This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier: yPoZgiwsNPFlhYfLBhjIkzPqpX6OoYOuuXkMf3TpFNU=
Subject key identifier: B6:92:C4:E2:83:AE:F5:FD:E8:9B:79:D9:6A:CB:59:C8:19:06:1B:C5
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 019BFB772DBA1CAB7B3A2EBF27977A2C88F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number: 17FA
Signing time: Mon 26 Jan 2026 18:00:50 +0000
Manifest this update: Mon 26 Jan 2026 18:00:50 +0000
Manifest next update: Tue 27 Jan 2026 18:00:50 +0000
Files and hashes: 1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: XPHZ9R5KEVT+alQbT3mIG99tMYjYfrfqbbgZVZbKtnE=)
2: 5a4DGw-2-kfHgsxaKehjNXnuCqE.roa (hash: sUZyzh0MHY05jTMpuhKk6CIitn9nHfz+b8Hqjb1Mmtw=)
3: OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa (hash: tx3hkLfc3TC5UcoBMbPeFsEp4hR2aCEn9vjo3l+XOeY=)
4: SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa (hash: npoD/pw5DyWoHlNaWh25GF0UUSoDz0q9Mp04Q5//gew=)
5: heDTdXiIU3U5I0MIE__M9Lti7cM.roa (hash: znxQVerRqN+xoXF1iL3YCKDXrvt5ZgceZ8vYsUDl8wQ=)
6: iZOSPrtVr9oSzB_9S2j4xEXS2ss.roa (hash: nZdp839a8RxYxDObd4MRvvPLHkIL2KF3YjG1vFoxffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:77:2d:ba:1c:ab:7b:3a:2e:bf:27:97:7a:2c:88:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 26 18:00:50 2026 GMT
Not After : Jan 27 18:00:50 2026 GMT
Subject: CN=b692c4e283aef5fde89b79d96acb59c819061bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:08:3a:aa:af:28:b2:fe:b8:02:6b:03:ec:
00:35:52:f5:dd:f6:9c:19:d5:05:5c:6a:d0:f8:45:
08:4b:a8:fe:ba:75:6a:6b:6e:1c:0e:e0:aa:4f:03:
9d:23:71:f6:24:18:f3:bb:2c:77:48:a1:53:27:5c:
8f:0f:30:bc:15:ec:8c:60:f9:7f:de:b7:73:33:de:
eb:23:ef:64:29:35:28:2e:e8:d9:36:78:0a:ed:db:
6c:0b:95:74:2b:3d:9b:60:ed:83:cb:c5:73:5e:7a:
28:bd:fb:07:5b:9b:df:bf:7d:c9:d9:49:73:b0:37:
b0:16:b4:71:01:dd:97:15:83:fe:27:25:45:3c:05:
92:8f:b8:60:14:ea:db:b1:2f:72:0d:d2:f4:2e:cd:
c9:4c:8d:0b:47:bc:7c:0d:48:17:99:58:ae:f8:12:
f6:66:31:37:cb:95:81:f5:e1:9f:a9:cb:59:c8:5a:
2a:68:89:82:59:4d:42:2e:7d:c4:ce:2c:30:d1:7d:
9f:4f:ac:7f:d8:dc:ae:7b:10:b4:ca:a0:8b:44:4e:
72:df:44:29:ca:07:c9:bd:2c:8d:fa:c6:28:43:6e:
0c:cc:9f:95:51:76:02:9e:f6:ba:8f:0e:49:f5:50:
2c:09:e2:32:26:16:32:a4:a5:7d:e1:36:6c:4d:04:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:92:C4:E2:83:AE:F5:FD:E8:9B:79:D9:6A:CB:59:C8:19:06:1B:C5
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f2:64:b0:eb:2c:df:9d:ad:f6:17:a5:6d:45:bc:a3:8e:b3:
01:c0:31:f8:32:23:0c:93:fc:e1:5d:b0:27:85:71:4d:09:ea:
9f:a5:7f:1d:7a:9f:88:91:d8:53:9a:64:9a:4d:1b:3d:66:5b:
26:04:0d:d1:ce:89:95:76:25:71:96:ee:2e:71:75:fd:aa:9c:
29:8e:a9:fe:27:32:02:0b:92:0f:ea:12:ad:38:9a:a3:3e:d8:
04:35:c7:94:04:08:88:49:ff:1e:67:0a:85:40:1f:b6:b6:81:
23:b5:d0:20:f7:d5:a8:a4:b6:c3:ef:bc:65:d9:31:0f:ce:c8:
88:09:4f:21:0c:7e:46:81:c3:96:35:12:b2:52:7a:8d:d8:79:
b8:b1:e1:42:6c:34:46:b4:7d:7b:ca:50:ff:3d:4f:c1:83:59:
a8:c1:b1:0e:ab:d7:7f:71:60:23:5c:70:b0:9d:5d:02:c3:f3:
f9:7c:2b:fc:79:7d:5f:ec:33:73:c2:6a:18:73:30:9f:98:5a:
a4:09:9a:08:7a:f7:9b:9d:ff:65:9f:bb:94:b7:be:16:45:38:
eb:b1:2d:3c:2c:63:60:d2:47:dc:c8:c5:14:fe:34:46:f3:64:
87:72:01:2d:f0:ce:7c:3e:ff:3a:36:72:e3:9a:05:71:c0:f6:
f7:67:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:11:51 2026 by rpki-client