This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: MgjtmnijQKj/56LmJ9GxZVIi8X1ubKg9WfW2A01y2GA=
Subject key identifier: FF:9E:D6:6B:87:02:46:BD:65:E6:10:F9:90:54:D6:A7:9D:67:AC:5F
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 019C427D1AC477264DED266B0219A69C514C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 17A1
Signing time: Mon 09 Feb 2026 13:00:20 +0000
Manifest this update: Mon 09 Feb 2026 13:00:20 +0000
Manifest next update: Tue 10 Feb 2026 13:00:20 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: bazv8cP1eWr06L8/+Q70wwPCrzDtvNCpsBRzGlTMfTI=)
2: pXi_lWorquYMeFo_GByXEjAC2iQ.roa (hash: C5ppARZwdDpqOjifyYQPpcbZiTRFDLNkGmS29XOlq5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:1a:c4:77:26:4d:ed:26:6b:02:19:a6:9c:51:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Feb 9 13:00:20 2026 GMT
Not After : Feb 10 13:00:20 2026 GMT
Subject: CN=ff9ed66b870246bd65e610f99054d6a79d67ac5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:9c:d5:1e:2b:80:45:e3:cd:6c:bd:fb:c7:
52:30:1e:ec:34:00:af:7c:56:f7:32:6d:cf:15:99:
00:c0:1d:2c:25:ee:d8:da:6f:b3:40:c3:04:15:13:
8b:86:90:14:4c:19:ad:1d:31:03:df:03:19:9a:f7:
b3:28:3b:8b:97:dd:ae:a4:fe:46:0e:60:7d:b3:d0:
00:d6:67:36:7a:d8:c7:4b:b5:cb:36:c0:3d:61:01:
5f:62:94:ba:49:eb:99:29:7d:0d:7a:c1:25:dc:f2:
cd:6c:66:88:15:e8:e5:6e:2a:ce:36:0f:3b:4c:36:
36:5a:7f:5e:f9:54:b0:e8:5f:35:d9:73:5e:67:9d:
45:ae:5e:1b:50:da:42:94:34:b4:13:e5:84:92:51:
f4:de:fa:72:ac:5a:1f:c0:7f:83:ca:c4:58:17:72:
d9:28:92:55:59:cd:4d:89:2c:84:ed:7b:d3:7f:64:
02:f4:e9:89:df:dd:2e:e1:3e:b4:f2:f7:95:31:1f:
db:fb:4d:65:05:e8:41:ef:93:50:cd:fb:ba:29:a3:
75:3f:4b:5d:d6:4b:bf:70:56:83:d5:af:8c:86:af:
cc:b7:8e:32:40:0d:18:62:f1:14:86:a3:f5:3b:c1:
ce:47:a7:08:46:ba:3a:77:5e:09:9f:e5:e2:d2:fa:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9E:D6:6B:87:02:46:BD:65:E6:10:F9:90:54:D6:A7:9D:67:AC:5F
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a9:fe:93:00:63:c8:6e:58:f9:cd:c6:22:d8:3a:92:c1:47:
3d:37:fd:9b:4a:85:32:02:dc:66:c7:75:33:11:c0:90:ef:bd:
60:04:4a:a4:74:f2:dc:fc:3a:6b:cd:79:ac:9f:83:f6:4a:2c:
8e:18:ee:fa:71:48:76:51:e7:00:32:3c:c2:0f:de:65:a4:3a:
3a:85:c2:48:3e:c0:a0:45:7e:51:fc:35:f0:7a:2a:f9:3e:c7:
80:64:a2:da:e5:d0:53:4c:fc:1f:9b:ba:5b:e5:36:e4:2b:13:
1f:ff:e1:42:15:1b:05:23:68:f7:8f:30:96:6e:26:13:6d:cb:
cc:e8:d1:3b:68:45:f7:1b:2e:63:fc:92:e8:ce:e9:65:fa:d4:
d9:f0:c7:58:d0:9f:cb:fd:78:a3:23:19:1f:b8:2d:2e:64:4d:
b2:74:1d:73:1a:27:fe:aa:ce:1f:d0:7d:41:4c:91:d3:9c:fa:
9a:18:59:65:ae:38:94:61:04:69:07:67:2a:52:53:8b:06:5d:
19:92:64:fc:9a:3c:07:e6:1f:92:2d:3c:e9:dc:4a:5d:1d:bf:
7e:a8:fa:d2:c3:f4:f4:45:2a:bc:f2:97:0c:5e:f6:eb:d3:51:
b3:30:57:a4:dd:6d:4b:89:09:0c:62:42:c8:d6:dc:65:9c:90:
e1:e5:c8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:59 2026 by rpki-client