This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File: fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier: RGuiPwzN8q7ONwkF9SRIMA0x71NG+IAcvajnbg1290o=
Subject key identifier: 2A:73:90:49:31:D2:2D:3D:9B:F1:1A:32:5B:75:03:95:23:24:BB:84
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer: /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial: 019BDF92E1FBF81C217DD594255F87242EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number: 1807
Signing time: Wed 21 Jan 2026 08:01:43 +0000
Manifest this update: Wed 21 Jan 2026 08:01:43 +0000
Manifest next update: Thu 22 Jan 2026 08:01:43 +0000
Files and hashes: 1: c6SA4ELuvQVyR9kqQbJTsDZRqHQ.roa (hash: ezdtKJHH/isz/wjoYibJVODc5GKSAIgaQT3pgWHH64M=)
2: cA7qo8b7Nox5Eg3ETDI0GHB8bQo.roa (hash: hqs/XnPjGsbh3NQlfcv5MT/Lsf4omMXxdpDxcmlIJnY=)
3: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: snH539NcUlRMh6jABugGOGfvbueGD0FlvQUEz0dYiTc=)
4: szVJW4BISgtYuolAiNZFY_y2rbI.roa (hash: eLZ4AaO5OF9gS2a9pYE4naluJAqNXcxUNGLK/HZPDBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 08:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:df:92:e1:fb:f8:1c:21:7d:d5:94:25:5f:87:24:2e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Validity
Not Before: Jan 21 08:01:43 2026 GMT
Not After : Jan 22 08:01:43 2026 GMT
Subject: CN=2a73904931d22d3d9bf11a325b7503952324bb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:16:9c:1c:86:93:58:0c:57:65:1f:67:4b:
0a:24:22:6c:b9:9d:fb:eb:7b:0f:e3:50:2c:9e:cb:
79:45:81:0d:12:82:dc:b3:4e:2f:76:dd:93:1e:ff:
58:88:be:ea:29:5d:35:12:ce:3a:a8:e2:64:81:f8:
95:33:31:21:d7:13:81:af:08:92:31:5d:e0:fa:04:
a7:54:de:fd:02:06:fc:2f:7e:31:5d:e7:9c:ba:96:
6c:6a:97:f8:16:1f:99:fb:a9:cf:87:a7:2e:92:72:
7b:c2:9b:b4:7c:ae:bb:56:72:bf:68:74:f1:46:0a:
d0:66:d5:a2:88:c4:87:e7:3c:c8:4e:b3:a8:ca:43:
f5:99:39:c3:8a:58:c4:46:10:c4:53:9e:4a:3e:7f:
5f:11:cb:2e:dc:26:d4:8f:13:66:d6:df:1b:aa:57:
d7:03:14:d7:a9:24:ea:81:99:80:78:ed:20:9b:ca:
e3:24:85:99:bb:01:fc:1b:25:55:da:62:b5:63:15:
3e:58:7b:a4:59:c8:ff:ed:31:7a:f7:1c:ff:9e:64:
2f:48:55:e7:20:07:75:39:ce:47:e8:2b:52:50:19:
84:0f:51:02:7d:f8:1a:2a:e8:74:12:5a:37:82:cf:
e1:b2:87:af:e5:63:ee:f2:e9:cf:be:8d:9c:71:1c:
8f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:90:49:31:D2:2D:3D:9B:F1:1A:32:5B:75:03:95:23:24:BB:84
X509v3 Authority Key Identifier:
keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2c:de:86:71:69:c6:85:a3:23:d5:bd:3f:8e:f7:4e:6b:ac:
4b:88:de:23:dd:4c:b9:0f:01:99:19:0a:fd:34:e7:d1:b5:74:
63:18:a0:07:88:12:21:b1:28:8b:a5:e1:64:57:bb:c4:c1:4d:
87:1e:c7:6a:af:36:5b:9b:a7:66:a0:e1:b7:f2:42:d9:89:43:
54:5b:29:59:95:96:0d:bd:e7:86:2d:5f:0d:1b:24:8a:fc:58:
fc:d8:5b:e3:4a:8a:1f:ab:00:75:ae:6c:74:c0:1c:57:3b:3b:
0e:08:c3:fc:7b:57:00:13:20:48:22:34:ea:9d:12:56:87:2b:
a3:dd:6f:84:1f:e6:73:3b:d6:ab:ac:3c:1a:40:48:c7:03:5e:
ee:1b:21:6e:e4:de:61:75:f3:5e:89:45:cf:44:3d:5f:95:f5:
04:df:94:1f:e3:8d:c5:63:72:9c:d1:a8:d0:ff:97:dd:da:1e:
79:4c:02:f2:37:88:80:85:4a:6e:e3:b2:89:e4:33:44:d8:c9:
5e:23:8d:e3:34:52:9c:8b:16:83:86:5d:38:91:f7:7a:e4:e6:
9d:f0:35:55:53:19:b2:9e:dc:d3:74:4d:8c:99:8a:e4:72:3f:
79:45:da:df:79:4a:09:ef:74:da:aa:42:77:4e:6a:ee:64:04:
93:b5:df:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:44:14 2026 by rpki-client