This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: WbHgH3KMUBt09PaLiHQs+kiuzWDxUWUyGpLwTfaZ0tI=
Subject key identifier: DE:7B:00:F1:0C:E7:03:26:52:98:53:8C:CE:E7:27:58:93:BD:70:9B
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019BD8B4AA24AC1BC378ECE2B7D2D5EF784E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 17FD
Signing time: Tue 20 Jan 2026 00:01:17 +0000
Manifest this update: Tue 20 Jan 2026 00:01:17 +0000
Manifest next update: Wed 21 Jan 2026 00:01:17 +0000
Files and hashes: 1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: 6uS2mb4PEpvPqsuHoR4C5k2TDjVzIjdkR5VcBnlPvyE=)
2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d8:b4:aa:24:ac:1b:c3:78:ec:e2:b7:d2:d5:ef:78:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 20 00:01:17 2026 GMT
Not After : Jan 21 00:01:17 2026 GMT
Subject: CN=de7b00f10ce703265298538ccee7275893bd709b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:fd:3b:e0:24:8a:64:95:7d:b8:c6:5d:93:
a0:fb:b4:66:e3:c2:fd:22:aa:cd:36:63:0f:22:8a:
29:df:47:41:1e:31:d4:ac:77:5d:05:5d:54:ab:ab:
3b:00:84:57:95:b3:18:17:73:42:61:53:f6:a0:50:
9e:71:c7:4f:0c:f3:dd:45:a8:ff:4a:70:bb:2d:f6:
7b:76:a5:88:86:50:60:0f:0f:bc:ba:1e:dd:67:cb:
f6:59:13:0e:e6:70:48:07:82:24:7c:f3:40:93:ba:
69:5a:50:58:bf:8a:2a:cd:df:fd:1e:b0:c8:45:1b:
48:61:d2:16:23:6c:9e:8f:27:64:39:0f:12:d1:9e:
8d:df:9d:b7:37:dd:02:37:ff:34:c7:97:4c:c0:b2:
8e:b5:2f:8c:1b:ea:56:c3:fa:a7:9d:e8:ee:0a:9a:
c7:8c:58:61:da:43:b2:eb:95:ee:df:fc:e1:38:9a:
d3:00:02:91:2f:52:33:67:8e:5c:74:b1:9f:9c:a1:
e1:fa:cb:03:79:4f:66:07:53:c5:bf:d6:04:d0:ac:
5d:0b:56:72:55:14:00:7a:8e:57:40:fe:bb:ac:2a:
2d:4e:74:8d:91:69:13:00:8b:1b:fc:67:58:8f:48:
9b:87:ad:67:f2:16:48:81:eb:06:02:84:c0:cb:d6:
c5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7B:00:F1:0C:E7:03:26:52:98:53:8C:CE:E7:27:58:93:BD:70:9B
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b8:52:2b:4a:17:1b:79:18:f2:c0:b5:bc:99:fe:6e:00:fe:
c0:f9:44:15:a0:45:b2:9a:50:10:07:3d:6c:ba:51:ce:6c:d9:
f7:1b:d9:bf:8d:8e:c8:46:c8:08:6f:6c:cf:13:1c:0b:c3:04:
1c:f2:ea:ab:a6:9a:b8:b6:04:50:7d:c7:5b:58:f7:26:95:ce:
8a:e8:37:6a:22:97:72:17:4b:7f:df:d7:31:a3:e8:c6:06:0a:
91:1d:0a:c7:88:2f:5e:95:da:7a:c2:b4:1f:8d:74:f3:52:9f:
e1:98:d5:29:ff:6b:22:09:d1:0c:2e:f9:0f:ec:8d:7c:15:ea:
c8:de:cc:77:01:df:35:e5:38:66:31:1d:86:0a:54:c6:ad:ac:
f4:0e:48:73:f0:83:85:c7:67:1c:24:f9:f2:87:76:63:74:8f:
db:67:49:08:c7:49:76:02:43:23:ac:27:c2:82:62:d4:ae:32:
0f:4d:19:6b:bb:29:79:57:80:f3:04:e6:e3:be:7d:42:96:36:
16:0d:29:17:fa:d6:b2:b0:ab:34:56:a0:ae:a3:4e:f6:ff:1c:
a8:45:15:90:c7:1d:3a:f6:af:08:c6:a6:86:d7:07:b4:65:fc:
5e:a3:13:1c:49:a8:ac:67:3e:f7:5c:c6:8a:5f:f5:aa:32:bb:
df:6b:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:00:47 2026 by rpki-client