This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: NUl55vtYLDy1UPTeLGuJ2jtmHJLmEL9EJflXGtbwtIw=
Subject key identifier: F3:37:1C:A0:98:FC:BB:68:AD:A6:32:5A:56:3E:82:5C:4E:89:7C:51
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 019BF53DFC8F603DC7AEFA88887FD79CE97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 0B29
Signing time: Sun 25 Jan 2026 13:00:38 +0000
Manifest this update: Sun 25 Jan 2026 13:00:38 +0000
Manifest next update: Mon 26 Jan 2026 13:00:38 +0000
Files and hashes: 1: 2e8QyLYMT4HWwfUGaImHeP_tGTY.roa (hash: s9h03bDzb0Cy0LO5kY73K6dn/N9HUik5sgJSj+kQ3k8=)
2: Y28Wd-rLHaf4YfijKKoceP6pCO4.roa (hash: T4TEmypQSq/p5gS6mPa8ZhWCLwbTNsBlfya0BmZTPbQ=)
3: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: yUFmuBw8ho2XKwd7oQESvZL9bwgK2beoKgqjbK1OREQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3d:fc:8f:60:3d:c7:ae:fa:88:88:7f:d7:9c:e9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Jan 25 13:00:38 2026 GMT
Not After : Jan 26 13:00:38 2026 GMT
Subject: CN=f3371ca098fcbb68ada6325a563e825c4e897c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:0f:07:a1:52:c4:af:2c:e6:ba:c9:e2:77:
6b:56:da:17:56:21:3f:61:8c:41:40:7c:87:8e:ab:
1d:78:55:63:60:9e:c5:4b:ab:d8:e1:7f:27:a4:c2:
6b:26:b4:6f:35:02:f7:63:88:df:e3:53:30:de:b9:
26:31:ca:75:bb:82:2a:94:d5:cd:4e:d9:d0:12:02:
66:9c:51:df:35:fd:63:9b:54:17:ff:c9:4e:72:02:
5a:90:4a:1c:5a:a6:66:c8:a1:f4:52:5d:32:52:13:
d7:48:8c:2b:d8:59:86:df:cc:a1:7b:14:8f:9e:48:
c8:b9:1b:a3:58:f6:2d:66:b4:4d:e6:14:5a:ef:94:
46:9a:d0:5a:94:c8:38:07:36:87:e7:ec:ba:86:cf:
a1:dd:a6:53:56:84:d1:3e:92:02:a3:c5:23:9f:a1:
38:58:63:a7:0d:17:ea:1e:2a:22:84:cf:d6:8a:04:
8a:1b:bd:e4:7d:45:5d:a6:4f:fc:f7:82:1c:ba:c9:
30:e8:53:eb:17:f2:d2:ab:29:bf:84:70:25:12:69:
d5:c9:fc:bc:14:4c:6b:d0:d1:1e:e5:be:db:fa:89:
c5:2a:ae:64:ee:86:87:de:49:d8:d2:92:e8:37:d5:
36:0d:8a:a7:01:a3:43:27:55:d2:c5:b6:2c:51:52:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:37:1C:A0:98:FC:BB:68:AD:A6:32:5A:56:3E:82:5C:4E:89:7C:51
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d2:d1:d4:75:c9:4b:60:4c:2b:e9:58:51:23:b4:7c:7e:ef:
54:f0:ca:b9:12:7b:ae:51:30:ce:20:0b:00:e9:91:f3:7a:c2:
24:cf:59:d9:0b:ed:15:ae:a3:8c:ff:86:e2:a9:a3:5c:cd:56:
b4:ad:47:bc:ec:f4:32:59:df:88:0f:43:ab:78:bb:bd:64:b8:
04:6e:3f:39:33:7d:50:7b:fb:4e:f0:96:15:94:06:f9:f8:08:
95:b5:78:d1:d9:37:57:f4:1c:a9:82:85:d3:0f:fd:9a:54:5f:
a7:43:ee:42:9d:67:c4:4e:f3:a4:4f:a9:16:a0:a4:25:14:6a:
33:8f:96:6c:bd:7b:f4:09:5c:1d:f0:88:6c:63:ce:38:81:6a:
f0:95:a9:63:a5:b7:23:88:6f:05:0f:4b:a0:d6:3d:a9:ba:8d:
36:c4:10:cd:5c:a7:8c:47:6a:67:37:74:68:1e:ca:4b:c3:4f:
99:9e:38:33:34:c8:4d:f4:6a:ed:96:74:1b:06:2d:7a:f4:bb:
99:13:38:8c:6a:12:f7:64:39:37:11:a9:7f:3c:58:6b:ce:4f:
4a:f0:7a:2f:8a:4b:ab:d7:f8:e7:86:f5:d5:e7:4f:77:e6:31:
bf:ce:b6:f3:a3:e4:5d:45:53:9c:a6:79:e2:6b:04:24:c2:d8:
6d:bf:7d:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PfyPYD3HrvqIiH/XnOl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZGM0MGMzZGJkZjgxOWQ3NDEzZTc3MmJkODc1ODE0Yzdl
YWY1NWUwHhcNMjYwMTI1MTMwMDM4WhcNMjYwMTI2MTMwMDM4WjAzMTEwLwYDVQQD
EyhmMzM3MWNhMDk4ZmNiYjY4YWRhNjMyNWE1NjNlODI1YzRlODk3YzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO4PB6FSxK8s5rrJ4ndrVtoXViE/
YYxBQHyHjqsdeFVjYJ7FS6vY4X8npMJrJrRvNQL3Y4jf41Mw3rkmMcp1u4IqlNXN
TtnQEgJmnFHfNf1jm1QX/8lOcgJakEocWqZmyKH0Ul0yUhPXSIwr2FmG38yhexSP
nkjIuRujWPYtZrRN5hRa75RGmtBalMg4BzaH5+y6hs+h3aZTVoTRPpICo8Ujn6E4
WGOnDRfqHioihM/WigSKG73kfUVdpk/894Icuskw6FPrF/LSqym/hHAlEmnVyfy8
FExr0NEe5b7b+onFKq5k7oaH3knY0pLoN9U2DYqnAaNDJ1XSxbYsUVJEUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPM3HKCY/LtoraYyWlY+glxOiXxRMB8GA1UdIwQY
MBaAFHzcQMPb34GddBPncr2HWBTH6vVeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yZTU0M2QtNGVmNy00ZTg1LTg2N2Et
OTlmMjAwNDY1OWQxLzEvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yZTU0M2QtNGVmNy00ZTg1LTg2N2EtOTlmMjAwNDY1OWQx
LzEvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtLR1HXJ
S2BMK+lYUSO0fH7vVPDKuRJ7rlEwziALAOmR83rCJM9Z2QvtFa6jjP+G4qmjXM1W
tK1HvOz0MlnfiA9Dq3i7vWS4BG4/OTN9UHv7TvCWFZQG+fgIlbV40dk3V/QcqYKF
0w/9mlRfp0PuQp1nxE7zpE+pFqCkJRRqM4+WbL179AlcHfCIbGPOOIFq8JWpY6W3
I4hvBQ9LoNY9qbqNNsQQzVynjEdqZzd0aB7KS8NPmZ44MzTITfRq7ZZ0GwYtevS7
mRM4jGoS92Q5NxGpfzxYa85PSvB6L4pLq9f454b11edPd+Yxv86286PkXUVTnKZ5
4msEJMLYbb99cQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:53:50 2026 by rpki-client