This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: 18ulDp3FXC46nypYRnjfTHqipwqneiC+YlDglg+3nYo=
Subject key identifier: 15:8C:B1:A0:FF:7F:DB:9D:D8:AF:A7:FA:91:42:52:9E:DE:F6:27:F6
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019BFA64E6C7A8898BF2CF054BB310F6327F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 02C1
Signing time: Mon 26 Jan 2026 13:01:15 +0000
Manifest this update: Mon 26 Jan 2026 13:01:15 +0000
Manifest next update: Tue 27 Jan 2026 13:01:15 +0000
Files and hashes: 1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: Z+BelTZ7UE2PPb+JZRN+0htVvgEgnuN4mZLXM5l6LYE=)
3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:64:e6:c7:a8:89:8b:f2:cf:05:4b:b3:10:f6:32:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Jan 26 13:01:15 2026 GMT
Not After : Jan 27 13:01:15 2026 GMT
Subject: CN=158cb1a0ff7fdb9dd8afa7fa9142529edef627f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:cf:c6:54:aa:f7:c6:82:fb:63:6f:e4:92:
07:18:27:5b:43:d0:47:b8:fd:75:81:0c:e1:bc:24:
94:37:dc:a6:b3:3b:e3:e9:83:a8:79:b2:6f:30:b5:
a8:09:50:8f:b8:bb:c4:89:24:05:73:db:cb:70:1b:
05:df:27:96:91:2f:72:0d:e3:4a:ba:52:f1:0d:6f:
49:b6:44:11:71:e9:8d:e3:c6:9b:72:d1:25:ad:90:
2c:1e:3c:e2:03:e7:11:2b:b4:f1:40:64:e5:5c:fd:
a3:29:84:68:2c:05:dd:71:84:55:39:c6:14:e3:fb:
37:ae:8b:93:dc:1c:21:2e:16:85:0f:fb:60:66:18:
77:52:ce:f5:f1:dd:c5:c9:ea:05:8d:21:50:c1:b1:
a7:ba:5e:32:cd:96:ae:02:a0:64:01:a0:cf:49:41:
65:a2:87:be:50:53:9c:78:cd:a5:16:da:ab:00:b5:
be:c8:2c:22:87:f0:6e:77:40:8f:b5:7a:55:d5:ce:
b6:27:ff:c1:33:96:c7:31:65:cf:c3:1f:19:d0:f2:
59:c7:96:b8:ae:81:cb:77:35:a4:c6:f5:ec:74:2e:
60:d3:b6:f5:33:28:cf:cf:f2:06:f1:e2:6b:5b:f4:
c1:08:8e:a7:19:11:0b:d4:1e:df:09:b5:7b:da:93:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:B1:A0:FF:7F:DB:9D:D8:AF:A7:FA:91:42:52:9E:DE:F6:27:F6
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:eb:02:c5:0f:3d:db:75:ae:f0:8e:f1:c6:a9:a6:a3:db:f7:
2e:a9:35:23:80:37:1c:c6:bf:0b:40:a5:8f:9b:f9:e6:5a:19:
30:0a:eb:5f:96:21:af:b2:2b:ea:64:54:d2:55:cb:35:04:5d:
ff:b0:4d:51:8b:f4:a5:f0:41:30:54:f7:a0:4d:97:e1:a1:58:
4c:c2:5d:e4:62:3d:e8:4f:5f:08:53:67:75:60:b2:89:97:78:
61:28:49:fe:b6:8b:6d:7c:c3:75:1f:f1:f1:7b:bb:b4:83:7c:
51:8b:f7:fe:90:5a:c1:a0:cc:c5:16:ea:64:fc:ff:b3:a1:2e:
10:77:71:f7:25:0b:1f:c2:89:87:83:1a:bb:97:10:3c:9a:98:
af:94:ba:15:10:4f:24:44:91:3d:57:e0:1c:91:b5:a4:e1:d8:
2b:36:25:fa:5d:37:48:3d:10:5a:d0:b5:db:af:b0:f3:62:94:
6c:2b:ba:86:84:a1:41:dc:3f:d4:06:a1:21:e9:8d:30:ec:8d:
8d:6b:f0:02:d7:a4:5a:05:e2:56:5b:e3:5f:45:59:04:04:14:
f0:1e:bb:f3:d8:8e:f9:37:3e:44:e5:59:ab:12:d6:2a:78:3f:
0f:ad:1b:88:33:8d:3e:eb:6b:dd:26:5e:8d:40:f2:89:3b:60:
73:38:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:00:55 2026 by rpki-client