This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File: FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier: e7sivVIbnw46GMK0uYhTAC1k3XBnPtj2tClf2proHQ4=
Subject key identifier: 7F:2B:36:7A:16:C1:49:5B:F1:34:67:F9:D7:E9:62:D1:F0:3D:49:95
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial: 019B7CA713B4CB68B3453235EBEB28D5A035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number: 01C9
Signing time: Fri 02 Jan 2026 03:01:22 +0000
Manifest this update: Fri 02 Jan 2026 03:01:22 +0000
Manifest next update: Sat 03 Jan 2026 03:01:22 +0000
Files and hashes: 1: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: 51yQsQlRQ17ZtP3MYUCZJXObtd3s5qazktA2Wk7zVyw=)
2: TODaCUho62Gehv-2PizceaR7ohg.roa (hash: EEJ5eEmNl9HYrtpyde+m1i67aXqJjeNEtfrXMxwcvR8=)
3: njg2vaPfciqJR5R5nbxzG2lmchg.roa (hash: hRVFVxSb35peMjVcWnWK+AgafRYFP/BZDTvTgJv0dRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:a7:13:b4:cb:68:b3:45:32:35:eb:eb:28:d5:a0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Validity
Not Before: Jan 2 03:01:22 2026 GMT
Not After : Jan 3 03:01:22 2026 GMT
Subject: CN=7f2b367a16c1495bf13467f9d7e962d1f03d4995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:d1:66:60:e6:d5:a4:4b:f5:94:8b:f7:1a:
47:bb:8e:95:70:3d:f7:25:ef:fd:0a:5d:38:64:fc:
49:89:7a:db:f8:bb:41:17:f5:4f:ff:e5:4b:76:cf:
07:c8:ae:9c:61:b1:dc:4f:74:44:06:0b:25:e1:da:
86:62:5c:9f:1d:fb:00:aa:b9:c8:ce:42:ca:18:fe:
eb:31:92:a5:a1:86:7c:89:df:de:0b:8f:5e:cc:8a:
8b:3f:ea:cd:dd:53:7e:7f:75:67:cf:3f:f5:34:e7:
3b:b2:98:85:99:d1:d9:90:21:52:42:fe:b2:d5:6b:
53:aa:4b:e5:cd:c5:50:3e:da:54:dd:07:2a:19:d7:
5a:71:39:2e:48:b0:7e:8a:3e:70:8a:46:7d:32:6d:
db:be:49:24:98:78:2b:f2:9a:55:72:be:f0:0f:99:
c9:a5:0e:8d:d7:49:db:9a:3c:ed:5a:53:18:b6:2d:
09:13:cc:bd:51:8e:ef:7f:21:62:a9:2a:c7:96:49:
b3:ab:fd:f3:6b:6c:90:a3:bc:b2:80:dd:cf:8c:0f:
72:81:dd:7b:bf:c0:75:8b:cb:9b:b1:74:3e:10:41:
5f:cb:25:6c:fc:bb:ca:dd:9a:4f:9e:9f:01:3b:ae:
08:a7:99:fa:ca:38:1b:f6:85:84:fb:77:90:96:46:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2B:36:7A:16:C1:49:5B:F1:34:67:F9:D7:E9:62:D1:F0:3D:49:95
X509v3 Authority Key Identifier:
keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c3:59:b3:2a:19:c9:2d:39:bc:d5:4f:76:d5:60:41:64:6e:
90:d8:1d:d8:1a:0e:59:d8:0e:34:86:57:3a:eb:9b:aa:96:30:
79:91:52:71:73:d3:e9:47:23:bb:de:d2:da:c3:31:88:d3:1e:
3d:ed:aa:39:d9:d3:35:d5:94:ba:32:e0:29:2c:f1:5b:3a:68:
4c:0a:41:ce:d7:a0:21:9b:6c:06:6f:59:9c:11:11:15:3f:f3:
c4:62:e4:c5:c2:ba:8f:cd:1e:6a:75:a1:aa:c5:77:d2:de:84:
64:ac:83:fb:61:10:40:ab:ea:a7:90:d4:53:19:94:de:c7:cf:
28:ac:e8:21:eb:26:9b:9c:36:8d:2b:50:0b:97:65:a4:2d:68:
b2:73:38:d7:b3:4a:b4:f7:f9:06:15:d2:01:36:bb:73:e2:59:
24:52:ad:1c:2d:0d:3c:b5:6d:d9:13:3b:5e:05:65:76:0b:74:
66:48:da:50:75:ac:4f:16:3d:fd:3e:52:0f:48:73:d8:2e:65:
67:ac:51:39:d6:d4:28:89:73:30:93:57:f2:b7:c0:c3:c3:47:
9a:ed:09:99:29:50:61:9b:26:f2:ac:65:d7:7a:e1:1d:59:40:
4b:41:34:81:7a:67:67:5a:13:76:be:26:10:da:4b:55:60:66:
ad:98:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 13:06:23 2026 by rpki-client