This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File: fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier: RLDtH38OQRd6Uo3wuR04lV99Gh698S3lyIQSFaXsSlg=
Subject key identifier: BF:B4:BD:AD:70:78:33:A8:C2:2D:54:B6:75:C0:11:A0:9F:F9:AC:13
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 019BF38685A166F8EF171DE3ECBC21310BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number: 0DDE
Signing time: Sun 25 Jan 2026 05:00:37 +0000
Manifest this update: Sun 25 Jan 2026 05:00:37 +0000
Manifest next update: Mon 26 Jan 2026 05:00:37 +0000
Files and hashes: 1: 6TdIaoE-7jQiTNh_dWHlpwe6UDo.roa (hash: j4t4I6cY/9eHSVrCrZ3KgotxYKtqwlRdd6z9B4fKbI4=)
2: 8jiMmtjBP-Nl5CilvW2gvoNo4Kk.roa (hash: wwioWnWaBsWC9aXvqkrOolVE9wvD6iqSMIbgZIUy8Z0=)
3: M-CNQ4sKZCkmxmSMpP77FW0ZRzE.roa (hash: UdJnYqAMGHmI8rbxklRX18DI3O/ycqsbsTsYHZeAV1g=)
4: bPn6Pnrnq_fR0whtvig8NC0wE0s.roa (hash: h+p2mlfebNvV+IBAlzDzoCLea72ZuA/UCOZBu/ku9aE=)
5: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: Z0fN9qMbeDHgi6JcdvqnwkcPry2iUpfyUa/WCAoFD8U=)
6: ywfKrP4cRTy2QlVvbLFd6cmyt18.roa (hash: Gmr+SV2YTd76CuhRcbMnXPX7jhYpfpofEYm1FZomnvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:86:85:a1:66:f8:ef:17:1d:e3:ec:bc:21:31:0b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jan 25 05:00:37 2026 GMT
Not After : Jan 26 05:00:37 2026 GMT
Subject: CN=bfb4bdad707833a8c22d54b675c011a09ff9ac13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:99:d6:b1:2c:09:8f:f7:3f:f0:44:5b:ca:
72:db:79:04:0c:12:69:a1:1d:d1:e0:4f:f8:dd:e5:
92:6a:3c:ce:30:a7:1b:49:53:e6:14:0d:a0:64:98:
60:f4:b1:e0:ea:dc:2d:7d:69:43:2c:d4:77:65:23:
69:72:d3:28:a5:08:85:22:79:6a:e6:ca:c8:b4:12:
bc:31:92:4d:e8:d7:94:93:db:89:d5:eb:dc:55:01:
c0:e1:f4:1d:6a:44:dc:8f:2c:ca:5a:7e:d1:37:ad:
f4:69:1b:22:83:18:37:ad:7b:7d:81:84:c0:db:f0:
95:37:4c:19:3b:86:bd:1c:45:1b:53:8b:06:e7:85:
83:0f:db:73:d4:34:f3:a0:04:e0:ec:9b:db:6b:6c:
e8:97:40:93:64:dd:81:f9:df:be:dc:5b:ad:dc:9c:
2e:96:07:1f:37:3e:65:a6:db:e5:d7:95:2d:59:a5:
12:34:39:4a:58:b8:02:b8:a3:95:3f:75:e8:a4:c7:
07:12:bf:44:5b:95:2a:0e:fc:60:f2:eb:df:99:54:
9a:d8:16:35:c7:85:ff:31:a7:fb:2e:9c:11:76:27:
36:db:e0:8f:86:1c:1f:1d:34:86:cc:92:65:88:df:
5f:e5:e3:3b:e9:df:d8:cc:db:65:88:07:0a:2e:7d:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:BD:AD:70:78:33:A8:C2:2D:54:B6:75:C0:11:A0:9F:F9:AC:13
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f1:c8:1a:17:6c:bf:ba:a5:6a:99:3e:34:75:37:ce:25:50:
1c:cc:a3:61:a1:7f:c6:6a:be:18:5d:cd:ad:e6:60:3b:c1:7f:
66:06:f7:f2:c2:cc:94:f2:82:98:23:81:18:04:ee:82:6a:4b:
c6:76:65:fe:7c:ca:35:65:9e:20:ed:a1:b9:30:f9:3c:fc:fb:
fe:cf:93:cd:2a:ff:a2:8a:44:42:a7:4a:e4:01:f1:ae:4b:68:
d9:8b:52:b1:80:67:01:28:f0:87:95:f8:9b:8c:7a:d6:11:64:
55:fd:7f:cf:ae:59:15:61:b3:91:5e:8b:70:a9:a0:83:a7:d1:
cf:40:53:f6:40:85:39:f4:c4:f7:63:e6:23:34:bc:5f:12:e8:
00:3a:95:cc:13:1b:82:2b:f2:5f:ec:42:ce:75:3a:84:f5:0a:
2b:79:a6:ea:a0:ca:55:79:67:d0:17:5e:0a:f8:b3:fc:3c:ca:
0d:20:4c:08:f1:0e:39:9f:3b:02:49:7e:90:c8:15:f3:8f:ee:
88:31:91:ce:1e:6d:ef:7e:3e:33:22:58:b0:2e:f3:7c:26:1c:
e4:bd:76:ed:52:1e:4f:d0:1e:df:eb:31:31:ef:75:0d:80:75:
24:aa:2e:28:7e:9a:c6:c7:f6:3b:e8:05:99:9a:a4:c4:90:90:
43:fc:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:25 2026 by rpki-client