This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
File: 1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json)
Hash identifier: /F3aMa8q60b7TabrPUMHrUrOqn4CAOKnxGSWmdes+/U=
Subject key identifier: 38:9B:17:9C:9E:D6:E6:43:C5:E5:DE:F2:D7:97:02:AC:1D:80:82:1C
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 019BFEAF0FD38C39E0898A7543DEED2A1299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
Manifest number: 1101
Signing time: Tue 27 Jan 2026 09:00:44 +0000
Manifest this update: Tue 27 Jan 2026 09:00:44 +0000
Manifest next update: Wed 28 Jan 2026 09:00:44 +0000
Files and hashes: 1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: DiCCF0MzpxJ/3tmdhn+ePLv5Uy65egA0ZreOsSvjwqM=)
2: KO-QbiA4B8Fqmh4PoUG1b2CWqyo.roa (hash: AQjqAS5i/LVUFXeGIyKdhva6id7Kjy8HsHgnyuWVcqc=)
3: LBp-f2wTeEG__GeuFL9S2VPjFS4.roa (hash: jbigl4wtO4I3oLlMsdwWFhj1QBqpQaBQsh/wEl6VUQo=)
4: T7-uQqlLNMsiccxdjsoaTK4wseo.roa (hash: +BKfpUhxoHfLf7cPj1R21xoP1tto5+gxC04QZRCZI6c=)
5: ap691plquRdyX3vt85LxuWpbm1c.roa (hash: khufkxMKrWAd/D05QdS5OQV/ljvmohRpPsDkx0sZzKs=)
6: eWAGfLfEp43y_iN-RtSZfG1D49U.roa (hash: POgI5hw92swzuRADnz2nsMp43qgG4i2QfhiIQqJZJqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:af:0f:d3:8c:39:e0:89:8a:75:43:de:ed:2a:12:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Jan 27 09:00:44 2026 GMT
Not After : Jan 28 09:00:44 2026 GMT
Subject: CN=389b179c9ed6e643c5e5def2d79702ac1d80821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:95:17:1c:db:94:a4:7e:9e:d7:42:f7:cd:
b0:35:73:f6:08:2f:70:70:b1:69:37:ac:68:7f:a0:
41:0d:40:b0:88:20:7d:92:27:9a:c8:f5:bb:fb:6d:
37:b2:0e:0d:c6:f5:62:84:cf:bd:2e:87:00:0c:f7:
ca:46:e4:27:20:7d:29:66:33:82:dc:9d:bf:1a:1b:
fe:1f:43:ec:5f:1e:9c:e1:4d:08:5d:22:54:08:a6:
03:8b:51:11:cf:cc:1c:7e:63:2e:bb:74:a1:8d:99:
5f:ad:44:74:12:f9:8f:5f:16:26:fa:a6:0c:1f:25:
0d:3f:d2:26:0a:e9:98:42:b3:8d:fa:31:e0:94:f8:
d0:8a:32:a6:6e:e1:de:4e:74:1f:e3:c0:55:7b:e7:
69:7b:c2:e6:85:a6:cd:ce:21:c1:19:ed:45:95:5e:
e2:79:1c:57:cf:47:2f:8d:26:4a:66:dc:ed:04:62:
d3:27:2a:f3:73:7b:f8:42:ec:9d:8d:31:09:ea:63:
71:be:c0:bd:23:3e:57:2e:f2:3e:de:6b:e0:2c:b0:
ef:11:da:4e:6e:f0:71:d6:81:76:29:fb:97:7f:e5:
57:b2:97:60:61:04:11:0d:5c:47:bd:0a:97:99:05:
dc:1d:17:f5:c4:ec:d0:8b:41:09:86:37:3b:93:f1:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:17:9C:9E:D6:E6:43:C5:E5:DE:F2:D7:97:02:AC:1D:80:82:1C
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8e:40:c5:b0:fd:86:1d:0a:22:ca:43:4b:5f:ee:e5:ce:b9:
09:b2:e0:f5:1a:17:77:99:e1:4c:81:6a:38:d0:7a:41:5d:60:
2a:29:5c:89:31:0d:7b:f9:a2:1c:f3:f0:75:96:08:40:47:0b:
8e:c2:8e:c3:24:b6:4a:ef:86:a1:4e:e3:c3:44:e7:6a:f9:1f:
e3:e8:80:65:9e:46:9c:52:d1:6c:7c:c2:04:86:5b:6a:fd:0a:
e2:ab:9a:bd:32:2a:28:a5:c7:66:73:d4:6a:fc:bf:02:ac:be:
da:34:94:00:fd:cf:a3:92:19:f2:b2:80:2a:9a:1e:4b:20:8a:
14:5e:be:2c:ad:05:61:eb:72:13:76:0a:51:cf:f8:3d:1a:5e:
48:c7:a7:cb:2e:77:12:99:4f:ce:9a:00:a6:b1:cc:89:fd:6f:
d6:9f:07:4b:c2:73:76:b5:b0:66:50:6d:4e:a8:fe:41:93:0c:
53:86:36:f4:72:a4:83:1e:b9:00:3e:0f:61:dc:9b:87:43:bb:
0b:9c:74:3a:91:e4:19:96:06:c5:32:71:c4:1a:38:ba:f1:82:
14:94:d9:20:03:38:7e:8c:ad:c5:b5:87:7e:bb:23:c9:b4:9a:
fe:41:77:ef:0d:9b:d2:ed:ae:2d:fd:35:77:cf:1a:6c:53:d7:
8c:82:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 12:44:22 2026 by rpki-client