This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: BxLaXIDjLtbOi2v8z3p2XNM490DMWhxjiww5KPO3TPc=
Subject key identifier: 1F:43:64:DD:96:02:8B:A6:20:47:6C:B3:F0:7F:5C:82:E6:92:E9:8C
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 019BF5755EB37B413AA91D3A3EBF567E8F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 17ED
Signing time: Sun 25 Jan 2026 14:01:08 +0000
Manifest this update: Sun 25 Jan 2026 14:01:08 +0000
Manifest next update: Mon 26 Jan 2026 14:01:08 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: ZPJYDJTOdPNm+bO4M0zXgJfUEYyni4bFRRy2Y15Zl3s=)
2: YJGwIn3Hfn4CXGcIfF5Sqvh4L2U.roa (hash: bxowbJpolM8aC3Tyo8Qe1Sfr/zVg+4jTgjgqaAuFw7k=)
3: nSoKCh55lGMD-7gl54YUpZEK_XE.roa (hash: KtXsJGsRFXBW5jD73l5yCg/b8S+cXBnf2k08FtiPNjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:75:5e:b3:7b:41:3a:a9:1d:3a:3e:bf:56:7e:8f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Jan 25 14:01:08 2026 GMT
Not After : Jan 26 14:01:08 2026 GMT
Subject: CN=1f4364dd96028ba620476cb3f07f5c82e692e98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:9d:29:29:00:27:da:20:43:ad:3f:58:eb:
b9:00:ba:34:7b:50:52:12:aa:f2:b0:e9:d8:6c:bc:
8f:9c:de:da:07:63:aa:ca:2d:7f:88:67:2d:e6:1b:
13:f9:e7:5f:45:ad:03:dd:ae:a8:da:01:cb:26:cc:
a1:25:eb:13:e1:86:d4:f1:f5:f8:32:80:af:42:52:
bb:e6:78:91:2c:94:1e:ab:71:c6:c0:8f:b6:09:f3:
28:db:ed:e2:8c:ce:4d:61:57:b3:f3:56:b6:30:6b:
40:50:91:df:b8:02:e3:d1:de:75:64:e9:51:fe:af:
4a:fe:f4:93:ad:c6:6a:a5:9b:82:a9:ee:eb:73:b9:
50:7b:31:d2:e1:b2:e8:31:02:a0:97:3c:3e:f9:8f:
9e:80:1b:7f:ae:79:4f:d7:e9:c4:5a:e7:7e:81:47:
46:24:58:4d:7c:e6:e6:f1:c0:cd:bf:ed:fe:39:09:
10:27:51:ad:60:c3:ac:c8:64:4a:ff:6b:ed:c3:5a:
09:eb:f8:62:45:3f:dd:84:3a:dc:ce:a4:1e:53:29:
49:1f:d3:7f:84:7b:7a:b0:0b:5b:a9:63:94:9b:2d:
d1:12:34:19:1b:ac:0f:d2:5b:d8:6a:62:68:e3:8e:
e2:ed:59:22:ec:3d:43:46:7b:a5:6e:43:0d:a6:51:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:43:64:DD:96:02:8B:A6:20:47:6C:B3:F0:7F:5C:82:E6:92:E9:8C
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f2:67:30:da:81:1c:40:d1:2f:30:d3:c4:99:5e:7b:b9:8a:
df:c0:2c:34:b3:2d:81:f5:be:cc:27:ac:88:44:af:1b:88:3d:
d6:58:10:c8:0b:a9:0f:9e:3c:1c:0c:b9:f9:84:3b:45:d6:01:
47:25:61:4e:c2:32:b7:15:6f:a5:88:bb:56:36:a0:42:0e:9f:
a3:ae:18:ac:cf:4b:63:d4:2f:57:f2:ba:97:98:db:e9:52:a2:
32:b2:2e:73:32:d7:21:65:82:37:1f:52:03:fb:5f:84:0f:30:
8e:d1:1a:e0:64:78:22:c1:8f:72:d8:ba:f8:16:8e:ff:6f:30:
90:ca:f0:b8:4e:be:97:bc:31:50:69:ea:d0:05:ab:46:dd:b8:
65:c9:9e:74:35:55:88:7b:95:3b:a8:af:b3:d4:9c:82:a0:97:
bc:66:c5:c6:08:f1:e0:c5:a2:b2:37:c1:c9:03:7c:43:5a:59:
fc:5e:ba:d7:d1:3a:02:17:df:c3:e8:78:75:c9:f3:43:89:16:
98:0a:d5:1b:34:d6:f1:dd:62:f3:ab:cb:ee:67:7c:6b:27:6e:
e5:59:27:84:f7:bd:cc:90:53:13:62:ff:31:41:f0:b6:00:b7:
9a:7e:9d:37:ed:e3:e5:60:3d:02:7f:8b:58:23:17:c6:9e:74:
75:e1:b5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:13 2026 by rpki-client