This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File: 1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier: 9hyYL0MuWem59lScCbyxopg+2AxEjHJyyoJu+FO8hZo=
Subject key identifier: AA:90:05:BE:38:3A:9E:78:C9:27:73:07:9B:F1:C9:E2:32:35:89:09
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer: /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial: 019BF46249BB05DC0F13104C05F928761DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number: 0766
Signing time: Sun 25 Jan 2026 09:00:40 +0000
Manifest this update: Sun 25 Jan 2026 09:00:40 +0000
Manifest next update: Mon 26 Jan 2026 09:00:40 +0000
Files and hashes: 1: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: Hjpujxp8b2UfUyi8lrOuxJR3I5DrH5ZzUk706tU71rA=)
2: abVrM-FislRQr4Jmc_QgEdjxoJk.roa (hash: EdLdAhibmMBnrzkLj3SZLrtAjzaNkVfN1saf4F1Axa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:62:49:bb:05:dc:0f:13:10:4c:05:f9:28:76:1d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Validity
Not Before: Jan 25 09:00:40 2026 GMT
Not After : Jan 26 09:00:40 2026 GMT
Subject: CN=aa9005be383a9e78c92773079bf1c9e232358909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:5f:18:68:44:ea:ac:e6:07:28:a0:a5:81:
d2:a5:9d:c4:c0:91:36:e2:be:78:4a:f1:98:c6:79:
79:dc:0d:a5:94:2e:74:f3:db:51:9c:b5:d8:8b:b1:
4a:84:eb:68:94:c2:2e:e0:93:06:9b:c5:0f:85:78:
ec:14:40:cd:5a:14:63:f3:eb:e2:cc:fb:06:48:78:
80:ab:f3:b2:e2:cb:5f:88:2d:cf:80:25:bd:77:5d:
f3:4a:b5:e7:74:ee:06:32:a3:f0:6e:e4:e9:09:74:
79:98:63:a7:3a:ca:57:24:e7:65:07:d9:9e:ac:46:
97:b7:75:b4:88:10:3a:b5:40:e8:96:99:a7:29:16:
cc:b6:0f:91:74:1c:80:d6:e7:dc:43:2b:4f:87:ff:
93:0b:c3:a3:7a:57:67:77:93:38:7e:48:0a:2a:3d:
ca:5d:5e:0e:62:34:b5:15:35:63:d4:a9:fa:49:39:
ea:68:95:5f:1a:38:5d:64:49:72:2c:b2:07:01:59:
aa:2c:ab:9f:b4:3a:94:d5:a8:12:25:1d:21:f6:3a:
0c:41:51:6a:d5:30:b1:f3:d4:e1:b5:1a:b3:bb:bf:
0a:49:d1:3a:fa:cb:d6:08:5f:ad:c6:6b:22:68:eb:
7f:08:43:5f:2a:b4:41:a6:10:4e:ee:a2:36:ab:79:
1b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:05:BE:38:3A:9E:78:C9:27:73:07:9B:F1:C9:E2:32:35:89:09
X509v3 Authority Key Identifier:
keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4c:72:bc:0c:00:3f:21:d8:70:2d:11:17:f9:ab:d3:a6:78:
0e:3a:05:53:63:6b:bb:61:81:88:5a:cf:c7:a7:75:19:73:8f:
10:ed:42:45:2c:dc:b5:a7:65:df:bc:5a:bc:d9:0d:7e:12:36:
65:d4:99:25:8a:81:5a:39:44:b0:91:26:be:29:1d:d2:a8:ea:
d6:46:5c:c4:26:a3:5f:e0:d8:85:78:ce:cd:a1:46:a8:f7:66:
9e:18:6e:e3:af:c2:27:f6:8f:54:69:58:63:94:1e:40:f2:71:
01:64:9e:00:81:8b:94:3e:f2:cd:ed:00:77:29:bd:e2:0b:b7:
29:4d:ca:ad:2b:4a:a1:07:4c:3a:78:47:7e:90:5f:24:a4:01:
f6:55:1a:5b:0e:58:36:84:23:63:e5:14:3a:57:b9:73:9c:87:
e0:91:ff:97:a8:44:c5:f7:ea:f3:1f:87:62:91:fa:53:ca:50:
a9:8e:fa:fd:76:ae:9a:29:ee:8d:d6:a2:6f:7b:4d:37:fb:10:
67:09:4d:f1:18:30:e5:6a:0e:99:29:7f:f1:c3:3e:20:2e:1f:
ce:f6:e0:aa:01:29:f9:cf:4b:bb:d0:f3:44:7b:1c:53:2f:6f:
3c:ae:41:e6:cf:fe:64:69:25:fd:f4:31:61:07:3b:fb:a8:61:
2a:be:05:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:14 2026 by rpki-client