This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
File: F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json)
Hash identifier: sQJKk6Yv0wrle6yfY9duUkX5YPNXtDhROKDvHPSl2No=
Subject key identifier: 5A:8A:B7:EC:16:E4:8F:26:58:80:91:BC:1D:9F:C8:C6:E2:44:54:D0
Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
Certificate issuer: /CN=175a7290ec298c1b64d986306f1b24d3d3366986
Certificate serial: 019BFE786CCF48BD5441255CD583E35C2586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
Manifest number: 94
Signing time: Tue 27 Jan 2026 08:01:03 +0000
Manifest this update: Tue 27 Jan 2026 08:01:03 +0000
Manifest next update: Wed 28 Jan 2026 08:01:03 +0000
Files and hashes: 1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: GfRgLrk5tSq0n1RBHDtLhwuajz3y4fMjRM9p/DlleCQ=)
2: gCCPOIqrilObRY-20jJBuOKvlg4.roa (hash: SYvt+ifw0BqFAbOybuBVVwfG7PXUsxmnVp0Phqp9hmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:78:6c:cf:48:bd:54:41:25:5c:d5:83:e3:5c:25:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986
Validity
Not Before: Jan 27 08:01:03 2026 GMT
Not After : Jan 28 08:01:03 2026 GMT
Subject: CN=5a8ab7ec16e48f26588091bc1d9fc8c6e24454d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:ea:dc:5d:c3:75:ac:10:ef:2d:b7:f3:1c:
9a:f4:ca:8a:c9:a4:1a:ef:8b:39:83:40:01:88:8f:
9d:1d:9b:91:3d:25:5b:a0:92:e6:4d:91:a4:64:2e:
5b:8c:c6:61:88:8b:b0:e0:10:27:c5:6e:a9:1e:21:
55:66:4c:b8:63:56:14:c2:f0:f0:f6:09:d5:68:fd:
f5:38:d1:27:59:ee:39:61:00:fa:58:87:4b:92:50:
98:c2:4a:a8:ed:23:d0:fa:66:03:64:76:6f:37:5c:
61:85:e2:0e:01:d4:1a:ea:04:36:7f:89:fc:c3:93:
6f:f9:4a:b1:b8:95:e3:7e:97:ba:cb:89:99:29:5f:
bc:85:4b:43:eb:25:28:df:60:52:ac:cb:11:8c:17:
aa:d5:78:f7:a4:50:29:10:5e:78:ac:e4:ee:54:c6:
99:25:06:5f:ce:30:bc:65:a9:0c:fe:46:72:59:0f:
4b:36:c8:14:cf:29:c6:ff:5a:74:a1:b2:c2:db:7c:
4b:27:f8:a3:33:ac:38:f9:3b:ff:70:6c:e7:62:64:
da:de:9c:70:b3:39:5a:9d:6e:dc:f9:80:00:f5:3a:
2b:4a:8d:40:a7:90:7f:7f:fc:fc:c1:78:3a:f8:e9:
88:89:6c:2e:45:10:f0:e2:ff:bb:f9:af:9e:cc:30:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8A:B7:EC:16:E4:8F:26:58:80:91:BC:1D:9F:C8:C6:E2:44:54:D0
X509v3 Authority Key Identifier:
keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c7:7d:b4:41:d2:63:2f:6b:24:57:02:40:93:91:78:9f:ac:
de:f5:56:b8:7c:db:3b:5f:ca:11:50:7b:fc:ff:90:e9:30:86:
e9:8a:0d:c2:b0:6a:f0:6d:20:ab:c4:2b:49:a6:f7:c4:c2:48:
39:e8:53:7c:dc:6d:e4:9b:78:df:95:a2:55:54:68:f4:4b:e2:
a4:d5:cb:5a:38:5b:b0:4c:a6:0b:db:84:37:2a:d5:32:5f:7a:
0c:df:95:f2:0c:a1:75:56:03:e9:92:96:d7:25:e8:8e:58:3f:
4d:42:ae:58:8c:d3:af:e0:18:b7:44:12:c5:d8:9e:f0:2c:bf:
bf:01:1f:13:92:9d:53:86:27:7f:a4:f7:5c:a3:e2:77:47:a4:
3b:1f:d1:9a:db:fc:d7:e7:38:be:7d:a3:2c:4f:d7:73:3c:22:
08:ad:f4:e8:f5:57:8f:4c:3c:78:7a:01:a0:70:cc:11:fa:31:
26:b5:07:d8:f5:e4:9b:55:7b:d0:1a:c4:3c:7d:86:ae:ed:15:
e1:86:c7:f9:9b:e8:1d:bd:54:d9:2e:04:fa:d0:c5:51:1a:6f:
2a:f4:56:3b:16:3b:ac:bd:82:0d:dd:eb:7f:53:bd:ff:a7:f8:
05:4b:81:64:3c:68:fc:19:ec:52:79:6d:12:60:d4:02:3d:d0:
7c:43:20:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 12:52:16 2026 by rpki-client