60:be:ef:76:e2:c8:ca:63:d9:03:6a:b4:01:9d:9c:
a9:b6:e1:68:ce:77:ce:45:29:e9:fa:5e:66:86:22:3e:72:e8:
e4:bb:67:b5:60:9a:46:1e:41:e9:85:70:08:3f:ca:3b:d2:24:
2b:78:25:fa:eb:5d:59:5b:69:44:66:42:d4:56:d8:4d:77:a2:
89:3d:a5:df:09:a7:09:6e:87:c1:3d:5f:15:d4:c0:fb:d1:f1:
de:a9:d4:0e:78:30:c7:44:4e:a3:0f:b9:5f:38:74:88:df:f4:
e5:99:0b:0e:15:84:3b:e4:88:1b:84:b5:23:fa:a9:ac:79:1a:
37:c0:35:3e:8e:76:69:64:8c:57:a9:fc:fa:cf:e7:db:c8:b4:
13:6a:d1:43:b7:cf:27:95:21:60:6e:ba:47:79:b4:df:af:fe:
3a:3c:4c:26:65:c9:b4:da:cf:7a:75:25:6e:dc:0d:2d:f2:50:
a6:52:4e:16:33:80:69:13:13:89:f9:41:db:23:d1:05:63:4b:
e8:d6:e9:65:a7:d1:20:92:fb:c1:05:de:37:aa:55:7c:79:4e:
86:23:35:8c:4d:71:e2:1b:6e:7e:52:6c:55:3c:9f:33:ee:b9:
ed:27:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:18:24 2026 by rpki-client