This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File: s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier: TZFL+i8GgCNAHQyEP11AnW1Q/pkeCsczD1Jsfbj9xaU=
Subject key identifier: F4:AB:DA:AB:86:6F:7C:61:6A:D2:FB:7A:60:1F:43:BE:1E:D5:D1:F6
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer: /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial: 019C040C329B6A75B120ADDED6E5371BED20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number: 17F9
Signing time: Wed 28 Jan 2026 10:00:33 +0000
Manifest this update: Wed 28 Jan 2026 10:00:33 +0000
Manifest next update: Thu 29 Jan 2026 10:00:33 +0000
Files and hashes: 1: 6k_8Ry46ufIMlLNL3Vyss6dmqJg.roa (hash: ckIzjsDp2tzcwJkmRuzZHNnhVct2HecFAgceUTxWQmI=)
2: F3O8-dZr8u4d-bBHpUAIaVdBxYs.roa (hash: nGzmqxCVgUOHa3kRFVvwgOvg2hHgbd0FVIdzBnCIcS8=)
3: LadvVkKu3wXT617aXlUlsKUiwvs.roa (hash: 5tkpntbZyp0kecx0i9/sz7tiG+x/tBJaYqWhzJ+ue10=)
4: bRgCnNYxProDC3XWcoK1RwC3iRo.roa (hash: TdmHYWnUww+1ilHLweinppnHuzhkh+7SLt4lxkgAHBM=)
5: gUsfRW5v6N4S4q5wR9juMArT4gY.roa (hash: 75aFyyp5OXyu2pt0nss+h3JtO3zNLiVM+h5iKxCtB54=)
6: maMxYhW9A6VAq_vow3Vq5mrJeV8.roa (hash: iGK/wAfndjwmPr7EChSqOCdboy0xOaABeT0HtMm54R8=)
7: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: iOiBg1L5qXHbMywiqsUw2b9cQJ3mjG8AeYBLJczlG2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Jan 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:04:0c:32:9b:6a:75:b1:20:ad:de:d6:e5:37:1b:ed:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Validity
Not Before: Jan 28 10:00:33 2026 GMT
Not After : Jan 29 10:00:33 2026 GMT
Subject: CN=f4abdaab866f7c616ad2fb7a601f43be1ed5d1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:f0:ad:ed:e6:aa:ef:5b:58:eb:bf:65:00:
43:48:62:d6:22:a9:d5:b9:bf:3a:4c:61:81:bc:8b:
1e:2f:cb:86:ca:26:09:ae:85:31:e1:ac:75:e3:c9:
9a:8c:72:e6:bf:c1:59:e4:32:37:5a:88:06:bb:36:
4c:86:0d:09:8e:36:72:70:0a:b5:ca:10:13:6f:29:
a6:8f:35:28:bb:fb:e4:5c:16:bb:68:b5:f8:3f:65:
91:2b:c3:11:6b:cd:37:f2:b1:e2:b3:83:cf:ea:6c:
17:85:30:42:9c:02:a3:25:36:e6:c5:bb:b4:40:1c:
fe:23:52:a9:aa:df:47:33:96:0c:cd:e9:cc:d2:89:
97:24:5b:46:41:56:50:4b:36:50:d8:dc:73:04:dc:
64:fb:6f:62:dd:38:ac:cc:83:6e:2a:c5:c4:1d:24:
7e:a9:ea:6f:53:da:76:a4:cb:7c:f2:99:f8:92:c4:
42:ac:44:ee:ce:af:a7:47:6d:f5:d3:be:9e:2e:26:
d1:44:6d:bc:34:5e:3a:46:39:46:9b:70:b7:28:12:
9e:69:8e:fd:ce:3a:aa:06:21:d5:e8:e4:22:4f:11:
30:42:4a:66:f4:00:68:87:a9:d5:14:a5:e0:8a:87:
ac:ae:be:ce:57:ab:29:ab:0c:96:81:12:20:1f:4e:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:DA:AB:86:6F:7C:61:6A:D2:FB:7A:60:1F:43:BE:1E:D5:D1:F6
X509v3 Authority Key Identifier:
keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b5:3c:85:79:6b:b8:f9:c6:ba:ac:77:69:22:71:f4:8c:e4:
6a:be:bf:6a:68:8e:c0:cc:19:5a:14:0c:83:90:30:1a:22:7d:
97:92:1b:b0:42:c7:71:9f:d2:65:12:fa:1c:5d:63:1c:39:64:
ae:fa:6b:b0:cf:18:7f:b7:2f:41:2f:93:25:2e:10:61:db:99:
6c:54:15:60:12:47:71:ea:16:29:28:35:63:f6:fc:41:f7:25:
8a:f4:c5:cc:ee:f4:b2:af:af:9a:2b:c3:3d:a7:00:69:1d:2a:
d1:11:85:55:e6:f3:c6:2e:f3:21:bc:ea:0e:69:a5:e0:74:5a:
2e:cd:da:6b:08:1a:50:d0:f5:19:c6:9e:96:2c:c8:28:6b:f7:
fd:c2:e4:8d:a9:39:39:9d:d9:f9:9d:b9:a6:fa:af:e9:57:3a:
0c:05:2a:a9:b9:a0:fc:2f:13:38:94:fb:ce:a5:a0:13:47:9c:
4f:42:2b:24:d2:8d:79:c3:94:46:d5:25:0c:5a:18:1c:d7:cf:
f3:cf:aa:2d:ba:4a:45:7f:8e:f8:ee:3a:8d:15:c3:5b:06:ac:
a3:e6:e0:9f:bc:1d:1d:19:3f:42:9d:99:02:7b:12:7d:f9:8a:
1d:6b:d2:39:ab:b2:5b:f2:be:f4:3d:31:04:3d:1e:2f:84:ec:
65:73:a9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 20:01:50 2026 by rpki-client