This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File: FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier: GMYnuor7YC66Ka1ryr5QIb1DCcp5MyytPbNHW3mViS4=
Subject key identifier: 85:D3:3E:22:CB:20:03:0E:3F:FF:0A:25:C0:53:8E:A4:BA:AD:D1:D3
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer: /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial: 019C1D27E13E6AC66ED70A62D10D36E61623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number: 17FE
Signing time: Mon 02 Feb 2026 07:01:18 +0000
Manifest this update: Mon 02 Feb 2026 07:01:18 +0000
Manifest next update: Tue 03 Feb 2026 07:01:18 +0000
Files and hashes: 1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: iBoGdBRFfVE0P+PkQ5LMMpR+MZidtfrja+2Jssg5y5c=)
2: X9c9GMVeYaYQqH2XyexJIcOVd5Q.roa (hash: LMkSmQgBQGug0NOzVugCkxvy72yFENtMgmfAEYQ2z28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:27:e1:3e:6a:c6:6e:d7:0a:62:d1:0d:36:e6:16:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
Validity
Not Before: Feb 2 07:01:18 2026 GMT
Not After : Feb 3 07:01:18 2026 GMT
Subject: CN=85d33e22cb20030e3fff0a25c0538ea4baadd1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:d2:ac:41:0d:66:68:af:06:92:6b:21:8d:
95:0c:80:55:a2:d4:23:b7:80:ca:22:c8:b0:f8:13:
52:fe:98:f6:57:5b:29:a3:30:50:0b:e3:c6:44:b9:
fe:f7:bf:7d:d7:cb:5e:78:ed:fe:25:ab:46:2c:5c:
4e:fa:59:a9:ee:cc:08:74:a4:e2:9b:b7:38:32:75:
20:24:4c:eb:eb:5d:28:78:37:29:01:5d:61:5c:b9:
81:b8:cd:fa:21:29:9a:1b:42:16:9a:2f:9e:b1:ae:
f2:c1:37:3e:2e:28:f2:9c:f7:30:d3:8c:b0:3d:79:
27:ae:98:21:90:5b:8a:fd:93:d0:61:25:72:bb:d4:
d6:4d:72:08:ae:93:0e:9c:d5:3b:0d:26:7e:8d:89:
c0:44:1e:a4:3a:8a:b3:57:2b:3c:ab:53:be:ad:df:
b6:61:bd:b4:cc:5d:eb:b9:b3:02:44:59:0a:78:01:
68:ce:f3:0b:15:7a:27:b7:5e:9f:fd:67:8e:8c:61:
f5:4c:2d:64:df:32:27:a1:2e:9f:a9:6a:38:a0:a3:
e0:42:8f:52:5d:49:29:ab:6b:85:f7:3b:ce:17:2c:
3d:0b:37:39:d0:2d:c0:e2:01:35:fb:65:b0:42:79:
43:cb:18:09:2d:fe:c2:63:b2:d0:de:1c:ad:db:ee:
36:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D3:3E:22:CB:20:03:0E:3F:FF:0A:25:C0:53:8E:A4:BA:AD:D1:D3
X509v3 Authority Key Identifier:
keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:42:ee:15:a2:2e:97:38:a2:96:72:e2:74:f3:a4:14:d8:07:
6f:0f:b5:09:de:33:c5:4a:ff:4e:d0:49:2f:9d:bd:59:82:23:
f7:3a:66:d6:e0:2d:2a:8f:06:f0:b0:bd:52:32:b8:24:82:7d:
08:84:66:d7:b7:61:f3:2b:e5:2b:a7:84:7a:1c:d8:1a:d3:b8:
5b:75:0d:c2:55:54:55:b0:00:07:09:47:29:99:58:d7:82:40:
53:7a:24:08:28:cf:a9:2a:d3:c7:18:71:9e:77:4f:70:07:28:
53:de:97:3d:28:01:23:83:88:47:fb:12:5f:be:2c:09:8c:74:
4a:64:88:41:87:e7:ad:e9:d1:ac:13:29:98:2a:19:9e:0e:ee:
ae:39:cc:f1:eb:23:32:b9:ee:14:93:37:42:b7:9b:bb:0f:98:
a5:38:7b:4c:06:cf:37:20:57:a4:b5:d2:8b:05:da:73:bb:95:
fc:9a:66:79:4a:b6:b9:ed:f6:38:78:e0:3c:9a:86:75:61:67:
b1:2e:ad:dc:2b:c5:03:e9:67:e2:dd:d6:33:20:38:44:e2:6c:
1b:99:35:63:ec:2a:a7:3e:a4:c8:c2:ce:92:7d:f0:e9:aa:4b:
68:3c:da:04:97:6c:a9:15:a3:75:9c:61:1e:9c:40:8d:9a:61:
ae:cd:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:46:47 2026 by rpki-client