This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
File: fi3yT4V3zASMPHn7jbFIPnt14l0.mft (raw, json)
Hash identifier: TLx8seGLuREdvXF/qY0ONFNlkPIjz22YOx93rBHNyBM=
Subject key identifier: 53:91:AD:EE:D2:17:A7:E5:68:16:82:5F:A3:1C:B9:86:AE:F9:E9:32
Authority key identifier: 7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D
Certificate issuer: /CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
Certificate serial: 019C42B42DFCA9AB6837A37843F715104B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
Manifest number: 0299
Signing time: Mon 09 Feb 2026 14:00:29 +0000
Manifest this update: Mon 09 Feb 2026 14:00:29 +0000
Manifest next update: Tue 10 Feb 2026 14:00:29 +0000
Files and hashes: 1: SHg6DlIPYSjJdqUQkcfbowdEENo.roa (hash: uNxz49s0oCVTfxNZpUTxqGddLoqN/nonyiaoh+e/0+g=)
2: fi3yT4V3zASMPHn7jbFIPnt14l0.crl (hash: raqPolIi6qaVRPIZlLNK7oeykf1UL3AgJFNY+FXip1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:2d:fc:a9:ab:68:37:a3:78:43:f7:15:10:4b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
Validity
Not Before: Feb 9 14:00:29 2026 GMT
Not After : Feb 10 14:00:29 2026 GMT
Subject: CN=5391adeed217a7e56816825fa31cb986aef9e932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:da:2f:c2:c6:06:f2:f2:1b:17:95:99:7b:
6e:1a:11:c4:fc:57:d4:9d:27:4c:a0:66:44:be:d4:
70:ee:76:f0:7f:e3:a4:62:76:e4:62:44:53:6f:83:
57:4b:8a:a4:0f:64:45:90:b5:10:56:eb:25:39:ef:
0f:88:c2:4d:aa:0f:da:08:70:28:7c:47:9b:1b:b4:
7a:d3:ce:5d:e5:24:92:59:e6:ff:41:40:c6:5d:8e:
af:1b:51:b5:47:fc:ef:04:57:cd:55:cb:0c:4b:ca:
66:de:d1:a7:16:d8:41:85:8f:b9:29:84:aa:f8:b3:
e0:0e:77:0e:ac:76:33:18:19:59:43:f6:3b:ff:f6:
d0:77:3b:06:bf:07:c0:a8:1f:c5:34:66:83:41:60:
2d:34:e3:eb:2e:6e:92:85:ae:1e:58:a2:05:ce:98:
bf:58:0c:57:77:f2:a9:4e:e9:ac:0b:8e:b9:43:1c:
3f:fc:0f:34:7a:f4:e4:e6:0f:1b:4f:2a:f6:38:c9:
9b:66:e0:63:47:08:47:b0:cb:92:03:9a:d9:98:03:
94:d0:08:b1:dd:15:5e:dd:7d:ba:d0:04:d5:cb:2e:
e3:73:19:20:6f:87:9c:91:12:0f:dc:72:f0:a3:e6:
52:4e:01:d7:f8:f3:a2:57:05:d9:57:7c:78:8c:13:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:91:AD:EE:D2:17:A7:E5:68:16:82:5F:A3:1C:B9:86:AE:F9:E9:32
X509v3 Authority Key Identifier:
keyid:7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:18:c6:24:d3:56:07:3e:d1:94:50:e0:e4:d2:2b:08:f4:04:
15:75:69:b3:01:fb:97:d3:81:f1:43:33:3a:48:e5:d6:ff:d1:
ca:bb:80:c7:00:43:12:29:87:a6:64:c8:bf:07:09:a0:47:5d:
26:2f:76:93:ea:62:38:aa:14:ba:5b:12:80:27:76:20:60:91:
4a:36:49:5c:20:48:86:96:4a:0b:87:49:90:f0:32:55:c7:07:
e6:09:ab:7d:2d:b3:69:5a:b6:d1:17:2e:b0:dd:33:ea:04:f1:
8f:6d:4b:4d:3e:a6:72:4e:1c:45:b7:2b:15:48:0b:0c:fe:7c:
66:5b:94:c1:9e:7c:ca:de:e3:d4:a3:14:29:02:d1:b1:56:37:
dc:ef:79:3e:9a:33:da:88:4b:d5:1e:13:63:2b:7b:7c:23:0f:
04:7a:7d:b7:fb:02:e0:c6:0a:15:29:5d:94:a0:44:da:90:a8:
b6:8c:4a:34:57:df:e7:c9:83:9b:b1:9b:71:e4:28:12:3e:37:
e5:68:9f:d5:a7:df:6d:13:66:7b:94:cf:de:16:2e:08:af:da:
d2:4a:09:8a:38:ac:bb:ab:78:fd:f5:a7:5e:f6:3f:c6:4d:f7:
0c:5e:52:96:87:af:2a:bc:b7:35:6d:83:2d:25:ea:1b:e5:25:
5e:b2:c6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:11 2026 by rpki-client