This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
File: Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft (raw, json)
Hash identifier: iym3hXmTq6AbVHOfbSGTTe776cfubr9w5jg4rk8YoQc=
Subject key identifier: 4E:10:9C:E6:26:CA:3C:21:33:68:B9:85:D8:D8:EE:EB:42:CF:6A:98
Authority key identifier: 16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1
Certificate issuer: /CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
Certificate serial: 019BAC8161A665D6D48EEBFF46B362C762FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
Manifest number: 17BE
Signing time: Sun 11 Jan 2026 10:01:58 +0000
Manifest this update: Sun 11 Jan 2026 10:01:58 +0000
Manifest next update: Mon 12 Jan 2026 10:01:58 +0000
Files and hashes: 1: Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl (hash: 9GADV3e0H5r5xfgNF+bdwH1eXokHrsMN6LkG333Z/E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ac:81:61:a6:65:d6:d4:8e:eb:ff:46:b3:62:c7:62:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
Validity
Not Before: Jan 11 10:01:58 2026 GMT
Not After : Jan 12 10:01:58 2026 GMT
Subject: CN=4e109ce626ca3c213368b985d8d8eeeb42cf6a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:41:5b:9a:6b:52:46:30:12:dc:ca:9d:8f:
36:2b:92:7d:3b:af:95:d1:5e:70:cc:3d:87:a7:aa:
93:8c:85:3d:f6:9f:20:06:5e:7a:3e:dd:0f:06:ca:
b4:0e:cb:0e:68:3a:48:e3:b8:23:32:44:5f:8c:b9:
2e:11:7a:53:97:0e:3c:b8:3e:b2:c9:a1:14:d1:17:
74:b9:38:b7:67:ac:ba:a2:85:89:08:bf:72:65:33:
e4:98:83:fa:44:47:99:2d:df:c1:6d:d9:3a:b4:6b:
dc:09:67:49:67:f2:89:99:b7:e5:c5:64:58:c2:11:
ac:d4:11:38:f4:57:7e:f7:a3:27:08:50:c8:ab:ac:
ca:8a:27:9a:26:04:59:a0:5e:1b:54:e8:aa:66:a2:
b9:4b:c0:37:67:ae:1c:e4:8f:39:a8:37:11:eb:cc:
4d:ba:d3:86:d5:df:95:b8:66:c9:38:06:8f:8f:f5:
b2:2c:87:c0:ef:e2:5a:6b:6d:3f:56:34:c7:26:00:
26:8a:2d:d4:c8:60:46:fd:a7:6f:ce:08:a8:c3:76:
6b:67:71:6c:b2:87:54:33:71:86:35:69:d4:8f:a8:
c0:6f:9e:6b:34:51:de:18:54:0f:e5:3a:15:38:b2:
b1:fe:5a:f1:27:8d:a5:85:76:03:13:45:e5:22:94:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:10:9C:E6:26:CA:3C:21:33:68:B9:85:D8:D8:EE:EB:42:CF:6A:98
X509v3 Authority Key Identifier:
keyid:16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ea:b3:ec:6c:78:6f:40:18:c6:d5:bb:1d:4b:8b:66:94:e2:
e4:2b:97:32:01:4f:d0:c8:6e:44:20:09:2d:ea:65:91:7d:c9:
bf:d6:f3:98:54:84:d8:8f:2d:86:c8:d7:e2:cf:05:30:b0:58:
bd:1d:20:2c:79:d0:69:90:c6:0f:75:03:77:c6:67:2a:25:77:
53:8a:43:f2:53:ca:40:b6:3f:9d:38:0f:69:8c:bb:59:61:62:
61:40:85:1d:d2:b6:88:43:86:77:6f:e3:3f:bc:f8:a5:26:5a:
18:22:5f:a5:8f:81:46:16:e2:b3:c1:b8:1c:5a:35:4f:46:6d:
04:6d:a5:9c:fa:2a:4c:ac:4a:bc:a6:31:32:9d:eb:a9:90:9c:
99:8f:98:6b:16:68:37:26:5b:8f:1a:ad:b5:15:92:7a:c1:ba:
9c:a3:18:6d:66:2a:2b:36:7e:10:c4:f5:aa:50:9d:5a:78:47:
01:71:23:a1:c5:50:3c:27:41:73:d5:47:f6:da:a0:91:e3:85:
aa:91:32:56:bf:8c:d1:0b:47:0e:74:d3:a6:43:85:b2:eb:94:
bc:69:9d:ab:fc:ee:37:74:d5:c1:f0:da:d9:f2:00:21:c3:9b:
5f:9a:3c:01:61:72:40:05:2a:0a:e6:53:9c:7c:cc:99:25:82:
b9:4f:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:04:57 2026 by rpki-client