This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File: fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier: 5TQFSp7StqlPNhwlvDJ9M1s2OjPhiJIN8SQVG32VrYU=
Subject key identifier: F1:05:E7:17:21:7C:D8:B5:DA:69:E0:F3:DE:2B:84:C6:C6:7B:CA:F7
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 019BF9F679F6DAD4EDB54E0B6353A1E6EC48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number: 17F2
Signing time: Mon 26 Jan 2026 11:00:38 +0000
Manifest this update: Mon 26 Jan 2026 11:00:38 +0000
Manifest next update: Tue 27 Jan 2026 11:00:38 +0000
Files and hashes: 1: 1-aCnSCh2k6EoO6v8K8YGH6-ZFag.roa (hash: TXqm016RQPYqrirzt4ClgfgwS79aUK1qbegI6yBDVqc=)
2: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: V6Gn/YMLL9fEvCZ6nq9bHJA+r3ekLKsAtpGqjtekZb0=)
3: uhXgdMnU2sK7rATt-_JTycGnweE.roa (hash: oOHRvsricrI0IDhV5HO6fjuBbrjUqImOQ3QUZQn7MEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:f6:79:f6:da:d4:ed:b5:4e:0b:63:53:a1:e6:ec:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: Jan 26 11:00:38 2026 GMT
Not After : Jan 27 11:00:38 2026 GMT
Subject: CN=f105e717217cd8b5da69e0f3de2b84c6c67bcaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:e2:74:f3:bf:0b:19:c1:92:85:45:b5:ce:
d3:e8:fa:35:c1:73:42:51:4b:6c:91:0a:a1:7e:76:
ea:c6:e8:47:7e:6b:b5:c4:86:76:9c:e7:20:b7:76:
c5:61:fa:8d:6e:50:4c:c1:71:51:35:bc:ed:96:57:
3c:25:ed:28:5b:2d:ed:bc:73:bf:d8:62:48:1e:eb:
20:55:aa:80:0e:c7:a4:ad:5f:9e:46:47:5a:43:79:
d4:77:3e:45:ed:55:9a:4b:8e:11:22:d8:30:35:9a:
dd:ed:d9:a6:38:8b:a6:26:86:08:8c:65:73:5c:53:
ee:0f:bc:ac:95:87:49:79:05:09:f0:c0:64:52:ad:
84:29:8c:22:d7:21:5e:25:d4:1b:70:af:d5:e4:40:
d3:89:75:0a:cf:1f:ce:71:82:6d:87:ca:76:8e:49:
8f:b6:14:cd:c7:35:dd:36:37:51:31:09:f0:aa:0b:
c9:86:6a:c5:07:90:b4:6c:0b:c0:dd:0d:58:0d:68:
56:f6:22:3e:c9:04:ac:cc:aa:48:ee:74:12:2f:27:
b1:b2:69:e3:56:dd:09:3c:2b:ff:6d:30:57:e0:25:
b3:cc:41:30:1f:74:be:6d:80:46:0a:17:e0:8c:ea:
ad:5f:99:75:95:67:9e:d4:0f:ae:8c:ae:bd:74:47:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:05:E7:17:21:7C:D8:B5:DA:69:E0:F3:DE:2B:84:C6:C6:7B:CA:F7
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c0:bd:34:9e:68:60:ae:24:0d:a5:66:3a:a4:1f:33:5a:5d:
33:20:7b:4e:22:58:d5:13:c8:21:c9:a8:3a:37:a3:04:1c:9e:
2d:b0:02:c5:f2:71:5d:2d:65:5d:5c:55:72:31:bb:55:d1:89:
92:0e:c8:48:c7:0b:cb:bc:c6:9a:a3:22:29:31:ef:59:03:82:
21:6a:1f:b5:6b:32:2c:bf:c0:7b:f2:a7:9d:88:72:fb:96:e5:
89:cc:ed:bd:b8:16:65:a0:e8:97:92:df:8c:32:72:fc:cf:37:
b5:33:3c:0f:15:6f:27:b1:65:3b:da:f1:35:68:e6:21:36:44:
72:b3:a2:29:07:37:62:07:96:d0:d7:12:5f:a9:e6:21:45:c0:
4c:2e:7b:ee:ab:b3:c3:0b:ef:23:ac:cc:8c:00:a4:9a:d6:e1:
b5:cf:99:1d:fb:7f:0b:7c:40:4a:da:30:54:c8:2f:8d:6d:44:
f0:48:78:3b:4e:89:d2:a7:b3:a2:c9:be:92:b0:39:b3:1f:46:
33:ea:98:e4:d7:00:c6:09:6e:70:44:04:91:a5:e3:89:52:95:
9b:ec:b1:de:97:5b:89:15:d5:3f:61:d7:38:33:04:32:0a:79:
7d:c4:dd:31:cb:0a:70:a2:29:14:ef:41:e4:7d:2c:53:93:a5:
e6:33:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:39:31 2026 by rpki-client