This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier: GKTcoBOZdGYwMKtbAwDxuNv4ehsek+c034sls5lp4qU=
Subject key identifier: E7:FE:2B:A4:92:28:61:BE:03:16:A1:02:4F:33:8A:95:5F:E0:56:39
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 019BFCF79DF800C63A5EA25C7DE9D915BBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number: 0564
Signing time: Tue 27 Jan 2026 01:00:44 +0000
Manifest this update: Tue 27 Jan 2026 01:00:44 +0000
Manifest next update: Wed 28 Jan 2026 01:00:44 +0000
Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: BrqTw8qsgiquroNoJe9YJxIqpHnCF8WtUcb8yg44k3E=)
2: iQGTd2WXoLVwRsQ_8nC_udEAF7E.roa (hash: Xe100ccFvMhNIhN2VUssDCNyo4J+LE95jPp43mX4rJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:f7:9d:f8:00:c6:3a:5e:a2:5c:7d:e9:d9:15:bb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: Jan 27 01:00:44 2026 GMT
Not After : Jan 28 01:00:44 2026 GMT
Subject: CN=e7fe2ba4922861be0316a1024f338a955fe05639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:af:61:b4:5a:a6:a7:7f:7e:72:cd:c7:96:9b:
d9:db:43:df:6e:88:9d:4c:ed:3d:f1:0d:14:87:47:
bf:d8:87:05:eb:5b:15:2e:b5:60:2c:31:0e:9c:41:
38:ed:e1:b5:b4:83:27:5f:f3:cc:a3:8c:9a:46:fd:
50:02:b7:ab:68:86:8d:61:9c:5b:c9:9c:5d:9d:1a:
b4:d1:1b:48:ec:d0:1e:08:e8:2c:81:c3:60:b0:53:
e9:e7:c1:77:9a:ec:52:90:9b:7a:c6:a1:b1:3b:f5:
5f:47:57:4f:41:e0:87:2c:05:e2:c3:1e:57:4e:07:
36:83:0a:2f:ae:b4:8a:ae:30:06:6f:aa:79:c6:72:
6b:ae:69:44:b1:f1:6b:3d:f5:f4:22:c5:06:e3:c8:
d9:ae:1f:b7:b6:8c:60:00:59:7e:1f:85:45:eb:70:
38:b9:0f:56:5d:08:66:36:1b:fb:d8:91:78:f0:f0:
ac:74:93:fa:46:da:28:b3:b6:95:46:28:f3:23:97:
5e:cc:66:30:98:79:13:f1:8b:5a:c8:b0:9d:a1:16:
a6:61:ee:d4:be:3b:14:f0:7f:7d:c7:00:9d:46:71:
fc:0a:eb:b1:c4:c4:70:2b:c3:0e:d7:c7:61:42:50:
aa:03:67:66:ba:63:6b:b1:10:13:7d:f1:8a:ff:76:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FE:2B:A4:92:28:61:BE:03:16:A1:02:4F:33:8A:95:5F:E0:56:39
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:79:7c:bd:e2:a1:67:22:bf:22:8f:c7:45:57:64:bf:11:68:
a6:5a:e1:5b:1d:f2:f9:f9:1a:2a:d6:12:4c:3c:93:6a:bd:9c:
a8:79:38:08:ed:cf:52:ae:66:7f:9c:b4:e1:ca:52:34:cd:c8:
bb:bd:9e:40:75:c6:21:1d:db:1e:12:a0:6e:ec:97:37:38:70:
c9:51:c4:c6:dc:cc:ec:3b:93:83:4b:bd:9b:14:bc:52:8d:a9:
de:e2:ca:27:8d:81:1d:56:bd:50:d9:44:63:45:4a:d9:e7:d9:
e5:7f:b7:ff:63:c5:1a:4e:f2:34:fb:83:f7:b4:53:19:44:72:
62:d5:2e:a6:d9:86:6d:0b:2c:35:50:98:46:4d:2b:9e:8a:44:
a3:95:43:2c:3b:d0:e8:64:9d:23:f2:ab:9b:ea:7b:ae:1f:db:
e2:5e:42:88:8f:ab:19:25:1e:24:7f:53:bc:36:10:c6:61:a2:
ae:64:d4:97:19:f1:19:d2:39:ce:28:45:73:20:58:6e:cc:ad:
06:ed:2e:59:3f:1e:3f:2e:1e:83:63:98:41:c0:a1:43:0e:f7:
dd:6d:b9:02:7c:a2:36:8b:3d:4e:6f:1a:74:fa:22:bd:b3:9d:
f5:30:59:b2:04:b8:fb:63:9a:fd:3b:30:0e:d6:87:04:3b:f8:
80:66:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:23:58 2026 by rpki-client