This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File: fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier: mGGFHtDWQFFeQqPY855j3UeoB5PzQ9QHqNsSP2DOpKg=
Subject key identifier: 52:4B:C0:DC:DF:EC:59:BF:F7:C8:1C:E6:1D:E5:7D:32:BB:F0:C8:41
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial: 019BF7636891714FC93624E37A6A9F835B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number: 0D9D
Signing time: Sun 25 Jan 2026 23:00:45 +0000
Manifest this update: Sun 25 Jan 2026 23:00:45 +0000
Manifest next update: Mon 26 Jan 2026 23:00:45 +0000
Files and hashes: 1: 3qd6ryJVoFRB650Q_vjYdE5FH3c.roa (hash: 9UIvBWdv4SEGNEIJba6xg1//2eKqhjadOAhSloqCY4U=)
2: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: HOCfw1iBNKwB6invu818V5N02Op0lDVYlVEuMJE/PaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:63:68:91:71:4f:c9:36:24:e3:7a:6a:9f:83:5b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Validity
Not Before: Jan 25 23:00:45 2026 GMT
Not After : Jan 26 23:00:45 2026 GMT
Subject: CN=524bc0dcdfec59bff7c81ce61de57d32bbf0c841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:50:0f:7c:1b:33:25:4e:d3:ad:07:0e:86:61:
27:96:f4:a5:b2:99:9c:fd:f3:ba:1d:d1:19:d0:fa:
8b:21:36:f3:f7:bc:00:8d:68:ff:d3:6d:e3:e1:a5:
02:74:fb:5e:29:66:32:4c:00:d7:97:20:bb:83:8a:
fa:5a:41:8f:16:57:a5:f0:04:0e:f1:53:ea:83:11:
86:db:8a:ef:41:ae:07:17:0b:58:68:34:e2:28:1e:
a0:01:cd:25:a2:18:bc:b6:9e:9e:43:31:38:ff:ac:
52:ec:45:c1:18:06:c9:d9:51:63:7b:e4:17:77:23:
38:43:7e:02:28:16:a2:9d:c4:a9:94:6a:b6:ee:10:
f0:17:d0:06:17:d7:2f:da:ee:0d:af:58:e9:bc:64:
3b:29:ef:1a:ec:19:be:50:6f:01:62:cd:a5:b2:13:
ed:9f:47:39:bd:a3:06:c3:4a:1a:57:cd:f9:53:8e:
a7:b2:54:b4:c1:d3:9e:e3:fd:05:40:b0:e3:c2:52:
fb:0f:06:f5:38:08:62:a3:87:9b:e4:6c:55:d0:29:
af:d0:53:03:44:a8:5e:e5:89:5c:a2:73:51:6e:74:
74:e4:21:30:88:1d:61:2a:d0:0a:17:27:34:2f:c0:
6b:aa:bc:04:52:cc:9a:c5:a8:b1:7b:f8:fc:ff:a1:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4B:C0:DC:DF:EC:59:BF:F7:C8:1C:E6:1D:E5:7D:32:BB:F0:C8:41
X509v3 Authority Key Identifier:
keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2c:54:17:e7:b8:33:a2:11:fd:36:f0:3d:26:51:cc:78:8a:
91:6c:ed:8e:85:1d:d1:35:7b:c5:6a:f1:62:fd:a4:d1:ac:2b:
f3:56:7f:49:e2:8b:be:10:8d:ce:1c:99:60:29:49:eb:61:7f:
f0:d8:b7:a5:71:e3:9a:4e:1d:8a:d4:42:7d:6f:82:b1:b9:63:
05:7c:ea:1b:d9:4d:bd:65:44:46:32:8e:b5:71:83:08:6e:e4:
3a:65:f6:49:11:41:b3:3b:1a:1f:0d:d3:57:f3:3d:90:ca:97:
e2:72:29:99:a9:17:0f:6c:58:ae:0f:de:d7:b0:42:57:d9:2c:
c3:01:65:b1:22:37:b5:aa:4b:6b:98:6c:35:f3:ef:f2:9e:1e:
04:8c:1d:80:34:4e:87:88:b5:e0:fc:eb:3c:2c:97:7a:8f:7f:
86:34:0e:78:0a:e8:b9:5d:c2:92:61:7b:c1:b9:d8:34:3a:45:
f8:03:d2:d4:af:f9:eb:ae:43:e8:73:9d:fc:3e:9d:41:78:a2:
a3:e5:75:2c:91:3d:46:de:40:11:b6:ab:c4:e6:3d:1e:f7:9d:
cb:fe:9d:f3:ee:3e:f1:01:b7:f2:24:af:ae:9d:da:d7:01:d0:
d7:a7:db:a4:7d:19:95:d0:c3:e1:3f:cf:27:7d:d8:b6:1f:6b:
b3:12:ff:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:20 2026 by rpki-client