This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
File: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft (raw, json)
Hash identifier: b5v76baniBoCJUv/BYEKCJyCi7Fij/vClXdoFhqdxds=
Subject key identifier: C9:6F:9F:FF:2C:5E:30:95:D0:7A:A9:5F:C7:09:DA:0D:47:AA:68:BD
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial: 019BFD2E74101019624D5C897CB19AFB5928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
Manifest number: 0AD3
Signing time: Tue 27 Jan 2026 02:00:38 +0000
Manifest this update: Tue 27 Jan 2026 02:00:38 +0000
Manifest next update: Wed 28 Jan 2026 02:00:38 +0000
Files and hashes: 1: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl (hash: vi/jOU5addTTaHZmnv26C27FNdghcSJByxgdVW3xtf0=)
2: GHotn1I_CfqFAPEWFyv9br8ia3I.roa (hash: jZG9+3CBzuOz4wMuP+83/hjNEuOMEsA5C1lYAS1ilM0=)
3: LSzcWbNsdVdvEIBim3BJCzhTVYU.roa (hash: FuA94sbSiSEVegunW1ULoVnEChhQx9cTZsUwwYAqYyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:2e:74:10:10:19:62:4d:5c:89:7c:b1:9a:fb:59:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Validity
Not Before: Jan 27 02:00:38 2026 GMT
Not After : Jan 28 02:00:38 2026 GMT
Subject: CN=c96f9fff2c5e3095d07aa95fc709da0d47aa68bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:74:43:fd:3d:a8:72:e9:24:53:84:df:e2:
4f:3a:bd:d3:37:39:c1:e4:bb:9a:c1:76:c9:ae:2b:
4a:f2:40:7f:a6:10:e3:a9:a3:93:09:1e:b4:0c:e9:
c8:02:2e:31:cc:e8:f4:f4:cb:38:b7:69:ef:17:63:
d0:9c:57:05:9a:87:4b:e7:5c:3c:14:ae:a1:cc:83:
ac:b2:1a:62:2e:cf:76:cf:0f:1c:8f:61:3a:bb:ad:
5d:31:28:a1:9f:58:72:78:82:ff:cf:53:09:fd:e4:
5c:b5:90:18:44:42:47:99:5f:66:6d:20:c0:b8:70:
6f:96:3b:7b:e0:9b:66:9a:90:ac:0d:26:66:fe:96:
2f:e2:a7:7e:2c:7a:d7:29:9e:b7:dc:ab:26:c7:f9:
c7:0e:9f:86:f1:e6:37:0a:9f:13:6b:40:2b:c8:6b:
6e:4a:ff:4b:e1:86:fd:36:98:1e:5d:80:2d:36:79:
ea:5b:8f:80:3f:42:46:19:55:9c:76:76:0d:2b:41:
7d:97:2f:80:46:62:16:5a:32:90:71:39:33:67:57:
15:59:5d:01:a6:57:70:32:ac:ad:85:7b:8a:40:14:
b4:08:e4:54:ed:15:23:f8:6a:c3:65:90:47:29:38:
17:24:e1:12:ea:5e:71:6a:a5:7a:7f:9b:7e:89:f9:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6F:9F:FF:2C:5E:30:95:D0:7A:A9:5F:C7:09:DA:0D:47:AA:68:BD
X509v3 Authority Key Identifier:
keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:77:14:ee:c9:9b:c2:74:1b:28:d0:7f:a4:79:90:b9:f9:35:
1f:e2:b5:70:4d:02:74:25:fb:05:f9:5c:f3:25:ca:51:4f:4b:
a0:15:9d:a9:9c:ac:5b:fb:5d:95:87:7a:cb:a8:88:aa:0c:ca:
55:ac:97:af:a8:91:37:e9:a2:7a:5e:8d:12:c7:e0:67:aa:e1:
98:ab:d9:69:45:13:24:d9:48:90:a7:71:94:8d:d1:ad:39:dc:
b1:0a:f3:46:21:de:df:05:27:04:96:5c:0c:78:f2:ce:90:e9:
88:a4:4e:b8:02:27:43:95:b6:76:dc:0d:c0:2d:1a:98:0d:0f:
91:6f:16:38:0c:05:a9:c7:76:63:c8:51:10:57:cc:b2:57:e4:
a8:e8:4e:61:4a:85:19:14:d0:35:a5:d3:75:4b:b9:48:a8:8d:
62:d2:3d:6c:92:cb:0b:56:5f:99:07:62:6c:e2:ff:6f:d0:98:
be:81:d1:6a:c1:aa:af:57:a6:62:ee:03:8c:75:8e:4a:7b:98:
b9:89:c5:46:ea:b4:6d:83:69:0b:55:a6:ad:46:74:46:37:c4:
7a:9c:49:7b:c2:98:af:24:66:1f:cb:0c:c7:f2:ed:97:88:46:
dd:6c:05:bb:ba:39:84:0a:60:99:3b:fb:39:e9:3c:c2:ac:8c:
e6:c3:52:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:17:39 2026 by rpki-client