This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: Sz0YboblPbKiB4sxqPJDgNmZdUIEdv+gfK1HD7Kw3VE=
Subject key identifier: C6:4F:8A:61:D5:BF:D9:D2:A2:DC:5D:E2:72:E9:AE:6F:60:9D:61:51
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 019BF2AB14940D1758CE920FF0CC32363C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 0929
Signing time: Sun 25 Jan 2026 01:00:56 +0000
Manifest this update: Sun 25 Jan 2026 01:00:56 +0000
Manifest next update: Mon 26 Jan 2026 01:00:56 +0000
Files and hashes: 1: 1-kKT9I5hXcGMY4BXtI91L6PWY5Q.roa (hash: hWaDKKuFN6+6e36Ikm8e0jjTVm6uyDQ92iqKklLnoi4=)
2: NEQkMGAJAfKugYCF_SBXZZt_zOA.roa (hash: 1zriG+EOUPPANFuX8FQR4exMMCMJ2lG+QMPasFhRCHE=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: fahLJYdSLHyrpWbZ19PH3X5c7SD3KllUC6bdbKFy8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:ab:14:94:0d:17:58:ce:92:0f:f0:cc:32:36:3c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Jan 25 01:00:56 2026 GMT
Not After : Jan 26 01:00:56 2026 GMT
Subject: CN=c64f8a61d5bfd9d2a2dc5de272e9ae6f609d6151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:d8:a7:6a:e2:e8:7d:a3:81:d1:2c:de:04:
fb:12:1f:62:fe:5b:a4:8b:1c:34:7d:91:dc:54:b5:
cb:d6:70:08:96:a7:68:28:7c:8e:d8:20:a5:ad:e5:
02:40:a7:29:8b:71:d8:bd:76:c1:7a:21:30:41:bb:
4b:4c:17:56:e8:33:c1:ee:7d:d5:75:c3:f1:ee:92:
04:61:38:ad:ca:45:f2:05:ed:d9:69:fd:83:d0:fa:
23:36:b4:4e:66:66:9b:50:45:8d:b7:92:e3:2e:93:
1f:c2:be:c2:e8:9a:67:05:7a:4b:96:c8:b9:ba:e5:
93:ad:b1:1c:cb:0a:c5:61:e0:88:02:12:ee:e5:fb:
bd:fa:f5:f6:c7:8d:a9:39:c0:10:01:cc:37:ac:2c:
89:5c:82:fb:4a:96:5b:96:4c:79:b6:79:20:8d:94:
6f:50:5a:50:98:0e:2d:1e:15:24:34:18:36:ea:a9:
9c:53:a1:f8:34:ab:8c:60:ff:dc:ea:ee:65:d2:36:
ce:b3:18:dd:a0:3d:b1:15:fa:ce:6b:31:4c:6a:09:
64:5a:ec:83:8c:50:c9:e4:71:99:74:e2:a7:2c:9f:
97:01:57:85:58:bb:85:c8:5d:1f:69:b5:e1:10:2a:
39:04:12:30:85:93:a2:22:f7:f7:dd:e4:78:36:d5:
fc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4F:8A:61:D5:BF:D9:D2:A2:DC:5D:E2:72:E9:AE:6F:60:9D:61:51
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3a:38:f0:a3:bc:ba:ba:5e:68:ac:49:ce:96:49:0a:a2:3a:
c5:d6:88:85:9a:9e:30:72:5c:c6:4d:46:a7:fa:6a:64:eb:42:
90:13:f0:17:a8:7a:42:1d:c9:40:53:56:9f:f7:a9:f1:ba:a0:
3d:19:8d:1a:63:21:6b:6d:a1:09:43:d6:aa:d1:20:e1:68:7b:
66:f9:18:59:a4:6b:7b:27:9a:77:aa:a7:29:3d:05:00:3b:5e:
11:7b:b9:2c:d6:55:17:7a:3c:93:32:2c:ca:7e:e2:5e:93:fe:
29:c9:42:e3:c2:ec:97:a8:0c:72:54:50:26:df:fb:6b:0e:83:
53:91:2b:5c:fc:8d:e9:22:54:8b:d5:ea:2c:b5:ff:b1:d3:78:
f8:61:90:2d:ee:3c:bb:f6:a7:dc:2d:45:30:aa:ab:2c:c4:23:
d6:a4:25:33:f5:18:6b:fd:92:3e:7c:fd:c9:a9:58:76:e7:a0:
7c:f0:76:83:ee:73:ee:88:89:02:18:32:6d:6a:4e:d3:fc:e6:
42:6c:bb:f0:39:80:e9:60:ef:e9:77:0a:8e:2f:92:8c:7a:8e:
f1:e2:76:d8:95:6e:21:cc:b9:d4:ed:00:b0:ef:74:66:cf:e4:
c5:e0:67:7e:69:9a:51:eb:ea:d6:19:40:0c:2f:cb:07:ca:5d:
c6:93:4d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:45 2026 by rpki-client