This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File: FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier: SJ5qDPsZqXJFn3ePx3/QFOXI9/ux5uicYBtdESz6WnA=
Subject key identifier: 8A:0D:4D:B7:C0:A5:1D:CC:BE:17:C5:75:C8:39:6A:A0:EE:17:73:95
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial: 019BF53E0F77813217D3F9B23D208AA97244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number: 0DDF
Signing time: Sun 25 Jan 2026 13:00:43 +0000
Manifest this update: Sun 25 Jan 2026 13:00:43 +0000
Manifest next update: Mon 26 Jan 2026 13:00:43 +0000
Files and hashes: 1: FDjfPJ1b2un54RcsxFzXrmIh9vw.roa (hash: Ccv8c7H4XZKfbC/jZrSX0si2V/3E8zoZJ2jD84UglfQ=)
2: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: F3m6omdBxrbODScmnTDk6U6pBVCd25E1MfRUD3Pb1UM=)
3: KDLd_3rPD976SC3XcGSVNGzbbrw.roa (hash: 9uOq1GB8z5yH6EUyG7/81m/WIFx1QPWTnjtsr+U7cVg=)
4: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
5: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:0f:77:81:32:17:d3:f9:b2:3d:20:8a:a9:72:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
Validity
Not Before: Jan 25 13:00:43 2026 GMT
Not After : Jan 26 13:00:43 2026 GMT
Subject: CN=8a0d4db7c0a51dccbe17c575c8396aa0ee177395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:46:1d:83:87:ee:3d:ad:ee:42:5d:aa:13:
17:99:9c:e6:f6:60:56:55:91:ec:60:0c:e5:10:f5:
2f:73:d6:be:d6:dd:28:20:fe:e7:ca:8a:0e:0f:08:
b3:13:f0:96:7f:1c:22:9e:da:db:c9:6f:7c:d8:32:
5c:6e:9a:1a:7e:eb:6a:dc:59:7b:08:bc:13:02:35:
4c:2d:06:c2:23:0c:33:bc:d7:cb:4b:5b:07:b3:d2:
59:51:06:33:cf:dc:9d:b4:b4:02:a0:63:4e:a5:33:
9b:dd:fa:fa:f1:79:49:9d:ce:82:4a:a4:83:92:a2:
34:b3:ad:79:9d:ce:12:27:86:73:14:86:3d:a8:c8:
f2:46:45:82:1e:30:a9:66:d8:61:fc:2e:52:ba:94:
c4:34:5a:18:0e:a4:c5:ab:d9:80:5b:48:ae:dc:b0:
72:e8:ba:0d:a2:28:64:08:b3:ca:90:1d:49:0d:d3:
38:79:d3:5e:c5:52:38:96:61:a7:62:6b:78:57:ee:
0e:6f:e4:fc:7a:3b:f5:65:66:88:cf:18:74:c9:de:
56:e7:2d:54:17:e2:c8:6b:7b:23:d9:95:39:81:96:
cb:3b:33:ec:53:fa:ea:9d:3c:82:ee:21:ba:c9:51:
2b:6c:36:e1:c4:b7:5d:6d:31:15:82:ea:1c:8f:ad:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0D:4D:B7:C0:A5:1D:CC:BE:17:C5:75:C8:39:6A:A0:EE:17:73:95
X509v3 Authority Key Identifier:
keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:88:7f:ad:e8:69:ad:3c:b5:0e:57:60:a2:33:51:cb:d5:4e:
e7:1c:05:77:64:56:2e:2c:d3:21:97:32:85:a0:5b:55:ab:89:
ed:82:bb:b0:18:50:ef:92:b2:8f:b2:4d:20:cd:39:ab:89:96:
2d:7d:33:9c:15:1f:34:19:a6:27:00:a6:b4:de:4c:26:65:1e:
e0:49:61:39:03:ca:1f:eb:c6:fb:79:b9:d0:01:de:78:f3:30:
55:ca:2a:26:ea:17:ba:32:2d:e2:22:d2:5e:87:15:69:08:08:
0b:81:27:1c:40:a9:07:dd:39:32:c3:93:a3:16:bc:a9:fd:b5:
cc:80:85:a6:fc:fa:3f:f8:9a:fb:b7:b5:f2:96:37:14:31:70:
98:4b:0a:67:60:65:7b:8c:8f:dd:44:53:d6:c9:84:b6:33:32:
c1:7b:3f:db:3c:e0:0d:17:74:f1:8d:e4:8c:c4:03:12:75:d8:
16:f5:2c:2a:9f:e0:d3:b9:f1:2b:5f:cb:20:97:85:97:91:69:
d1:8e:ad:d7:3e:8a:2c:26:4f:a9:80:e5:af:d3:af:c2:e0:52:
ff:cf:b9:de:8a:a2:8e:5e:8e:99:14:2d:4b:53:bc:6f:1d:32:
fd:be:5d:30:51:f6:a6:c5:01:ec:ca:5e:8b:80:2f:52:45:da:
18:9f:69:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:29:52 2026 by rpki-client